OSV-2022-1193 Heap-buffer-overflow in archive_read_has_encrypted_entries

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53594 Crash type: Heap-buffer-overflow READ 8 Crash state: archivereadhasencryptedentries libarchivefuzzer.cc...

OSV-2022-1188 Stack-buffer-overflow in authentic_get_tagged_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53536 Crash type: Stack-buffer-overflow READ 1 Crash state: authenticgettaggeddata authenticparsecredentialdata authenticpingetpolicy...

OSV-2022-1181 Heap-use-after-free in template_execute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53469 Crash type: Heap-use-after-free READ 1 Crash state: templateexecute msgpackunpacknext cbstdoutflush...

OSV-2022-1180 Heap-buffer-overflow in json_common_entity_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53468 Crash type: Heap-buffer-overflow READ 8 Crash state: jsoncommonentitydata jsonobjectswrite dwgwritejson...

OSV-2022-1178 Heap-buffer-overflow in bytes_copy_rectangle_zero_padding

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53456 Crash type: Heap-buffer-overflow WRITE 7 Crash state: bytescopyrectanglezeropadding cmdputbits clistchangebits...

OSV-2022-1177 Stack-buffer-overflow in FLAC::Decoder::FuzzerDecoder::metadata_callback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53454 Crash type: Stack-buffer-overflow WRITE 8 Crash state: FLAC::Decoder::FuzzerDecoder::metadatacallback FLAC::Decoder::Stream::metadatacallback readmetadata...

OSV-2022-1176 Heap-double-free in dwg_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53483 Crash type: Heap-double-free Crash state: dwgfree llvmfuzz.c dwgfree...

OSV-2022-1175 Stack-buffer-overflow in sc_path_print

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53417 Crash type: Stack-buffer-overflow READ 1 Crash state: scpathprint scselectfile scpkcs15initrmdir...

OSV-2022-1174 Heap-buffer-overflow in crc64_clmul

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53423 Crash type: Heap-buffer-overflow READ 16 Crash state: crc64clmul lzmacrc64 lzmacheckupdate...

OSV-2022-1173 Heap-buffer-overflow in parse_content_length

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53397 Crash type: Heap-buffer-overflow READ 1 Crash state: parsecontentlength gethdrfield parseheaders...

OSV-2022-1172 UNKNOWN WRITE in instantiate_many::_::run::hb58bf0fc7b8817e5

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53381 Crash type: UNKNOWN WRITE Crash state: instantiatemany::::run::hb58bf0fc7b8817e5...

OSV-2022-1169 Heap-use-after-free in output_thread

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53324 Crash type: Heap-use-after-free READ 8 Crash state: outputthread stepcallback flbtaskdestroy...

OSV-2022-1168 Heap-buffer-overflow in parse_subrip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53210 Crash type: Heap-buffer-overflow WRITE Crash state: parsesubrip parsewebvtt gstsubparsechain...

OSV-2022-1166 Use-of-uninitialized-value in TLSDecodeHandshakeHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53209 Crash type: Use-of-uninitialized-value Crash state: TLSDecodeHandshakeHello SSLv3ParseHandshakeType SSLDecode...

OSV-2022-1165 Heap-buffer-overflow in parse_content_length

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53199 Crash type: Heap-buffer-overflow READ 1 Crash state: parsecontentlength gethdrfield parseheaders...

OSV-2022-1164 Heap-buffer-overflow in virtio_net_queue_enable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53186 Crash type: Heap-buffer-overflow READ 8 Crash state: virtionetqueueenable virtioqueueenable virtiopcicommonwrite...

OSV-2022-1163 Negative-size-param in mrb_str_format

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53183 Crash type: Negative-size-param Crash state: mrbstrformat mrbfsprintf mrbvmexec...

OSV-2022-1162 Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53181 Crash type: Null-dereference READ Crash state: NULL...

OSV-2022-1161 UNKNOWN READ in pack_unpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53161 Crash type: UNKNOWN READ Crash state: packunpack mrbpackunpack mrbvmexec...

OSV-2022-1160 Index-out-of-bounds in str_init_embed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53173 Crash type: Index-out-of-bounds Crash state: strinitembed strnew mrbstrnew...

OSV-2022-1159 Heap-buffer-overflow in LibRaw_buffer_datastream::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53158 Crash type: Heap-buffer-overflow WRITE Crash state: LibRawbufferdatastream::read LibRaw::uncompressedfpdngloadraw LibRaw::unpack...

OSV-2022-1157 Stack-buffer-overflow in merge_utf16be_ascii

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53149 Crash type: Stack-buffer-overflow WRITE 1 Crash state: mergeutf16beascii probeisoNUMBER superblocksprobe...

OSV-2022-1155 UNKNOWN WRITE in wasmtime_fuzzing::oracles::instantiate_many::h1a28dda90c13f877

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53102 Crash type: UNKNOWN WRITE Crash state: wasmtimefuzzing::oracles::instantiatemany::h1a28dda90c13f877 instantiatemany::::run::he4646225c064edb2...

OSV-2022-1154 UNKNOWN READ in pcpp::SomeIpSdLayer::SomeIpSdLayer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53099 Crash type: UNKNOWN READ Crash state: pcpp::SomeIpSdLayer::SomeIpSdLayer pcpp::SomeIpLayer::parseSomeIpLayer pcpp::UdpLayer::parseNextLayer...

OSV-2022-1153 Heap-buffer-overflow in parse_via_param

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53080 Crash type: Heap-buffer-overflow READ 1 Crash state: parseviaparam parsevia gethdrfield...

OSV-2022-1151 Heap-buffer-overflow in mg_mqtt_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53038 Crash type: Heap-buffer-overflow READ 1 Crash state: mgmqttparse fuzz.c...

OSV-2022-1150 Heap-buffer-overflow in js_free_function_def

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53055 Crash type: Heap-buffer-overflow READ 4 Crash state: jsfreefunctiondef jsparsefunctiondecl2 jsparsepostfixexpr...

OSV-2022-1149 Heap-buffer-overflow in gbNUMBER_mbc_enc_len

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53036 Crash type: Heap-buffer-overflow READ 1 Crash state: gbNUMBERmbcenclen matchat searchinrange...

OSV-2022-1148 Stack-buffer-underflow in gs_type2_interpret

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53054 Crash type: Stack-buffer-underflow READ 4 Crash state: gstype2interpret gstype1glyphinfo pdficffglyphinfo...

OSV-2022-1145 Heap-buffer-overflow in gbNUMBER_mbc_enc_len

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53046 Crash type: Heap-buffer-overflow READ 1 Crash state: gbNUMBERmbcenclen onigencmbnmbctocode gbNUMBERmbctocode...

OSV-2022-1144 Heap-buffer-overflow in onigenc_mbn_mbc_case_fold

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53041 Crash type: Heap-buffer-overflow READ 1 Crash state: onigencmbnmbccasefold euckrmbccasefold matchat...

OSV-2022-1143 UNKNOWN READ in Ins_MSIRP

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53052 Crash type: UNKNOWN READ Crash state: InsMSIRP RunIns InstanceReset...

OSV-2022-1142 Heap-buffer-overflow in onigenc_unicode_mbc_case_fold

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53030 Crash type: Heap-buffer-overflow READ 1 Crash state: onigencunicodembccasefold mbccasefold stringcmpic...

OSV-2022-1141 Heap-buffer-overflow in LibRaw::phase_one_correct

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53039 Crash type: Heap-buffer-overflow READ 4 Crash state: LibRaw::phaseonecorrect LibRaw::raw2imageex LibRaw::dcrawprocess...

OSV-2022-1137 Heap-buffer-overflow in io_memory_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53019 Crash type: Heap-buffer-overflow WRITE Crash state: iomemoryread riopluginread riodescread...

OSV-2022-1136 Heap-buffer-overflow in rx_ip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53029 Crash type: Heap-buffer-overflow READ 2 Crash state: rxip miprx fuzz.c...

OSV-2022-1134 Heap-buffer-overflow in ndlz8_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52967 Crash type: Heap-buffer-overflow READ 1 Crash state: ndlz8decompress bloscd dojob...

OSV-2022-1133 Security exception in org.codehaus.janino.Parser.parseAssignmentExpression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52971 Crash type: Security exception Crash state: org.codehaus.janino.Parser.parseAssignmentExpression java.base/sun.nio.cs.CESU8$Encoder.encodeLoop java.base/java.nio.charset.CharsetEncoder.encode...

OSV-2022-1132 Heap-buffer-overflow in add_compile_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52979 Crash type: Heap-buffer-overflow READ 8 Crash state: addcompilestring compiletree compiletree...

OSV-2022-1131 Heap-use-after-free in gs_font_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52986 Crash type: Heap-use-after-free READ 8 Crash state: gsfontfinalize gsgcreclaim ireclaim...

OSV-2022-1129 UNKNOWN WRITE in Assimp::ObjFileMtlImporter::getFloatValue

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52935 Crash type: UNKNOWN WRITE Crash state: Assimp::ObjFileMtlImporter::getFloatValue Assimp::ObjFileMtlImporter::load Assimp::ObjFileMtlImporter::ObjFileMtlImporter...

OSV-2022-1128 Heap-buffer-overflow in void rawspeed::DngOpcodes::PixelOpcode::applyOP<unsigned short, rawspeed::DngOpc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52944 Crash type: Heap-buffer-overflow READ 4 Crash state: void rawspeed::DngOpcodes::PixelOpcode::applyOPunsigned short, rawspeed::DngOpc rawspeed::DngOpcodes::applyOpCodes rawspeed::DngDecoder::handleMetadata...

OSV-2022-1126 Security exception in java.base/jdk.internal.math.FloatingDecimal.readJavaFormatString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52922 Crash type: Security exception Crash state: java.base/jdk.internal.math.FloatingDecimal.readJavaFormatString java.base/jdk.internal.math.FloatingDecimal.parseDouble java.base/java.lang.Double.parseDouble...

OSV-2022-1122 Heap-buffer-overflow in LibRaw::phase_one_correct

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52887 Crash type: Heap-buffer-overflow READ 4 Crash state: LibRaw::phaseonecorrect LibRaw::raw2imageex LibRaw::dcrawprocess...

OSV-2022-1121 Global-buffer-overflow in get_unpack_proc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52870 Crash type: Global-buffer-overflow READ 8 Crash state: getunpackproc xpsbegintypedimage epobegintypedimage...

OSV-2022-1120 Heap-use-after-free in xmlXIncludeDoProcess

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52869 Crash type: Heap-use-after-free READ 4 Crash state: xmlXIncludeDoProcess xmlXIncludeProcessNode xmlTextReaderRead...

OSV-2022-1119 Container-overflow in spvtools::opt::blockmergeutil::CanMergeWithSuccessor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52863 Crash type: Container-overflow READ 8 Crash state: spvtools::opt::blockmergeutil::CanMergeWithSuccessor std::1::function::funcspvtools::opt::BlockMergePass::Process spvtools::opt::IRContext::ProcessCallTreeFromRoots...

OSV-2022-1118 Security exception in java.base/jdk.internal.math.FloatingDecimal.readJavaFormatString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52840 Crash type: Security exception Crash state: java.base/jdk.internal.math.FloatingDecimal.readJavaFormatString java.base/jdk.internal.math.FloatingDecimal.parseDouble java.base/java.lang.Double.parseDouble...

OSV-2022-1114 Heap-buffer-overflow in g_strchug

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52798 Crash type: Heap-buffer-overflow READ Crash state: gstrchug dissectdcmmain calldissectorwork...

OSV-2022-1113 Heap-buffer-overflow in ForceZero

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52822 Crash type: Heap-buffer-overflow WRITE 8 Crash state: ForceZero BuildMessage SendFinished...