OSV-2022-709 Heap-buffer-overflow in dissect_softether_host_fqdn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50105 Crash type: Heap-buffer-overflow READ 10 Crash state: dissectsoftetherhostfqdn ndpisearchsoftether checkndpidetectionfunc...

OSV-2022-708 UNKNOWN READ in kh_resize_ucl_hash_node

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50120 Crash type: UNKNOWN READ Crash state: khresizeuclhashnode khputuclhashnode uclhashinsert...

OSV-2022-706 Heap-buffer-overflow in find_jump_target

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50077 Crash type: Heap-buffer-overflow READ 1 Crash state: findjumptarget resolvelabels jscreatefunction...

OSV-2022-705 Heap-buffer-overflow in netsnmp_memdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50096 Crash type: Heap-buffer-overflow READ Crash state: netsnmpmemdup snmpapifuzzer.c...

OSV-2022-704 UNKNOWN READ in fp_cmp_mag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50012 Crash type: UNKNOWN READ Crash state: fpcmpmag crtmgrtrustlistlookup crtmgradd...

OSV-2022-702 Heap-double-free in ada_fuzz_header.h

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50042 Crash type: Heap-double-free Crash state: adafuzzheader.h snmpfreepdu snmpapifuzzer.c...

OSV-2022-698 Heap-buffer-overflow in i2c_ASN1_INTEGER

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49963 Crash type: Heap-buffer-overflow READ 1 Crash state: i2cASN1INTEGER bni2c asn1exi2c...

OSV-2022-696 Use-of-uninitialized-value in mix_add_scale_stride

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49921 Crash type: Use-of-uninitialized-value Crash state: mixaddscalestride crasmixaddscalestride crasaudioareacopy...

OSV-2022-695 Segv on unknown address in ndpi_free_flow_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49906 Crash type: Segv on unknown address Crash state: ndpifreeflowdata ndpiflowfree processndpicollectedinfo...

OSV-2022-691 Heap-buffer-overflow in dissect_softether_host_fqdn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49901 Crash type: Heap-buffer-overflow READ 1 Crash state: dissectsoftetherhostfqdn ndpisearchsoftether checkndpidetectionfunc...

OSV-2022-686 Heap-use-after-free in FT_Stream_ReadULong

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49859 Crash type: Heap-use-after-free READ 1 Crash state: FTStreamReadULong sfntinitface ttfaceinit...

OSV-2022-684 Heap-buffer-overflow in pdfi_load_font

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49847 Crash type: Heap-buffer-overflow READ 8 Crash state: pdfiloadfont pdfiloaddictfont pdfiTf...

OSV-2022-681 Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49858 Crash type: Uncaught exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.io.StringReader.ensureOpen java.base/java.io.StringReader.read...

OSV-2022-680 Heap-use-after-free in UA_Server_networkCallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49836 Crash type: Heap-use-after-free READ 4 Crash state: UAServernetworkCallback fuzzbinarymessage.cc UAmemoryManagerfree...

OSV-2022-678 Security exception in com.fasterxml.jackson.databind.node.ArrayNode.serialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49828 Crash type: Security exception Crash state: com.fasterxml.jackson.databind.node.ArrayNode.serialize com.fasterxml.jackson.core.json.WriterBasedJsonGenerator.verifyValueWrite...

OSV-2022-679 Heap-buffer-overflow in udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49845 Crash type: Heap-buffer-overflow WRITE 4 Crash state: udiv mrbbintmod intmod...

OSV-2022-676 Heap-use-after-free in archive_read_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49840 Crash type: Heap-use-after-free READ Crash state: archivereaddata libarchivefuzzer.cc processheadfile...

OSV-2022-675 Heap-buffer-overflow in void RDKit::ParseV3000AtomProps<std::__1::vector<std::__1::basic_string_view<cha

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49783 Crash type: Heap-buffer-overflow READ 1 Crash state: void RDKit::ParseV3000AtomPropsstd::1::vectorstd::1::basicstringviewcha RDKit::ParseV3000AtomBlock RDKit::FileParserUtils::ParseV3000CTAB...

OSV-2022-674 Use-of-uninitialized-value in cdef_filter_block_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49787 Crash type: Use-of-uninitialized-value Crash state: cdeffilterblockc cdeffilterblock8x8c dav1dcdefbrow8bpc...

OSV-2022-672 Heap-buffer-overflow in udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49763 Crash type: Heap-buffer-overflow WRITE 4 Crash state: udiv mpzmdiv mrbbintdiv...

OSV-2022-670 Heap-buffer-overflow in dissect_softether_ip_port

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49736 Crash type: Heap-buffer-overflow READ 4 Crash state: dissectsoftetheripport ndpisearchsoftether checkndpidetectionfunc...

OSV-2022-669 Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49728 Crash type: Heap-buffer-overflow READ 4 Crash state: llvm::DataLayout::getIndexedOffsetInType InterpreterStackFrame::ResolveConstantValue InterpreterStackFrame::ResolveConstant...

OSV-2022-667 Uncaught exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49680 Crash type: Uncaught exception Crash state: com.codeintelligence.jazzer.sanitizers.RegexInjection.hookInternal com.codeintelligence.jazzer.sanitizers.RegexInjection.stringHook...

OSV-2022-666 Heap-buffer-overflow in fasthuf_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49698 Crash type: Heap-buffer-overflow READ 8 Crash state: fasthufdecode internalhufdecompress internalexrundopiz...

OSV-2022-665 Use-of-uninitialized-value in udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49676 Crash type: Use-of-uninitialized-value Crash state: udiv mpzmdiv mrbbintdiv...

OSV-2022-664 Heap-buffer-overflow in decode_preR13_section_hdr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49675 Crash type: Heap-buffer-overflow WRITE 4 Crash state: decodepreR13sectionhdr decodepreR13 dwgdecode...

OSV-2022-663 Heap-buffer-overflow in av1_read_mode_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49652 Crash type: Heap-buffer-overflow WRITE 1 Crash state: av1readmodeinfo parsedecodeblock decodepartition...

OSV-2022-662 UNKNOWN READ in pdfi_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49662 Crash type: UNKNOWN READ Crash state: pdfifreeobject pdfifreefontcidtype2 pdfifreefont...

OSV-2022-661 Heap-buffer-overflow in dissect_softether_ip_port

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49638 Crash type: Heap-buffer-overflow READ 4 Crash state: dissectsoftetheripport ndpisearchsoftether checkndpidetectionfunc...

OSV-2022-657 Heap-buffer-overflow in dynapi_set_helper

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49613 Crash type: Heap-buffer-overflow WRITE Crash state: dynapisethelper dwgdynapientitysetvalue dxfblocksread...

OSV-2022-656 Heap-buffer-overflow in dwg_decode_LWPOLYLINE_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49630 Crash type: Heap-buffer-overflow READ 1 Crash state: dwgdecodeLWPOLYLINEprivate dwgdecodeLWPOLYLINE dwgdecodeaddobject...

OSV-2022-655 UNKNOWN WRITE in pdfi_repair_file

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49606 Crash type: UNKNOWN WRITE Crash state: pdfirepairfile pdfireadxrefstreamdict pdfireadxref...

OSV-2022-654 Heap-buffer-overflow in dwg_geojson_feature

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49618 Crash type: Heap-buffer-overflow READ 8 Crash state: dwggeojsonfeature dwggeojsonobject dwgwritegeojson...

OSV-2022-653 Heap-double-free in dwg_free_common_entity_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49602 Crash type: Heap-double-free Crash state: dwgfreecommonentitydata dwgfreeDIMENSIONANG2LN dwgfreeobject...

OSV-2022-652 Use-of-uninitialized-value in udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49542 Crash type: Use-of-uninitialized-value Crash state: udiv mrbbintmod intmod...

OSV-2022-651 Heap-use-after-free in jsmn_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49552 Crash type: Heap-use-after-free WRITE 4 Crash state: jsmnparse flbjsontokenise flbpackjsonstate...

OSV-2022-648 Use-of-uninitialized-value in _LUTeval16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49549 Crash type: Use-of-uninitialized-value Crash state: LUTeval16 cmsCreateExtendedTransform cmsCreateTransform...

OSV-2022-647 Heap-use-after-free in cmsFreeNamedColorList

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49546 Crash type: Heap-use-after-free READ 4 Crash state: cmsFreeNamedColorList TypeNamedColorFree cmsCloseProfile...

OSV-2022-644 Global-buffer-overflow in decode_CABAC_bit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49538 Crash type: Global-buffer-overflow READ 1 Crash state: decodeCABACbit readcodingunit readcodingquadtree...

OSV-2022-643 Heap-use-after-free in gs_tifsSeekProc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49528 Crash type: Heap-use-after-free READ 8 Crash state: gstifsSeekProc TIFFWriteDirectorySec TIFFRewriteDirectory...

OSV-2022-642 Segv on unknown address in cmsNamedColorInfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49501 Crash type: Segv on unknown address Crash state: cmsNamedColorInfo TypeNamedColorWrite SaveTags...

OSV-2022-640 Stack-use-after-return in rc_free_text_enum

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49530 Crash type: Stack-use-after-return READ 8 Crash state: rcfreetextenum gstextrelease pdftextrelease...

OSV-2022-639 Heap-buffer-overflow in _cmsWriteXYZNumber

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49505 Crash type: Heap-buffer-overflow READ 8 Crash state: cmsWriteXYZNumber TypeViewingConditionsWrite SaveTags...

OSV-2022-638 Use-of-uninitialized-value in ComputeConversion

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49495 Crash type: Use-of-uninitialized-value Crash state: ComputeConversion DefaultICCintents cmsLinkProfiles...

OSV-2022-637 Segv on unknown address in mrb_bint_cmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49493 Crash type: Segv on unknown address Crash state: mrbbintcmp cmpnum numcmp...

OSV-2022-636 UNKNOWN READ in fp_cmp_mag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49510 Crash type: UNKNOWN READ Crash state: fpcmpmag crtmgrtrustlistlookup crtmgradd...

OSV-2022-635 UNKNOWN READ in EvalSegmentedFn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49490 Crash type: UNKNOWN READ Crash state: EvalSegmentedFn cmsEvalToneCurveFloat TypevcgtWrite...

OSV-2022-632 Segv on unknown address in mrb_bint_cmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49470 Crash type: Segv on unknown address Crash state: mrbbintcmp inteql mrbfuncallwithblock...

OSV-2022-629 Heap-buffer-overflow in TetrahedralInterp16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49455 Crash type: Heap-buffer-overflow READ 2 Crash state: TetrahedralInterp16 PrelinEval16 cmsPipelineEval16...

OSV-2022-628 Segv on unknown address in mpz_add

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49453 Crash type: Segv on unknown address Crash state: mpzadd mpzsub mrbbintsub...