4483 matches found
OSV-2022-455 Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47796 Crash type: Uncaught exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.lang.String.getChars java.base/java.io.StringReader.read...
OSV-2022-453 Segv on unknown address in gx_device_finalize
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47770 Crash type: Segv on unknown address Crash state: gxdevicefinalize allocrestorestepin dorestore...
OSV-2022-452 Stack-buffer-overflow in parse_regex
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47780 Crash type: Stack-buffer-overflow READ 1 Crash state: parseregex cliregex2suffix regexlistaddpattern...
OSV-2022-451 Heap-buffer-overflow in myeid_create_key
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47769 Crash type: Heap-buffer-overflow WRITE Crash state: myeidcreatekey scpkcs15initstoresecretkey dostoresecretkey...
OSV-2022-450 Heap-buffer-overflow in Curl_headers_push
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47767 Crash type: Heap-buffer-overflow WRITE 5 Crash state: Curlheaderspush Curlclientwrite Curlhttpreadwriteheaders...
OSV-2022-449 UNKNOWN WRITE in alloc_restore_step_in
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47753 Crash type: UNKNOWN WRITE Crash state: allocrestorestepin allocrestoreall gsmainfinit...
OSV-2022-447 Heap-buffer-overflow in ndpi_search_http_tcp
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47734 Crash type: Heap-buffer-overflow READ 11 Crash state: ndpisearchhttptcp ndpisearchhttptcpagain ndpidetectionprocesspacket...
OSV-2022-446 Uncaught exception in com.github.javaparser.GeneratedJavaParser.Expression
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47737 Crash type: Uncaught exception Crash state: com.github.javaparser.GeneratedJavaParser.Expression com.github.javaparser.Range.range com.github.javaparser.JavaToken...
OSV-2022-445 Stack-buffer-overflow in tlsCheckUncommonALPN
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47730 Crash type: Stack-buffer-overflow WRITE Crash state: tlsCheckUncommonALPN processClientServerHello processTLSBlock...
OSV-2022-443 Heap-buffer-overflow in ndpi_search_http_tcp
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47724 Crash type: Heap-buffer-overflow READ 12 Crash state: ndpisearchhttptcp checkndpidetectionfunc ndpicheckflowfunc...
OSV-2022-439 Stack-use-after-return in test_update
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47676 Crash type: Stack-use-after-return READ 1 Crash state: testupdate main fuzzpkcs15tool.c...
OSV-2022-437 Stack-buffer-overflow in sc_asn1_read_tag
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47675 Crash type: Stack-buffer-overflow READ 1 Crash state: scasn1readtag scasn1findtag cardoslistfiles...
OSV-2022-436 Stack-buffer-overflow in spvtools::opt::CompositeInsertToCompositeConstruct
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47684 Crash type: Stack-buffer-overflow READ 8 Crash state: spvtools::opt::CompositeInsertToCompositeConstruct std::1::function::funcbool spvtools::opt::InstructionFolder::FoldInstructionInternal...
OSV-2022-435 Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47657 Crash type: Uncaught exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.lang.StringUTF16.checkBoundsOffCount java.base/java.lang.StringUTF16.getChars...
OSV-2022-434 Segv on unknown address in sc_aux_data_free
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47655 Crash type: Segv on unknown address Crash state: scauxdatafree scpkcs15freeprkeyinfo scpkcs15freeobject...
OSV-2021-1815 Global-buffer-overflow in xstrdup
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47626 Crash type: Global-buffer-overflow READ 1 Crash state: xstrdup scanopenobjfile scanobjfile...
OSV-2022-432 Stack-use-after-return in conversation_match_element_list
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47624 Crash type: Stack-use-after-return READ 4 Crash state: conversationmatchelementlist wmemmaplookup findconversationbyid...
OSV-2022-431 Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47616 Crash type: Uncaught exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/jdk.internal.org.objectweb.asm.SymbolTable$Entry. java.base/jdk.internal.org.objectweb.asm.SymbolTable.addConstantUtf8...
OSV-2022-430 UNKNOWN READ in fp_cmp_mag
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47586 Crash type: UNKNOWN READ Crash state: fpcmpmag crtmgrtrustlistlookup crtmgradd...
OSV-2022-429 Heap-buffer-overflow in pdfi_dict_get_no_store_R_inner
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47601 Crash type: Heap-buffer-overflow READ Crash state: pdfidictgetnostoreRinner pdfidictgetnostoreRkey pdfifindresource...
OSV-2022-427 Stack-use-after-scope in RefCopyBytes
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47560 Crash type: Stack-use-after-scope READ Crash state: RefCopyBytes DoCopyBytes dngstream::Put...
OSV-2022-426 Memcpy-param-overlap in repeat
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47557 Crash type: Memcpy-param-overlap Crash state: repeat pere cliregcompreal...
OSV-2022-425 Heap-use-after-free in std::__1::__tree_node_base<void*>*& std::__1::__tree<std::__1::__value_type<std:
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47533 Crash type: Heap-use-after-free READ 1 Crash state: std::1::treenodebase& std::1::treestd::1::valuetypestd: std::1::pairstd::1::treeiteratorstd::1::valuetypestd::1::basic...
OSV-2022-423 Heap-buffer-overflow in sc_build_pin
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47521 Crash type: Heap-buffer-overflow READ 4 Crash state: scbuildpin isoNUMBERbuildpinapdu isoNUMBERpincmd...
OSV-2022-422 UNKNOWN WRITE in alloc_restore_step_in
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47513 Crash type: UNKNOWN WRITE Crash state: allocrestorestepin allocrestoreall gsmainfinit...
OSV-2022-421 Stack-buffer-overflow in cardos_list_files
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47512 Crash type: Stack-buffer-overflow READ 1 Crash state: cardoslistfiles sclistfiles fuzzcard.c...
OSV-2022-419 Heap-buffer-overflow in uncompress_b44_impl
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47503 Crash type: Heap-buffer-overflow READ 2 Crash state: uncompressb44impl defaultdecompresschunk exrdecodingrun...
OSV-2022-417 Heap-buffer-overflow in read_xref
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47501 Crash type: Heap-buffer-overflow READ 8 Crash state: readxref pdfireadxref pdfisetinputstream...
OSV-2022-416 Heap-buffer-overflow in opj_t1_allocate_buffers
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47500 Crash type: Heap-buffer-overflow WRITE Crash state: opjt1allocatebuffers opjt1clbldecodeprocessor opjthreadpoolsubmitjob...
OSV-2022-415 UNKNOWN READ in pdfi_free_object
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47499 Crash type: UNKNOWN READ Crash state: pdfifreeobject pdficlearcontext pdfifreecontext...
OSV-2022-413 Heap-buffer-overflow in generic_unpack
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47483 Crash type: Heap-buffer-overflow READ 4 Crash state: genericunpack exrdecodingrun Imf32::checkCoreFile...
OSV-2022-412 Bad-cast to const upb_tabent' (aka 'const struct _upb_tabent')insert
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47464 Crash type: Bad-cast Crash state: Bad-cast to const upbtabent' aka 'const struct upbtabent'insert upbstrtableinsert createfielddef...
OSV-2022-410 Heap-buffer-overflow in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47392 Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::ASE::Parser::ParseLV1SoftSkinBlock Assimp::ASE::Parser::Parse Assimp::ASEImporter::InternReadFile...
OSV-2022-409 Heap-buffer-overflow in std::__1::__tree_node_base<void*>*& std::__1::__tree<std::__1::__value_type<std:
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47391 Crash type: Heap-buffer-overflow READ 1 Crash state: std::1::treenodebase& std::1::treestd::1::valuetypestd: std::1::pairstd::1::treeiteratorstd::1::valuetypestd::1::basic...
OSV-2022-406 Heap-buffer-overflow in ucl_object_dtor_unref_single
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47339 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectdtorunrefsingle uclobjectdtorunref uclhashdestroy...
OSV-2022-403 Heap-use-after-free in dwg_add_handleref
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47319 Crash type: Heap-use-after-free READ 8 Crash state: dwgaddhandleref dwgaddSTYLE decodepreR13section...
OSV-2022-401 UNKNOWN READ in OT::gvar::subset
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47281 Crash type: UNKNOWN READ Crash state: OT::gvar::subset bool trysubset hbsubsetplanexecuteorfail...
OSV-2022-400 Heap-double-free in dwg_free_XRECORD_private
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47300 Crash type: Heap-double-free Crash state: dwgfreeXRECORDprivate dwgfreeXRECORD dwgfreeobject...
OSV-2022-398 Heap-buffer-overflow in json_common_entity_data
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47259 Crash type: Heap-buffer-overflow READ 8 Crash state: jsoncommonentitydata dwgjsonREPEAT dwgjsonobject...
OSV-2022-396 Heap-buffer-overflow in ucl_object_free_internal
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47206 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectfreeinternal uclparserfree uclstatemachine...
OSV-2022-395 Uncaught exception in com.alibaba.fastjson.JSONPath.deepScan
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47192 Crash type: Uncaught exception Crash state: com.alibaba.fastjson.JSONPath.deepScan java.base/java.lang.Boolean.valueOf com.alibaba.fastjson.parser.ParserConfig$2.apply...
OSV-2022-394 Incorrect-function-pointer-type in cv::split
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47190 Crash type: Incorrect-function-pointer-type Crash state: cv::split cv::split TestSplitAndMerge...
OSV-2022-393 Heap-use-after-free in mrb_funcall_with_block
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47213 Crash type: Heap-use-after-free READ 8 Crash state: mrbfuncallwithblock mrbinstancenew mrbfuncallwithblock...
OSV-2022-390 Heap-buffer-overflow in s_PFBD_process
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47157 Crash type: Heap-buffer-overflow READ 1 Crash state: sPFBDprocess sreadbuf spgetcc...
OSV-2022-389 Global-buffer-overflow in _dwarf_pathjoinl
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47150 Crash type: Global-buffer-overflow READ 1 Crash state: dwarfpathjoinl dwarfconstructlinkedtopath dwarfgnudebuglink...
OSV-2022-388 Segv on unknown address in dwg_ref_get_object
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47151 Crash type: Segv on unknown address Crash state: dwgrefgetobject dwggeojsonfeature dwggeojsonobject...
OSV-2022-387 Segv on unknown address in bit_write_TV
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47126 Crash type: Segv on unknown address Crash state: bitwriteTV bitwriteT dwgencodeBLOCK...
OSV-2022-386 Invalid-free in change_pin
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47143 Crash type: Invalid-free Crash state: changepin main fuzzpkcs15tool.c...
OSV-2022-385 Uncaught exception in jaz.Zer.<clinit>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47116 Crash type: Uncaught exception Crash state: jaz.Zer. java.base/java.lang.Class.forName0 java.base/java.lang.Class.forName...