OSV-2022-222 Heap-use-after-free in cb_stdout_flush

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45251 Crash type: Heap-use-after-free READ Crash state: cbstdoutflush outputprecbflush flb-it-fuzz-filterstdoutfuzzerOSSFUZZ...

OSV-2022-220 Stack-buffer-overflow in load_regex_matcher

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45247 Crash type: Stack-buffer-overflow WRITE 1 Crash state: loadregexmatcher cliloadpdb cliload...

OSV-2022-218 UNKNOWN READ in pdfi_read_cff_font

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45222 Crash type: UNKNOWN READ Crash state: pdfireadcfffont pdfiloadfont pdfireadtype0font...

OSV-2022-217 Stack-buffer-overflow in msgpack_sbuffer_write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45208 Crash type: Stack-buffer-overflow READ Crash state: msgpacksbufferwrite flbpackmsgpacktojsonformat flbjsonfuzzer.c...

OSV-2022-216 Null-dereference READ in cl_finish_hash

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45197 Crash type: Null-dereference READ Crash state: clfinishhash hashimptbl scanpeimp...

OSV-2022-214 Heap-buffer-overflow in cli_bcomp_freemeta

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45194 Crash type: Heap-buffer-overflow READ 8 Crash state: clibcompfreemeta clibcompaddpatt readdbparseldbsubsignature...

OSV-2022-210 UNKNOWN READ in pdfi_count_cff_index

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45173 Crash type: UNKNOWN READ Crash state: pdficountcffindex pdfireadcfffont pdfiloadfont...

OSV-2022-209 Heap-buffer-overflow in dotnet_parse_tilde_2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45161 Crash type: Heap-buffer-overflow READ 4 Crash state: dotnetparsetilde2 dotnetparsetilde dotnetparsecom...

OSV-2022-207 Uncaught exception in com.github.javaparser.GeneratedJavaParser.Expression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45131 Crash type: Uncaught exception Crash state: com.github.javaparser.GeneratedJavaParser.Expression java.base/java.nio.CharBuffer.wrap java.base/sun.nio.cs.StreamDecoder.implRead...

OSV-2022-206 Heap-buffer-overflow in spgetcc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45049 Crash type: Heap-buffer-overflow READ Crash state: spgetcc gsscantoken gsinterpret...

OSV-2022-202 Heap-buffer-overflow in ndpi_workflow_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45036 Crash type: Heap-buffer-overflow READ 4 Crash state: ndpiworkflowprocesspacket fuzzndpireader.c...

OSV-2022-199 Stack-buffer-overflow in check_user_password_preR5

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44983 Crash type: Stack-buffer-overflow READ Crash state: checkuserpasswordpreR5 pdfiinitialiseDecryption pdfisetinputstream...

OSV-2021-1809 Heap-buffer-overflow in ujson.cpython-38-x86_64-linux-gnu.so

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44973 Crash type: Heap-buffer-overflow WRITE 1 Crash state: ujson.cpython-38-x8664-linux-gnu.so ujson.cpython-38-x8664-linux-gnu.so ujson.cpython-38-x8664-linux-gnu.so...

OSV-2022-197 Heap-buffer-overflow in doemit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44978 Crash type: Heap-buffer-overflow WRITE 8 Crash state: doemit doinsert pere...

OSV-2022-194 Heap-buffer-overflow in SuperFastHash

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44964 Crash type: Heap-buffer-overflow READ 1 Crash state: SuperFastHash Assimp::SceneCombiner::AddNodePrefixesChecked Assimp::SceneCombiner::AddNodePrefixesChecked...

OSV-2022-193 UNKNOWN READ in GC_generic_malloc_many

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44961 Crash type: UNKNOWN READ Crash state: GCgenericmallocmany GCmallockind Strnewsize...

OSV-2022-191 Heap-buffer-overflow in ndpi_handle_ipv6_extension_headers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44942 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpihandleipv6extensionheaders ndpiworkflowprocesspacket fuzzndpireader.c...

OSV-2022-188 Incorrect-function-pointer-type in cv::split

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44937 Crash type: Incorrect-function-pointer-type Crash state: cv::split cv::split TestSplitAndMerge...

OSV-2022-185 Heap-use-after-free in Segment::write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44951 Crash type: Heap-use-after-free READ 1 Crash state: Segment::write Doublewrite::writepages Doublewrite::flushtodisk...

OSV-2022-183 Heap-buffer-overflow in evax_bfd_print_dst

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44864 Crash type: Heap-buffer-overflow READ 1 Crash state: evaxbfdprintdst evaxbfdprintimage vmsbfdprintprivatebfddata...

OSV-2022-181 Heap-use-after-free in zval_call_destructor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44885 Crash type: Heap-use-after-free READ 4 Crash state: zvalcalldestructor zendhashreverseapply shutdowndestructors...

OSV-2022-180 Heap-buffer-overflow in row_mt_worker_hook

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44862 Crash type: Heap-buffer-overflow WRITE 4 Crash state: rowmtworkerhook threadloop...

OSV-2022-179 Heap-buffer-overflow in row_mt_worker_hook

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44856 Crash type: Heap-buffer-overflow WRITE 4 Crash state: rowmtworkerhook execute av1decodetgtilesandwrapup...

OSV-2022-177 UNKNOWN READ in gx_dc_default_fill_masked

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44855 Crash type: UNKNOWN READ Crash state: gxdcdefaultfillmasked copyportrait imagerendersimple...

OSV-2022-169 Heap-buffer-overflow in ucasemap_internalUTF8ToTitle_70

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44779 Crash type: Heap-buffer-overflow READ 1 Crash state: ucasemapinternalUTF8ToTitle70 ucasemapmapUTF8 ucasemaputf8ToTitle70...

OSV-2022-168 Heap-buffer-overflow in fmt::v8::detail::big_decimal_fp fmt::v8::detail::write_padded<

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44791 Crash type: Heap-buffer-overflow WRITE 1 Crash state: fmt::v8::detail::bigdecimalfp fmt::v8::detail::writepadded std::1::backinsertiteratorfmt::v8::basicmemorybufferchar, 500ul, std::...

OSV-2022-165 Stack-buffer-overflow in fmt::v8::basic_memory_buffer<unsigned int, 32ul, std::__1::allocator<unsigned in

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44763 Crash type: Stack-buffer-overflow READ 4 Crash state: fmt::v8::basicmemorybufferunsigned int, 32ul, std::1::allocatorunsigned in fmt::v8::detail::bigint::square fmt::v8::detail::bigint::assignpow10...

OSV-2022-158 Heap-buffer-overflow in parse_primitive

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44695 Crash type: Heap-buffer-overflow READ 1 Crash state: parseprimitive plistfromjson jplistfuzzer.cc...

OSV-2022-152 UNKNOWN WRITE

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44641 Crash type: UNKNOWN WRITE Crash state: NULL...

OSV-2022-151 Heap-buffer-overflow in extensionObjectOrder

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44623 Crash type: Heap-buffer-overflow READ 4 Crash state: extensionObjectOrder extensionObjectOrder extensionObjectOrder...

OSV-2022-150 Heap-buffer-overflow in coap_split_uri_sub

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44611 Crash type: Heap-buffer-overflow READ 1 Crash state: coapspliturisub coapgeturipath...

OSV-2022-149 Heap-buffer-overflow in read_xref_stream_entries

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44610 Crash type: Heap-buffer-overflow WRITE 8 Crash state: readxrefstreamentries pdfiprocessxrefstream pdfireadxrefstreamdict...

OSV-2022-147 Heap-buffer-overflow in parse_primitive

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44574 Crash type: Heap-buffer-overflow READ 1 Crash state: parseprimitive plistfromjson jplistfuzzer.cc...

OSV-2021-1807 Heap-use-after-free in dhcp6_no_relay

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44573 Crash type: Heap-use-after-free WRITE 1 Crash state: dhcp6norelay dhcp6mayberelay dhcp6mayberelay...

OSV-2022-146 Stack-use-after-scope in tag_cfa_pattern::Put

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44590 Crash type: Stack-use-after-scope READ 1 Crash state: tagcfapattern::Put dngtiffdirectory::Put dngimagewriter::WriteTIFFWithProfile...

OSV-2022-145 Heap-buffer-overflow in print_mac

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44581 Crash type: Heap-buffer-overflow WRITE 4 Crash state: printmac logpacket dhcpreply...

OSV-2022-144 Segv on unknown address in onig_free_body

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44603 Crash type: Segv on unknown address Crash state: onigfreebody onignew flbregexcreate...

OSV-2022-142 Heap-use-after-free in archive_read_format_rar_read_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44547 Crash type: Heap-use-after-free READ 4 Crash state: archivereadformatrarreaddata archivereaddata libarchivefuzzer.cc...

OSV-2022-141 Heap-use-after-free in nghttp2_hd_deflate_hd_bufs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44517 Crash type: Heap-use-after-free READ 3 Crash state: nghttp2hddeflatehdbufs nghttp2framepackheaders nghttp2sessionmemsendinternal...

OSV-2022-139 Heap-use-after-free in nghttp2_http_record_request_method

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44516 Crash type: Heap-use-after-free READ 4 Crash state: nghttp2httprecordrequestmethod nghttp2sessionmemsendinternal nghttp2sessionsend...

OSV-2022-137 Stack-buffer-overflow in LoadVoice

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44527 Crash type: Stack-buffer-overflow READ Crash state: LoadVoice LoadVoiceVariant SpeakNextClause...

OSV-2022-136 Heap-buffer-overflow in cli_js_parse_done

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44490 Crash type: Heap-buffer-overflow READ 4 Crash state: clijsparsedone clihtmlnormalise htmlnormalisemap...

OSV-2022-134 Heap-use-after-free in RDKit::Chirality::cleanupStereoGroups

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44520 Crash type: Heap-use-after-free READ 1 Crash state: RDKit::Chirality::cleanupStereoGroups RDKit::MolOps::assignStereochemistry RDKit::SmilesToMol...

OSV-2022-133 Heap-buffer-overflow in coap_split_uri_sub

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44503 Crash type: Heap-buffer-overflow READ 1 Crash state: coapspliturisub coapgeturipath...

OSV-2022-129 Heap-buffer-overflow in dwg_free_HATCH_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44481 Crash type: Heap-buffer-overflow READ 8 Crash state: dwgfreeHATCHprivate dwgfreeHATCH dwgfreeobject...

OSV-2022-128 Stack-buffer-overflow in decompress_rNUMBER

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44432 Crash type: Stack-buffer-overflow WRITE 1 Crash state: decompressrNUMBER readrNUMBERmetadata dwgdecode...

OSV-2022-127 Heap-use-after-free in UA_ServerConfig_clean

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44434 Crash type: Heap-use-after-free READ 8 Crash state: UAServerConfigclean fuzzbinarymessage.cc UAmemoryManagerfree...

OSV-2022-126 Heap-buffer-overflow in md_analyze_inlines

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44446 Crash type: Heap-buffer-overflow READ 1 Crash state: mdanalyzeinlines mdprocessnormalblockcontents mdprocesstablecell...

OSV-2022-125 Invalid-free in NIOHTTP2.NIOHTTP2Handler.

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44431 Crash type: Invalid-free Crash state: NIOHTTP2.NIOHTTP2Handler. NIOHTTP2.NIOHTTP2Handler.channelRead NIOCore.ChannelHandlerContext...

OSV-2022-121 Heap-buffer-overflow in s_hex_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44406 Crash type: Heap-buffer-overflow READ 1 Crash state: shexprocess sexDprocess sreadbuf...