OSV-2022-120 Heap-buffer-overflow in ndpi_strncasestr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44405 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpistrncasestr checkcontenttypeandchangeprotocol ndpisearchhttptcp...

OSV-2022-116 Heap-buffer-overflow in parse_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44301 Crash type: Heap-buffer-overflow READ 4 Crash state: parseobject parseobject parseobject...

OSV-2022-115 UNKNOWN READ in unescape_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44300 Crash type: UNKNOWN READ Crash state: unescapestring parsestring parseobject...

OSV-2022-114 Heap-buffer-overflow in add_compile_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44379 Crash type: Heap-buffer-overflow READ 3 Crash state: addcompilestring compiletree compiletree...

OSV-2022-112 Heap-use-after-free in hb_bit_set_invertible_t::next

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44263 Crash type: Heap-use-after-free READ 1 Crash state: hbbitsetinvertiblet::next hbbitsetinvertiblet::intersects hbsparsesett::intersects...

OSV-2022-111 Heap-use-after-free in OT::CoverageFormat1::intersected_coverage_glyphs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44257 Crash type: Heap-use-after-free READ 4 Crash state: OT::CoverageFormat1::intersectedcoverageglyphs OT::ChainContextFormat3::closure OT::hbclosurecontextt::returnt OT::SubstLookupSubTable::dispatchOT::hbclos...

OSV-2022-110 Heap-buffer-overflow in ZSTD_compressLiterals

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44239 Crash type: Heap-buffer-overflow WRITE 1 Crash state: ZSTDcompressLiterals ZSTDentropyCompressSeqStore ZSTDcompressSequences...

OSV-2022-109 UNKNOWN READ in unescape_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44237 Crash type: UNKNOWN READ Crash state: unescapestring parsestring parseobject...

OSV-2022-108 Heap-buffer-overflow in void apply_string<GSUBProxy>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44212 Crash type: Heap-buffer-overflow READ 2 Crash state: void applystring void hbotmapt::apply hbotmapt::substitute...

OSV-2022-105 Heap-buffer-overflow in parse_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44199 Crash type: Heap-buffer-overflow READ 4 Crash state: parseobject parseobject parseobject...

OSV-2022-104 Heap-use-after-free in hb_bit_set_invertible_t::intersects

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44198 Crash type: Heap-use-after-free READ 1 Crash state: hbbitsetinvertiblet::intersects OT::CoverageFormat2::intersectedcoverageglyphs OT::ChainContextFormat1::closure...

OSV-2022-102 Segv on unknown address in pdfi_array_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44151 Crash type: Segv on unknown address Crash state: pdfiarrayget pdfiTJ pdfiinterpretstreamoperator...

OSV-2022-101 Heap-double-free in flb_sds_destroy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44153 Crash type: Heap-double-free Crash state: flbsdsdestroy flbparserconffile configrandomfuzzer.c...

OSV-2022-100 Stack-buffer-overflow in sgets

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44160 Crash type: Stack-buffer-overflow WRITE 1 Crash state: sgets pdfireadbytes readxrefentryslow...

OSV-2022-99 UNKNOWN WRITE in helper_shl_cc_arm

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44136 Crash type: UNKNOWN WRITE Crash state: helpershlccarm...

OSV-2022-97 Heap-buffer-overflow in gs_interpret

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44123 Crash type: Heap-buffer-overflow WRITE 16 Crash state: gsinterpret gsmainrunstringwithlength gsmainrunstring...

OSV-2022-96 Heap-buffer-overflow in sequence_compression_api.c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44122 Crash type: Heap-buffer-overflow WRITE 16 Crash state: sequencecompressionapi.c...

OSV-2022-94 Heap-buffer-overflow in cli_strlcat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44087 Crash type: Heap-buffer-overflow WRITE 1 Crash state: clistrlcat yarayyparse yrlexparserulesfile...

OSV-2022-93 Heap-buffer-overflow in strtol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44089 Crash type: Heap-buffer-overflow READ 2 Crash state: strtol parseprimitive plistfromjson...

OSV-2022-91 Heap-buffer-overflow in pixCountArbInRect

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44008 Crash type: Heap-buffer-overflow READ 1 Crash state: pixCountArbInRect pix3fuzzer.cc...

OSV-2021-1806 Stack-buffer-overflow in pdfi_open_CIDFont_substitute_file

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44034 Crash type: Stack-buffer-overflow WRITE Crash state: pdfiopenCIDFontsubstitutefile pdfiloadfont pdfireadtype0font...

OSV-2022-90 Heap-double-free in cli_extract_xlm_macros_and_images

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44040 Crash type: Heap-double-free Crash state: cliextractxlmmacrosandimages cliole2scantempdir cliscanole2...

OSV-2022-87 Heap-use-after-free in zend_std_get_property_ptr_ptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43988 Crash type: Heap-use-after-free READ 8 Crash state: zendstdgetpropertyptrptr zendfetchpropertyaddress ZENDFETCHOBJWSPECCVCONSTHANDLER...

OSV-2022-85 UNKNOWN READ in pdfi_setcolorN

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43994 Crash type: UNKNOWN READ Crash state: pdfisetcolorN pdfiinterpretstreamoperator pdfiinterpretcontentstream...

OSV-2022-84 Heap-buffer-overflow in Core::Stream::File::open_path

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43978 Crash type: Heap-buffer-overflow READ Crash state: Core::Stream::File::openpath Core::Stream::File::open Audio::FlacLoaderPlugin::FlacLoaderPlugin...

OSV-2022-83 Heap-use-after-free in gx_monitor_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43981 Crash type: Heap-use-after-free READ 8 Crash state: gxmonitorfree icclinkcachefinalize ifreeobject...

OSV-2022-82 Heap-buffer-overflow in generic_unpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43961 Crash type: Heap-buffer-overflow READ 2 Crash state: genericunpack exrdecodingrun Imf31::checkCoreFile...

OSV-2022-81 Global-buffer-overflow in get_space_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43991 Crash type: Global-buffer-overflow READ 1 Crash state: getspaceobject zsetcolorspace gsinterpret...

OSV-2022-80 Null-dereference READ in gstate_clone_core

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43989 Crash type: Null-dereference READ Crash state: gstateclonecore gsgsave gsoutputpage...

OSV-2022-79 Segv on unknown address in gp_semaphore_close

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43984 Crash type: Segv on unknown address Crash state: gpsemaphoreclose gxsemaphorefree icclinkcachefinalize...

OSV-2021-1805 Heap-buffer-overflow in ndpi_search_kerberos

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43925 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpisearchkerberos checkndpidetectionfunc ndpicheckflowfunc...

OSV-2021-1804 Heap-buffer-overflow in ndpi_workflow_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43921 Crash type: Heap-buffer-overflow READ 2 Crash state: ndpiworkflowprocesspacket fuzzndpireader.c...

OSV-2022-77 Heap-buffer-overflow in hufDecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43916 Crash type: Heap-buffer-overflow READ 1 Crash state: hufDecode internalhufdecompress internalexrundopiz...

OSV-2022-73 Heap-use-after-free in pdfi_cspace_free_callback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43904 Crash type: Heap-use-after-free READ 8 Crash state: pdficspacefreecallback gscspacefinal allocrestorestepin...

OSV-2022-70 Heap-buffer-overflow in cli_sigopts_handler

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43843 Crash type: Heap-buffer-overflow READ 1 Crash state: clisigoptshandler loadoneldb cliloadldb...

OSV-2022-69 Stack-buffer-overflow in pixCountPixels

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43841 Crash type: Stack-buffer-overflow READ 4 Crash state: pixCountPixels pixCountPixelsInRect pix3fuzzer.cc...

OSV-2022-67 Heap-buffer-overflow in cli_bcomp_freemeta

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43816 Crash type: Heap-buffer-overflow READ 8 Crash state: clibcompfreemeta clibcompaddpatt cliparseadd...

OSV-2022-66 Heap-buffer-overflow in cli_ac_addsig

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43832 Crash type: Heap-buffer-overflow READ 2 Crash state: cliacaddsig cliparseadd clisigoptshandler...

OSV-2022-65 Heap-buffer-overflow in parse_regex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43845 Crash type: Heap-buffer-overflow READ 1 Crash state: parseregex parseregex parseregex...

OSV-2022-64 Heap-buffer-overflow in repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43870 Crash type: Heap-buffer-overflow WRITE Crash state: repeat pere cliregcompreal...

OSV-2022-62 Stack-buffer-overflow in load_regex_matcher

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43869 Crash type: Stack-buffer-overflow WRITE 1 Crash state: loadregexmatcher cliloadwdb cliload...

OSV-2022-61 Heap-buffer-overflow in cli_loadcrt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43828 Crash type: Heap-buffer-overflow READ Crash state: cliloadcrt cliload clload...

OSV-2022-60 Heap-buffer-overflow in parse_regex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43812 Crash type: Heap-buffer-overflow READ 1 Crash state: parseregex cliregex2suffix regexlistaddpattern...

OSV-2022-58 Heap-buffer-overflow in internal_huf_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43763 Crash type: Heap-buffer-overflow READ 1 Crash state: internalhufdecompress internalexrundopiz defaultdecompresschunk...

OSV-2022-57 Heap-buffer-overflow in _estrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43736 Crash type: Heap-buffer-overflow READ 15 Crash state: estrdup exifprocessusercomment exifprocessIFDTAGimpl...

OSV-2022-55 Heap-buffer-overflow in ndlz4_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43687 Crash type: Heap-buffer-overflow READ 1 Crash state: ndlz4decompress ndlzdecompress bloscd...

OSV-2021-1803 UNKNOWN READ in chunk_obj_alloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43680 Crash type: UNKNOWN READ Crash state: chunkobjalloc chunkallocbytes cmapendfbrangefunc...

OSV-2022-54 Heap-buffer-overflow in s_hex_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43693 Crash type: Heap-buffer-overflow READ 1 Crash state: shexprocess sexDprocess sreadbuf...

OSV-2022-53 Heap-buffer-overflow in mem_true24_fill_rectangle

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43688 Crash type: Heap-buffer-overflow WRITE 4 Crash state: memtrue24fillrectangle gxdcpurefillrectangle gxdefaultfillpage...

OSV-2022-51 Negative-size-param in ndlz4_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43671 Crash type: Negative-size-param Crash state: ndlz4decompress ndlzdecompress bloscd...