vuln-osv update 2026-11-13T00:44:09Z

This commit is contained in:
Vulnerability Bot committed 2026-11-13 01:44:14 +01:00
1 parent 8a2c5b2e77
commit ccfb9c50cb
167 files changed
+200 -83

No files matched your search

+1 -1
View File
@@ -1 +1 @@
{"schema_version":"1.9.2","id":"OSV-2021-1070","published":"2021-07-29T00:01:10.187569Z","modified":"2026-11-11T14:30:03.340554694Z","summary":"Heap-buffer-overflow in ZSTD_decompressBlock_internal","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36623\n\n```\nCrash type: Heap-buffer-overflow READ 4\nCrash state:\nZSTD_decompressBlock_internal\nZSTD_decompressMultiFrame\nZSTD_decompressDCtx\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"861ba79f31393dec0a0782ca11cf32cebb6f6610"}]}],"versions":["v2.0.0","v2.0.0-rc2","v2.0.0.rc1","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0","v3.6.1"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2021-1070.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36623"}]}
{"schema_version":"1.9.2","id":"OSV-2021-1070","published":"2021-07-29T00:01:10.187569Z","modified":"2026-11-12T14:30:06.030965700Z","summary":"Heap-buffer-overflow in ZSTD_decompressBlock_internal","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36623\n\n```\nCrash type: Heap-buffer-overflow READ 4\nCrash state:\nZSTD_decompressBlock_internal\nZSTD_decompressMultiFrame\nZSTD_decompressDCtx\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"861ba79f31393dec0a0782ca11cf32cebb6f6610"}]}],"versions":["v2.0.0","v2.0.0-rc2","v2.0.0.rc1","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0","v3.6.1","v3.6.2"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2021-1070.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36623"}]}
+1 -1
View File
@@ -1 +1 @@
{"schema_version":"1.9.2","id":"OSV-2021-1086","published":"2021-08-02T00:00:31.888461Z","modified":"2026-11-11T14:30:03.211606649Z","summary":"Heap-buffer-overflow in dwg_convert_SAB_to_SAT1","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36728\n\n```\nCrash type: Heap-buffer-overflow READ 2\nCrash state:\ndwg_convert_SAB_to_SAT1\ndxf_3dsolid\ndwg_dxf_REGION_private\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"629cbbdcebd7f5751ddb72eacf8f3e1a5b854e2b"}]}],"versions":["0.12.3.4264","0.12.3.4267","0.12.3.4270","0.12.3.4273","0.12.3.4280","0.12.4","0.12.4.4288","0.12.4.4296","0.12.4.4298","0.12.4.4300","0.12.4.4302","0.12.4.4307","0.12.4.4313","0.12.4.4317","0.12.4.4321","0.12.4.4324","0.12.4.4331","0.12.4.4338","0.12.4.4343","0.12.4.4348","0.12.4.4362","0.12.4.4364","0.12.4.4367","0.12.4.4287","0.12.4.4368","0.12.4.4375","0.12.4.4378","0.12.4.4382","0.12.4.4384","0.12.4.4387","0.12.4.4390","0.12.4.4393","0.12.5-pre","0.12.4.4395","0.12.4.4398","0.12.4.4399","0.12.4.4400","0.12.4.4402","0.12.5","0.12.4.4403","0.12.4.4404","0.12.4.4409","0.12.4.4415","0.12.4.4420","0.12.4.4423","0.12.4.4425","0.12.4.4430","0.12.4.4437","0.12.4.4442","0.12.4.4444","0.12.4.4462","0.12.4.4466","0.12.4.4467","0.12.4.4475","0.12.4.4487","0.12.4.4491","0.12.4.4492","0.12.4.4494","0.12.4.4497","0.12.4.4507","0.12.4.4515","0.12.4.4517","0.12.4.4522","0.12.4.4527","0.12.4.4530","0.12.4.4533","0.12.4.4535","0.12.4.4542","0.12.4.4544","0.12.4.4545","0.12.4.4548","0.12.4.4550","0.12.4.4553","0.12.4.4566","0.12.4.4567","0.12.4.4572","0.12.4.4583","0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.Line truncated
{"schema_version":"1.9.2","id":"OSV-2021-1086","published":"2021-08-02T00:00:31.888461Z","modified":"2026-11-12T14:30:05.617764981Z","summary":"Heap-buffer-overflow in dwg_convert_SAB_to_SAT1","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36728\n\n```\nCrash type: Heap-buffer-overflow READ 2\nCrash state:\ndwg_convert_SAB_to_SAT1\ndxf_3dsolid\ndwg_dxf_REGION_private\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"629cbbdcebd7f5751ddb72eacf8f3e1a5b854e2b"}]}],"versions":["0.12.3.4264","0.12.3.4267","0.12.3.4270","0.12.3.4273","0.12.3.4280","0.12.4","0.12.4.4288","0.12.4.4296","0.12.4.4298","0.12.4.4300","0.12.4.4302","0.12.4.4307","0.12.4.4313","0.12.4.4317","0.12.4.4321","0.12.4.4324","0.12.4.4331","0.12.4.4338","0.12.4.4343","0.12.4.4348","0.12.4.4362","0.12.4.4364","0.12.4.4367","0.12.4.4287","0.12.4.4368","0.12.4.4375","0.12.4.4378","0.12.4.4382","0.12.4.4384","0.12.4.4387","0.12.4.4390","0.12.4.4393","0.12.5-pre","0.12.4.4395","0.12.4.4398","0.12.4.4399","0.12.4.4400","0.12.4.4402","0.12.5","0.12.4.4403","0.12.4.4404","0.12.4.4409","0.12.4.4415","0.12.4.4420","0.12.4.4423","0.12.4.4425","0.12.4.4430","0.12.4.4437","0.12.4.4442","0.12.4.4444","0.12.4.4462","0.12.4.4466","0.12.4.4467","0.12.4.4475","0.12.4.4487","0.12.4.4491","0.12.4.4492","0.12.4.4494","0.12.4.4497","0.12.4.4507","0.12.4.4515","0.12.4.4517","0.12.4.4522","0.12.4.4527","0.12.4.4530","0.12.4.4533","0.12.4.4535","0.12.4.4542","0.12.4.4544","0.12.4.4545","0.12.4.4548","0.12.4.4550","0.12.4.4553","0.12.4.4566","0.12.4.4567","0.12.4.4572","0.12.4.4583","0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.Line truncated
+1 -1
View File
@@ -1 +1 @@
{"schema_version":"1.9.2","id":"OSV-2021-1672","published":"2021-12-12T00:01:29.747137Z","modified":"2026-11-11T14:30:03.341943960Z","summary":"Heap-buffer-overflow in blosc_d","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42210\n\n```\nCrash type: Heap-buffer-overflow READ 4\nCrash state:\nblosc_d\ndo_job\nblosc_run_decompression_with_context\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"4a727370b1c2e9746434c00bf2236db86c31ea5c"}]}],"versions":["v2.0.0","v2.0.0-rc2","v2.0.0.rc1","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0","v3.6.1"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2021-1672.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42210"}]}
{"schema_version":"1.9.2","id":"OSV-2021-1672","published":"2021-12-12T00:01:29.747137Z","modified":"2026-11-12T14:30:05.281210139Z","summary":"Heap-buffer-overflow in blosc_d","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42210\n\n```\nCrash type: Heap-buffer-overflow READ 4\nCrash state:\nblosc_d\ndo_job\nblosc_run_decompression_with_context\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"4a727370b1c2e9746434c00bf2236db86c31ea5c"}]}],"versions":["v2.0.0","v2.0.0-rc2","v2.0.0.rc1","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0","v3.6.1","v3.6.2"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2021-1672.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42210"}]}
+1 -1
View File
@@ -1 +1 @@
{"schema_version":"1.9.2","id":"OSV-2022-1134","published":"2022-11-04T00:02:11.463429Z","modified":"2026-11-11T14:30:03.340465029Z","summary":"Heap-buffer-overflow in ndlz8_decompress","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52967\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\nndlz8_decompress\nblosc_d\ndo_job\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"1c9795f2e3e04a79f13d9e7658e6d6e47dfe1cc4"}]}],"versions":["v2.0.0","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0","v3.6.1"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2022-1134.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52967"}]}
{"schema_version":"1.9.2","id":"OSV-2022-1134","published":"2022-11-04T00:02:11.463429Z","modified":"2026-11-12T14:30:04.156546976Z","summary":"Heap-buffer-overflow in ndlz8_decompress","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52967\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\nndlz8_decompress\nblosc_d\ndo_job\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"1c9795f2e3e04a79f13d9e7658e6d6e47dfe1cc4"}]}],"versions":["v2.0.0","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0","v3.6.1","v3.6.2"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2022-1134.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52967"}]}
+1 -1
View File
@@ -1 +1 @@
{"schema_version":"1.9.2","id":"OSV-2022-1176","published":"2022-11-18T13:00:26.857477Z","modified":"2026-11-11T14:30:03.225734879Z","summary":"Heap-double-free in dwg_free","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53483\n\n```\nCrash type: Heap-double-free\nCrash state:\ndwg_free\nllvmfuzz.c\ndwg_free\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"2d4a473b670848fe9aac2fde249964d1ed9ba97e"}]}],"versions":["0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","Line truncated
{"schema_version":"1.9.2","id":"OSV-2022-1176","published":"2022-11-18T13:00:26.857477Z","modified":"2026-11-12T14:30:06.189452477Z","summary":"Heap-double-free in dwg_free","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53483\n\n```\nCrash type: Heap-double-free\nCrash state:\ndwg_free\nllvmfuzz.c\ndwg_free\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"2d4a473b670848fe9aac2fde249964d1ed9ba97e"}]}],"versions":["0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","Line truncated
+1 -1
View File
@@ -1 +1 @@
{"schema_version":"1.9.2","id":"OSV-2022-1198","published":"2022-11-23T13:02:06.623044Z","modified":"2026-11-11T14:45:02.962738412Z","summary":"Heap-buffer-overflow in dwg_json_LTYPE","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53617\n\n```\nCrash type: Heap-buffer-overflow READ 8\nCrash state:\ndwg_json_LTYPE\njson_objects_write\ndwg_write_json\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"580e8bbebf18579b97e2c20b032368b9079624ca"}]}],"versions":["0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0Line truncated
{"schema_version":"1.9.2","id":"OSV-2022-1198","published":"2022-11-23T13:02:06.623044Z","modified":"2026-11-12T14:30:04.366030564Z","summary":"Heap-buffer-overflow in dwg_json_LTYPE","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53617\n\n```\nCrash type: Heap-buffer-overflow READ 8\nCrash state:\ndwg_json_LTYPE\njson_objects_write\ndwg_write_json\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"580e8bbebf18579b97e2c20b032368b9079624ca"}]}],"versions":["0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0Line truncated
+1 -1
View File
@@ -1 +1 @@
{"schema_version":"1.9.2","id":"OSV-2022-1259","published":"2022-12-13T13:00:46.870838Z","modified":"2026-11-11T14:45:03.811584307Z","summary":"Heap-buffer-overflow in dwg_decode_INSERT_private","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54228\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\ndwg_decode_INSERT_private\ndwg_decode_INSERT\ndwg_decode_add_object\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"7a44f5e43b2a49bf244e24b796a657c9c78f31a1"}]}],"versions":["0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0Line truncated
{"schema_version":"1.9.2","id":"OSV-2022-1259","published":"2022-12-13T13:00:46.870838Z","modified":"2026-11-12T14:30:04.362441034Z","summary":"Heap-buffer-overflow in dwg_decode_INSERT_private","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54228\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\ndwg_decode_INSERT_private\ndwg_decode_INSERT\ndwg_decode_add_object\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"7a44f5e43b2a49bf244e24b796a657c9c78f31a1"}]}],"versions":["0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0Line truncated
+1 -1
View File
@@ -1 +1 @@
{"schema_version":"1.9.2","id":"OSV-2022-1277","published":"2023-06-26T14:01:01.876870Z","modified":"2026-11-10T14:30:05.710184962Z","summary":"Heap-use-after-free in mk_event_timeout_destroy","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60089\n\n```\nCrash type: Heap-use-after-free WRITE 8\nCrash state:\nmk_event_timeout_destroy\nflb_sched_destroy\nflb_config_exit\n```\n","affected":[{"package":{"name":"fluent-bit","ecosystem":"OSS-Fuzz","purl":"pkg:generic/fluent-bit"},"ranges":[{"type":"GIT","repo":"https://github.com/fluent/fluent-bit/","events":[{"introduced":"0c5d8da6bbf32d4712d4dd718155ac2301b1bb17"},{"introduced":"73bc3ec78451aa41757bf7a12366228b79527544"}]}],"versions":["tiger-2.0.9-dev-20230104","v2.0.0","v2.0.0-rc1","v2.0.0-rc2","v2.0.0-rc3","v2.0.0pre","v2.0.1","v2.0.10","v2.0.11","v2.0.12","v2.0.13","v2.0.14","v2.0.2","v2.0.3","v2.0.4","v2.0.5","v2.0.6","v2.0.7","v2.0.8","v2.0.9","v2.1.0","v2.1.0-rc1","v2.1.0-rc2","v2.1.1","v2.1.10","v2.1.2","v2.1.3","v2.1.4","v2.1.5","v2.1.5-windows-artifact-fix","v2.1.6","v2.1.7","v2.1.8","v2.1.9","vv.2.0.7","v2.2.0","v2.2.1","v2.2.2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.0.4","v2.2.3","v3.0.5","v3.0.6","v3.0.7","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.1.6","v3.1.7","v3.1.8","v3.1.9","v3.1.10","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.2.4","v3.2.5","v3.2.6","v3.2.7","v3.2.8","v3.2.9","v3.2.10","v4.0.0","v4.0.1","v4.0.2","v4.0.3","v4.0.4","v4.0.5","v4.0.6","v4.0.7","v4.0.8","v4.0.9","v4.0.10","v4.0.11","v4.1.0","v4.0.12","v4.1.1","v4.0.13","v4.2.0","v4.2.1","v4.2.2","v5.0.0-dev-20260228","v5.0.0","v5.0.1","v5.0.2","v5.0.3","v5.0.4","v5.0.5","v5.0.6","v5.0.7","v5.0.8","v5.0.9","v5.1.0","v5.1.1","v5.1.2","v5.1.3","v5.1.4","v5.1.5","wasm-browser-e090fbd054c82ae67f12ebe926600827b6cf5f48","wasm-browser-364a2d700a05893618527fff8d4d1f9e5e2e35cd","wasm-browser-41dcc3d1f91a758921a2b995e7f249905c776277","wasm-browser-78911a0ff0594a2198235a96d6048d72909ff041","wasm-browser-85c7030b29c4a9702fa0229efd9eb71736e03038","wasm-browser-a0c6ac530896994398822df052015582e3830243","wasm-browser-a88af96c92534e1bb0d585f63e97e41cd543a059","wasm-browser-28ebf30c97d5bcb9ac6e3af3794023f1ebc92543","wasm-browser-9c04b3bcfcb50a036692ab30f2added0cb682215","wasm-browser-f6c314476f1fc9d6aac2bff1154a33a40a8a721a","wasm-browser-fc966e90da4d99afc36bee42e3ac444dcab9372e","v5.2.0","wasm-browser-8590ef6a819e36b84ee14ae325f46ea10b3ef852","wasm-browser-e0149076aeff009d35fd495e55379cb78f1eb53f","wasm-browser-d9464c001e4ab5a17b8dac566e4f7ab25c2bcb0b","v5.0.11","v5.0.10","v4.2.8","v4.2.7","v4.2.6","v4.2.5","v4.2.4","v4.2.3","v4.2.3.1","v4.0.14","v4.1.2"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/fluent-bit/OSV-2022-1277.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60089"}]}
{"schema_version":"1.9.2","id":"OSV-2022-1277","published":"2023-06-26T14:01:01.876870Z","modified":"2026-11-12T14:30:04.543054874Z","summary":"Heap-use-after-free in mk_event_timeout_destroy","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60089\n\n```\nCrash type: Heap-use-after-free WRITE 8\nCrash state:\nmk_event_timeout_destroy\nflb_sched_destroy\nflb_config_exit\n```\n","affected":[{"package":{"name":"fluent-bit","ecosystem":"OSS-Fuzz","purl":"pkg:generic/fluent-bit"},"ranges":[{"type":"GIT","repo":"https://github.com/fluent/fluent-bit/","events":[{"introduced":"0c5d8da6bbf32d4712d4dd718155ac2301b1bb17"},{"introduced":"73bc3ec78451aa41757bf7a12366228b79527544"}]}],"versions":["tiger-2.0.9-dev-20230104","v2.0.0","v2.0.0-rc1","v2.0.0-rc2","v2.0.0-rc3","v2.0.0pre","v2.0.1","v2.0.10","v2.0.11","v2.0.12","v2.0.13","v2.0.14","v2.0.2","v2.0.3","v2.0.4","v2.0.5","v2.0.6","v2.0.7","v2.0.8","v2.0.9","v2.1.0","v2.1.0-rc1","v2.1.0-rc2","v2.1.1","v2.1.10","v2.1.2","v2.1.3","v2.1.4","v2.1.5","v2.1.5-windows-artifact-fix","v2.1.6","v2.1.7","v2.1.8","v2.1.9","vv.2.0.7","v2.2.0","v2.2.1","v2.2.2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.0.4","v2.2.3","v3.0.5","v3.0.6","v3.0.7","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.1.6","v3.1.7","v3.1.8","v3.1.9","v3.1.10","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.2.4","v3.2.5","v3.2.6","v3.2.7","v3.2.8","v3.2.9","v3.2.10","v4.0.0","v4.0.1","v4.0.2","v4.0.3","v4.0.4","v4.0.5","v4.0.6","v4.0.7","v4.0.8","v4.0.9","v4.0.10","v4.0.11","v4.1.0","v4.0.12","v4.1.1","v4.0.13","v4.2.0","v4.2.1","v4.2.2","v5.0.0-dev-20260228","v5.0.0","v5.0.1","v5.0.2","v5.0.3","v5.0.4","v5.0.5","v5.0.6","v5.0.7","v5.0.8","v5.0.9","v5.1.0","v5.1.1","v5.1.2","v5.1.3","v5.1.4","v5.1.5","wasm-browser-e090fbd054c82ae67f12ebe926600827b6cf5f48","wasm-browser-364a2d700a05893618527fff8d4d1f9e5e2e35cd","wasm-browser-41dcc3d1f91a758921a2b995e7f249905c776277","wasm-browser-78911a0ff0594a2198235a96d6048d72909ff041","wasm-browser-85c7030b29c4a9702fa0229efd9eb71736e03038","wasm-browser-a0c6ac530896994398822df052015582e3830243","wasm-browser-a88af96c92534e1bb0d585f63e97e41cd543a059","wasm-browser-28ebf30c97d5bcb9ac6e3af3794023f1ebc92543","wasm-browser-9c04b3bcfcb50a036692ab30f2added0cb682215","wasm-browser-f6c314476f1fc9d6aac2bff1154a33a40a8a721a","wasm-browser-fc966e90da4d99afc36bee42e3ac444dcab9372e","v5.2.0","wasm-browser-8590ef6a819e36b84ee14ae325f46ea10b3ef852","wasm-browser-e0149076aeff009d35fd495e55379cb78f1eb53f","wasm-browser-d9464c001e4ab5a17b8dac566e4f7ab25c2bcb0b","wasm-browser-f5a3cd20195a05542ec0b3e009084b0bce28ca54","v5.0.11","v5.0.10","v4.2.8","v4.2.7","v4.2.6","v4.2.5","v4.2.4","v4.2.3","v4.2.3.1","v4.0.14","v4.1.2"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/fluent-bit/OSV-2022-1277.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60089"}]}
+1 -1
View File
@@ -1 +1 @@
{"schema_version":"1.9.2","id":"OSV-2022-372","published":"2022-04-26T00:00:09.352798Z","modified":"2026-11-11T14:45:04.039550097Z","summary":"Heap-buffer-overflow in dwg_encode_VERTEX_2D","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46994\n\n```\nCrash type: Heap-buffer-overflow READ 8\nCrash state:\ndwg_encode_VERTEX_2D\ndwg_encode_add_object\ndwg_encode\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"7bda865d59f843e174ac7e14c7dfe25243900956"}]}],"versions":["0.12.4.4522","0.12.4.4527","0.12.4.4530","0.12.4.4533","0.12.4.4535","0.12.4.4542","0.12.4.4544","0.12.4.4545","0.12.4.4548","0.12.4.4550","0.12.4.4553","0.12.4.4566","0.12.4.4567","0.12.4.4572","0.12.4.4583","0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.Line truncated
{"schema_version":"1.9.2","id":"OSV-2022-372","published":"2022-04-26T00:00:09.352798Z","modified":"2026-11-12T14:30:04.367952623Z","summary":"Heap-buffer-overflow in dwg_encode_VERTEX_2D","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46994\n\n```\nCrash type: Heap-buffer-overflow READ 8\nCrash state:\ndwg_encode_VERTEX_2D\ndwg_encode_add_object\ndwg_encode\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"7bda865d59f843e174ac7e14c7dfe25243900956"}]}],"versions":["0.12.4.4522","0.12.4.4527","0.12.4.4530","0.12.4.4533","0.12.4.4535","0.12.4.4542","0.12.4.4544","0.12.4.4545","0.12.4.4548","0.12.4.4550","0.12.4.4553","0.12.4.4566","0.12.4.4567","0.12.4.4572","0.12.4.4583","0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.Line truncated
+1 -1
View File
@@ -1 +1 @@
{"schema_version":"1.9.2","id":"OSV-2022-379","published":"2022-04-27T00:00:44.539231Z","modified":"2026-11-11T14:30:03.222354709Z","summary":"Segv on unknown address in bit_write_TV","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47014\n\n```\nCrash type: Segv on unknown address\nCrash state:\nbit_write_TV\nbit_write_T\ndwg_encode_BLOCK\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"7bda865d59f843e174ac7e14c7dfe25243900956"}]}],"versions":["0.12.4.4522","0.12.4.4527","0.12.4.4530","0.12.4.4533","0.12.4.4535","0.12.4.4542","0.12.4.4544","0.12.4.4545","0.12.4.4548","0.12.4.4550","0.12.4.4553","0.12.4.4566","0.12.4.4567","0.12.4.4572","0.12.4.4583","0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046"Line truncated
{"schema_version":"1.9.2","id":"OSV-2022-379","published":"2022-04-27T00:00:44.539231Z","modified":"2026-11-12T14:30:05.295061106Z","summary":"Segv on unknown address in bit_write_TV","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47014\n\n```\nCrash type: Segv on unknown address\nCrash state:\nbit_write_TV\nbit_write_T\ndwg_encode_BLOCK\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"7bda865d59f843e174ac7e14c7dfe25243900956"}]}],"versions":["0.12.4.4522","0.12.4.4527","0.12.4.4530","0.12.4.4533","0.12.4.4535","0.12.4.4542","0.12.4.4544","0.12.4.4545","0.12.4.4548","0.12.4.4550","0.12.4.4553","0.12.4.4566","0.12.4.4567","0.12.4.4572","0.12.4.4583","0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046"Line truncated
+1 -1
View File
@@ -1 +1 @@
{"schema_version":"1.9.2","id":"OSV-2022-388","published":"2022-05-01T00:01:54.904711Z","modified":"2026-11-11T14:45:02.965884894Z","summary":"Segv on unknown address in dwg_ref_get_object","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47151\n\n```\nCrash type: Segv on unknown address\nCrash state:\ndwg_ref_get_object\ndwg_geojson_feature\ndwg_geojson_object\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"7bda865d59f843e174ac7e14c7dfe25243900956"}]}],"versions":["0.12.4.4522","0.12.4.4527","0.12.4.4530","0.12.4.4533","0.12.4.4535","0.12.4.4542","0.12.4.4544","0.12.4.4545","0.12.4.4548","0.12.4.4550","0.12.4.4553","0.12.4.4566","0.12.4.4567","0.12.4.4572","0.12.4.4583","0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12Line truncated
{"schema_version":"1.9.2","id":"OSV-2022-388","published":"2022-05-01T00:01:54.904711Z","modified":"2026-11-12T14:30:05.363352097Z","summary":"Segv on unknown address in dwg_ref_get_object","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47151\n\n```\nCrash type: Segv on unknown address\nCrash state:\ndwg_ref_get_object\ndwg_geojson_feature\ndwg_geojson_object\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"7bda865d59f843e174ac7e14c7dfe25243900956"}]}],"versions":["0.12.4.4522","0.12.4.4527","0.12.4.4530","0.12.4.4533","0.12.4.4535","0.12.4.4542","0.12.4.4544","0.12.4.4545","0.12.4.4548","0.12.4.4550","0.12.4.4553","0.12.4.4566","0.12.4.4567","0.12.4.4572","0.12.4.4583","0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12Line truncated
+1 -1
View File
@@ -1 +1 @@
{"schema_version":"1.9.2","id":"OSV-2022-400","published":"2022-05-08T00:00:40.782520Z","modified":"2026-11-11T14:45:02.979866453Z","summary":"Heap-double-free in dwg_free_XRECORD_private","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47300\n\n```\nCrash type: Heap-double-free\nCrash state:\ndwg_free_XRECORD_private\ndwg_free_XRECORD\ndwg_free_object\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"4eadb3538aee39bf0732ee5b273f414ddafa765e"}]}],"versions":["0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116"Line truncated
{"schema_version":"1.9.2","id":"OSV-2022-400","published":"2022-05-08T00:00:40.782520Z","modified":"2026-11-12T14:30:04.357101878Z","summary":"Heap-double-free in dwg_free_XRECORD_private","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47300\n\n```\nCrash type: Heap-double-free\nCrash state:\ndwg_free_XRECORD_private\ndwg_free_XRECORD\ndwg_free_object\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"4eadb3538aee39bf0732ee5b273f414ddafa765e"}]}],"versions":["0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116"Line truncated
+1 -1
View File
@@ -1 +1 @@
{"schema_version":"1.9.2","id":"OSV-2022-608","published":"2022-07-21T00:01:50.967627Z","modified":"2026-11-11T14:30:03.783789743Z","summary":"Heap-use-after-free in jxl::WriteToPixelCallbackStage::ProcessRow","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49277\n\n```\nCrash type: Heap-use-after-free READ 4\nCrash state:\njxl::WriteToPixelCallbackStage::ProcessRow\njxl::LowMemoryRenderPipeline::RenderRect\njxl::LowMemoryRenderPipeline::ProcessBuffers\n```\n","affected":[{"package":{"name":"libjxl","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libjxl"},"ranges":[{"type":"GIT","repo":"https://github.com/libjxl/libjxl.git","events":[{"introduced":"eafb38fb4f3d2e00f9402a0c09ac592ebfd6a795"}]}],"versions":["v0.7-base","v0.7rc","v0.7.0","v1.0-snapshot","v0.8-snapshot","v0.8.0rc1","v0.8.0","v0.8.1","v0.9-snapshot","v0.8.2","v0.9.0","v0.9.1","v0.9.2","v0.10.0","v0.10-snapshot","v0.10.1","v0.10.2","v0.10.3","v0.8.3","v0.9.3","v0.7.1","v0.11-snapshot","v0.11.0","v0.10.4","v0.11.1","v0.8.4","v0.9.4","v0.7.2","v0.7.3","v0.10.5","v0.11.2","v0.8.5","v0.9.5","v0.12-snapshot","v0.12.0","v0.13.0"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libjxl/OSV-2022-608.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49277"}]}
{"schema_version":"1.9.2","id":"OSV-2022-608","published":"2022-07-21T00:01:50.967627Z","modified":"2026-11-12T14:30:04.060883164Z","summary":"Heap-use-after-free in jxl::WriteToPixelCallbackStage::ProcessRow","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49277\n\n```\nCrash type: Heap-use-after-free READ 4\nCrash state:\njxl::WriteToPixelCallbackStage::ProcessRow\njxl::LowMemoryRenderPipeline::RenderRect\njxl::LowMemoryRenderPipeline::ProcessBuffers\n```\n","affected":[{"package":{"name":"libjxl","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libjxl"},"ranges":[{"type":"GIT","repo":"https://github.com/libjxl/libjxl.git","events":[{"introduced":"eafb38fb4f3d2e00f9402a0c09ac592ebfd6a795"}]}],"versions":["v0.7-base","v0.7rc","v0.7.0","v1.0-snapshot","v0.8-snapshot","v0.8.0rc1","v0.8.0","v0.8.1","v0.9-snapshot","v0.8.2","v0.9.0","v0.9.1","v0.9.2","v0.10.0","v0.10-snapshot","v0.10.1","v0.10.2","v0.10.3","v0.8.3","v0.9.3","v0.7.1","v0.11-snapshot","v0.11.0","v0.10.4","v0.11.1","v0.8.4","v0.9.4","v0.7.2","v0.7.3","v0.10.5","v0.11.2","v0.8.5","v0.9.5","v0.12-snapshot","v0.12.0","v0.13.0","v0.13-snapshot"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libjxl/OSV-2022-608.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49277"}]}
+1 -1
View File
@@ -1 +1 @@
{"schema_version":"1.9.2","id":"OSV-2022-653","published":"2022-07-30T00:01:52.491112Z","modified":"2026-11-11T14:30:03.211482113Z","summary":"Heap-double-free in dwg_free_common_entity_data","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49602\n\n```\nCrash type: Heap-double-free\nCrash state:\ndwg_free_common_entity_data\ndwg_free_DIMENSION_ANG2LN\ndwg_free_object\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"8984c223f14dc81180ca5da66f92e5932992bb5c"}]}],"versions":["0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138Line truncated
{"schema_version":"1.9.2","id":"OSV-2022-653","published":"2022-07-30T00:01:52.491112Z","modified":"2026-11-12T14:30:04.360929516Z","summary":"Heap-double-free in dwg_free_common_entity_data","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49602\n\n```\nCrash type: Heap-double-free\nCrash state:\ndwg_free_common_entity_data\ndwg_free_DIMENSION_ANG2LN\ndwg_free_object\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"8984c223f14dc81180ca5da66f92e5932992bb5c"}]}],"versions":["0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138Line truncated
+1 -1
View File
@@ -1 +1 @@
{"schema_version":"1.9.2","id":"OSV-2022-714","published":"2022-08-15T00:00:47.794062Z","modified":"2026-11-10T14:30:05.823322213Z","summary":"Heap-buffer-overflow in dynapi_set_helper","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50194\n\n```\nCrash type: Heap-buffer-overflow WRITE 16\nCrash state:\ndynapi_set_helper\ndwg_dynapi_header_set_value\njson_HEADER\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"8984c223f14dc81180ca5da66f92e5932992bb5c"}]}],"versions":["0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.Line truncated
{"schema_version":"1.9.2","id":"OSV-2022-714","published":"2022-08-15T00:00:47.794062Z","modified":"2026-11-12T14:30:04.355338067Z","summary":"Heap-buffer-overflow in dynapi_set_helper","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50194\n\n```\nCrash type: Heap-buffer-overflow WRITE 16\nCrash state:\ndynapi_set_helper\ndwg_dynapi_header_set_value\njson_HEADER\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"8984c223f14dc81180ca5da66f92e5932992bb5c"}]}],"versions":["0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.Line truncated
+1 -1
View File
@@ -1 +1 @@
{"schema_version":"1.9.2","id":"OSV-2022-725","published":"2022-08-18T00:01:05.918943Z","modified":"2026-11-11T14:30:03.783986990Z","summary":"Heap-buffer-overflow in jxl::N_EMU128::WriteToU8Stage::ProcessRow","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50295\n\n```\nCrash type: Heap-buffer-overflow WRITE 1\nCrash state:\njxl::N_EMU128::WriteToU8Stage::ProcessRow\njxl::LowMemoryRenderPipeline::RenderRect\njxl::LowMemoryRenderPipeline::ProcessBuffers\n```\n","affected":[{"package":{"name":"libjxl","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libjxl"},"ranges":[{"type":"GIT","repo":"https://github.com/libjxl/libjxl.git","events":[{"introduced":"a50e71631cabfbdd57d540ba080ecec19b4664af"}]}],"versions":["v0.8.0rc1","v0.8.0","v0.8.1","v0.9-snapshot","v0.8.2","v0.9.0","v0.9.1","v0.9.2","v0.10.0","v0.10-snapshot","v0.10.1","v0.10.2","v0.10.3","v0.8.3","v0.9.3","v0.11-snapshot","v0.11.0","v0.10.4","v0.11.1","v0.8.4","v0.9.4","v0.10.5","v0.11.2","v0.8.5","v0.9.5","v0.12-snapshot","v0.12.0","v0.13.0"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libjxl/OSV-2022-725.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50295"}]}
{"schema_version":"1.9.2","id":"OSV-2022-725","published":"2022-08-18T00:01:05.918943Z","modified":"2026-11-12T14:30:05.299150450Z","summary":"Heap-buffer-overflow in jxl::N_EMU128::WriteToU8Stage::ProcessRow","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50295\n\n```\nCrash type: Heap-buffer-overflow WRITE 1\nCrash state:\njxl::N_EMU128::WriteToU8Stage::ProcessRow\njxl::LowMemoryRenderPipeline::RenderRect\njxl::LowMemoryRenderPipeline::ProcessBuffers\n```\n","affected":[{"package":{"name":"libjxl","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libjxl"},"ranges":[{"type":"GIT","repo":"https://github.com/libjxl/libjxl.git","events":[{"introduced":"a50e71631cabfbdd57d540ba080ecec19b4664af"}]}],"versions":["v0.8.0rc1","v0.8.0","v0.8.1","v0.9-snapshot","v0.8.2","v0.9.0","v0.9.1","v0.9.2","v0.10.0","v0.10-snapshot","v0.10.1","v0.10.2","v0.10.3","v0.8.3","v0.9.3","v0.11-snapshot","v0.11.0","v0.10.4","v0.11.1","v0.8.4","v0.9.4","v0.10.5","v0.11.2","v0.8.5","v0.9.5","v0.12-snapshot","v0.12.0","v0.13.0","v0.13-snapshot"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libjxl/OSV-2022-725.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50295"}]}
+1 -1
View File
@@ -1 +1 @@
{"schema_version":"1.9.0","id":"OSV-2022-867","published":"2022-09-09T00:01:54.157712Z","modified":"2026-10-22T19:08:21.081934619Z","summary":"Heap-buffer-overflow in get_utf_8_string","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51090\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\nget_utf_8_string\ndissect_form_urlencoded\ncall_dissector_work\n```\n","affected":[{"package":{"name":"wireshark","ecosystem":"OSS-Fuzz","purl":"pkg:generic/wireshark"},"ranges":[{"type":"GIT","repo":"https://gitlab.com/wireshark/wireshark.git","events":[{"introduced":"248ff020e7ea17785cc9451f6d24ad61c4310d1f"}]}],"versions":["v4.1.0","v4.1.1rc0","v4.2.0rc0","v4.3.0rc0","v4.2.0rc1","v4.2.0rc2","wireshark-4.2.0rc2","v4.2.0rc3","v4.2.0","v4.2.1rc0","wireshark-4.2.0","v4.2.1","v4.2.2rc0","wireshark-4.2.1","v4.2.2","v4.2.3rc0","wireshark-4.2.2","v4.2.3","v4.2.4rc0","wireshark-4.2.3","v4.2.4","v4.2.5rc0","wireshark-4.2.4","v4.2.5","v4.2.6rc0","wireshark-4.2.5","v4.3.0rc1","v4.2.6","v4.2.7rc0","wireshark-4.2.6","v4.3.0","v4.3.1rc0","v4.3.1","v4.3.2rc0","v4.4.0rc0","v4.5.0rc0","v4.4.0rc1","v4.2.7","v4.2.8rc0","v4.4.0","v4.4.1rc0","wireshark-4.2.7","wireshark-4.4.0","v4.2.8","v4.2.9rc0","v4.4.1","v4.4.2rc0","wireshark-4.2.8","wireshark-4.4.1","v4.2.10rc0","v4.2.9","v4.4.2","v4.4.3rc0","wireshark-4.2.9","wireshark-4.4.2","ssv0.9.0rc0","v4.2.10","v4.2.11rc0","v4.4.3","v4.4.4rc0","wireshark-4.2.10","wireshark-4.4.3","ssv0.9.0rc1","ssv0.9.0","v4.2.11","v4.2.12rc0","v4.4.4","v4.4.5rc0","wireshark-4.2.11","wireshark-4.4.4","ssv0.9.1","v4.4.5","v4.4.6rc0","wireshark-4.4.5","ssv0.9.2rc0","v4.4.6","v4.6.7rc0","wireshark-4.4.6","v4.4.7rc0","v4.2.12","v4.2.13rc0","v4.4.7","v4.4.8rc0","wireshark-4.2.12","wireshark-4.4.7","ssv0.9.2","ssv0.9.3rc0","v4.4.8","v4.4.9rc0","wireshark-4.4.8","ssv0.9.3","v4.2.13","v4.2.14rc0","v4.4.10rc0","v4.4.9","v4.6.0rc0","v4.6.0rc1","v4.7.0rc0","wireshark-4.2.13","wireshark-4.4.9","ssv0.9.4rc0","v4.2.14","v4.4.10","v4.6.0","v4.2.15rc0","v4.4.11rc0","v4.6.1rc0","v4.4.11","v4.4.12rc0","v4.6.1","v4.6.2rc0","v4.6.2","v4.6.3rc0","v4.4.12","v4.4.13rc0","v4.4.13","v4.4.14rc0","v4.6.3","v4.6.4rc0","v4.4.14","v4.4.15rc0","v4.6.4","v4.6.5rc0","v4.4.15","v4.4.16rc0","v4.6.5","v4.6.6rc0","v4.4.16","v4.4.17rc0","v4.6.6","ssv0.10.0","v4.7.0","ssv0.10.1rc0","v4.7.1rc0","ssv0.10.1","ssv0.10.2rc0","v4.7.1","v4.7.2rc0","v4.4.17","v4.4.18rc0","v4.6.7","v4.6.8rc0","ssv0.10.2","ssv0.10.3rc0","v4.7.2","v4.7.3rc0","v4.4.18","v4.4.19rc0","v4.6.8","v4.6.9rc0","ssv0.10.3","ssv0.10.4rc0","v4.7.3","v4.7.4rc0","ssv0.10.4","ssv0.10.5rc0","v4.4.19","v4.4.20rc0","v4.6.10rc0","v4.6.9","v4.7.4","v4.7.5rc0","ssv1.0.0rc0","ssv1.1.0rc0","v5.0.0rc0","v5.1.0rc0","ssv1.0.0rc1","v5.0.0rc1"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/wireshark/OSV-2022-867.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51090"}]}
{"schema_version":"1.9.2","id":"OSV-2022-867","published":"2022-09-09T00:01:54.157712Z","modified":"2026-11-12T15:30:29.772849237Z","summary":"Heap-buffer-overflow in get_utf_8_string","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51090\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\nget_utf_8_string\ndissect_form_urlencoded\ncall_dissector_work\n```\n","affected":[{"package":{"name":"wireshark","ecosystem":"OSS-Fuzz","purl":"pkg:generic/wireshark"},"ranges":[{"type":"GIT","repo":"https://gitlab.com/wireshark/wireshark.git","events":[{"introduced":"248ff020e7ea17785cc9451f6d24ad61c4310d1f"}]}],"versions":["v4.1.0","v4.1.1rc0","v4.2.0rc0","v4.3.0rc0","v4.2.0rc1","v4.2.0rc2","wireshark-4.2.0rc2","v4.2.0rc3","v4.2.0","v4.2.1rc0","wireshark-4.2.0","v4.2.1","v4.2.2rc0","wireshark-4.2.1","v4.2.2","v4.2.3rc0","wireshark-4.2.2","v4.2.3","v4.2.4rc0","wireshark-4.2.3","v4.2.4","v4.2.5rc0","wireshark-4.2.4","v4.2.5","v4.2.6rc0","wireshark-4.2.5","v4.3.0rc1","v4.2.6","v4.2.7rc0","wireshark-4.2.6","v4.3.0","v4.3.1rc0","v4.3.1","v4.3.2rc0","v4.4.0rc0","v4.5.0rc0","v4.4.0rc1","v4.2.7","v4.2.8rc0","v4.4.0","v4.4.1rc0","wireshark-4.2.7","wireshark-4.4.0","v4.2.8","v4.2.9rc0","v4.4.1","v4.4.2rc0","wireshark-4.2.8","wireshark-4.4.1","v4.2.10rc0","v4.2.9","v4.4.2","v4.4.3rc0","wireshark-4.2.9","wireshark-4.4.2","ssv0.9.0rc0","v4.2.10","v4.2.11rc0","v4.4.3","v4.4.4rc0","wireshark-4.2.10","wireshark-4.4.3","ssv0.9.0rc1","ssv0.9.0","v4.2.11","v4.2.12rc0","v4.4.4","v4.4.5rc0","wireshark-4.2.11","wireshark-4.4.4","ssv0.9.1","v4.4.5","v4.4.6rc0","wireshark-4.4.5","ssv0.9.2rc0","v4.4.6","v4.6.7rc0","wireshark-4.4.6","v4.4.7rc0","v4.2.12","v4.2.13rc0","v4.4.7","v4.4.8rc0","wireshark-4.2.12","wireshark-4.4.7","ssv0.9.2","ssv0.9.3rc0","v4.4.8","v4.4.9rc0","wireshark-4.4.8","ssv0.9.3","v4.2.13","v4.2.14rc0","v4.4.10rc0","v4.4.9","v4.6.0rc0","v4.6.0rc1","v4.7.0rc0","wireshark-4.2.13","wireshark-4.4.9","ssv0.9.4rc0","v4.2.14","v4.4.10","v4.6.0","v4.2.15rc0","v4.4.11rc0","v4.6.1rc0","v4.4.11","v4.4.12rc0","v4.6.1","v4.6.2rc0","v4.6.2","v4.6.3rc0","v4.4.12","v4.4.13rc0","v4.4.13","v4.4.14rc0","v4.6.3","v4.6.4rc0","v4.4.14","v4.4.15rc0","v4.6.4","v4.6.5rc0","v4.4.15","v4.4.16rc0","v4.6.5","v4.6.6rc0","v4.4.16","v4.4.17rc0","v4.6.6","ssv0.10.0","v4.7.0","ssv0.10.1rc0","v4.7.1rc0","ssv0.10.1","ssv0.10.2rc0","v4.7.1","v4.7.2rc0","v4.4.17","v4.4.18rc0","v4.6.7","v4.6.8rc0","ssv0.10.2","ssv0.10.3rc0","v4.7.2","v4.7.3rc0","v4.4.18","v4.4.19rc0","v4.6.8","v4.6.9rc0","ssv0.10.3","ssv0.10.4rc0","v4.7.3","v4.7.4rc0","ssv0.10.4","ssv0.10.5rc0","v4.4.19","v4.4.20rc0","v4.6.10rc0","v4.6.9","v4.7.4","v4.7.5rc0","ssv1.0.0rc0","ssv1.1.0rc0","v5.0.0rc0","v5.1.0rc0","ssv1.0.0rc1","v5.0.0rc1","ssv1.0.0rc2","v5.0.0rc2"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/wireshark/OSV-2022-867.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51090"}]}
+1 -1
View File
@@ -1 +1 @@
{"schema_version":"1.9.2","id":"OSV-2023-1350","published":"2023-12-23T00:12:38.562149Z","modified":"2026-11-11T14:45:02.966375985Z","summary":"Heap-buffer-overflow in inflate","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65236\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\ninflate\nuncompress2\nuncompress\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"e6035df1d3f285af9a2e756fb428633eb7898881"}]}],"versions":["v2.1.0","v2.1.1","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0","v3.6.1"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2023-1350.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65236"}]}
{"schema_version":"1.9.2","id":"OSV-2023-1350","published":"2023-12-23T00:12:38.562149Z","modified":"2026-11-12T14:30:05.383500188Z","summary":"Heap-buffer-overflow in inflate","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65236\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\ninflate\nuncompress2\nuncompress\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"e6035df1d3f285af9a2e756fb428633eb7898881"}]}],"versions":["v2.1.0","v2.1.1","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0","v3.6.1","v3.6.2"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2023-1350.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65236"}]}
+1 -1
View File
@@ -1 +1 @@
{"schema_version":"1.9.2","id":"OSV-2023-307","published":"2023-04-13T14:02:09.774988Z","modified":"2026-11-11T14:45:03.795060395Z","summary":"Heap-buffer-overflow in bit_read_BB","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57911\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\nbit_read_BB\ndwg_decode_entity\ndwg_decode_OLE2FRAME_private\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"9d068534eb093790d9be1b8aa8ed47cafc7f2285"}]}],"versions":["0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.61Line truncated
{"schema_version":"1.9.2","id":"OSV-2023-307","published":"2023-04-13T14:02:09.774988Z","modified":"2026-11-12T14:30:05.528845520Z","summary":"Heap-buffer-overflow in bit_read_BB","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57911\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\nbit_read_BB\ndwg_decode_entity\ndwg_decode_OLE2FRAME_private\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"9d068534eb093790d9be1b8aa8ed47cafc7f2285"}]}],"versions":["0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.61Line truncated
+1 -1
View File
@@ -1 +1 @@
{"schema_version":"1.9.2","id":"OSV-2023-319","published":"2023-04-16T14:01:58.406534Z","modified":"2026-11-11T14:45:03.997155309Z","summary":"Heap-buffer-overflow in ZSTD_decompressSequencesLong_bmi2","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58035\n\n```\nCrash type: Heap-buffer-overflow READ 8\nCrash state:\nZSTD_decompressSequencesLong_bmi2\nZSTD_decompressSequencesLong\nZSTD_decompressBlock_internal\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"4a727370b1c2e9746434c00bf2236db86c31ea5c"}]}],"versions":["v2.0.0","v2.0.0-rc2","v2.0.0.rc1","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.10.0","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0","v3.6.1"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2023-319.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58035"}]}
{"schema_version":"1.9.2","id":"OSV-2023-319","published":"2023-04-16T14:01:58.406534Z","modified":"2026-11-12T14:30:05.065477165Z","summary":"Heap-buffer-overflow in ZSTD_decompressSequencesLong_bmi2","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58035\n\n```\nCrash type: Heap-buffer-overflow READ 8\nCrash state:\nZSTD_decompressSequencesLong_bmi2\nZSTD_decompressSequencesLong\nZSTD_decompressBlock_internal\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"4a727370b1c2e9746434c00bf2236db86c31ea5c"}]}],"versions":["v2.0.0","v2.0.0-rc2","v2.0.0.rc1","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.10.0","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0","v3.6.1","v3.6.2"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2023-319.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58035"}]}
+1 -1
View File
@@ -1 +1 @@
{"schema_version":"1.9.2","id":"OSV-2023-606","published":"2023-07-23T14:01:02.159160Z","modified":"2026-11-11T14:45:02.976646279Z","summary":"Heap-buffer-overflow in ZSTD_decompressMultiFrame","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60778\n\n```\nCrash type: Heap-buffer-overflow READ {*}\nCrash state:\nZSTD_decompressMultiFrame\nZSTD_decompress_usingDDict\nzstd_wrap_decompress\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"4a727370b1c2e9746434c00bf2236db86c31ea5c"}]}],"versions":["v2.0.0","v2.0.0-rc2","v2.0.0.rc1","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0","v3.6.1"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2023-606.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60778"}]}
{"schema_version":"1.9.2","id":"OSV-2023-606","published":"2023-07-23T14:01:02.159160Z","modified":"2026-11-12T14:30:04.155743409Z","summary":"Heap-buffer-overflow in ZSTD_decompressMultiFrame","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60778\n\n```\nCrash type: Heap-buffer-overflow READ {*}\nCrash state:\nZSTD_decompressMultiFrame\nZSTD_decompress_usingDDict\nzstd_wrap_decompress\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"4a727370b1c2e9746434c00bf2236db86c31ea5c"}]}],"versions":["v2.0.0","v2.0.0-rc2","v2.0.0.rc1","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0","v3.6.1","v3.6.2"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2023-606.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60778"}]}
+1 -1
View File
@@ -1 +1 @@
{"schema_version":"1.9.1","id":"OSV-2024-112","published":"2024-02-16T00:05:47.896843Z","modified":"2026-10-19T14:53:10.350400Z","summary":"Stack-overflow in boost::read_graphviz_detail::parser::parse_subgraph","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66719\n\n```\nCrash type: Stack-overflow\nCrash state:\nboost::read_graphviz_detail::parser::parse_subgraph\nboost::read_graphviz_detail::parser::parse_endpoint_rest\nboost::read_graphviz_detail::parser::parse_stmt\n```\n","affected":[{"package":{"name":"boost","ecosystem":"OSS-Fuzz","purl":"pkg:generic/boost"},"ranges":[{"type":"GIT","repo":"https://github.com/boostorg/boost.git","events":[{"introduced":"9072bfc2d969ca1e8c49651232817201e05e3eae"},{"introduced":"206cf016ae9454ed65e9c5faf4a322f31444fb80"}]}],"versions":["boost-1.85.0","boost-1.85.0.beta1","boost-1.86.0.beta1","boost-1.86.0","boost-1.87.0.beta1","boost-1.87.0","boost-1.88.0.beta1","boost-1.88.0","boost-1.89.0.beta1","boost-1.89.0","boost-1.90.0.beta1","boost-1.90.0","boost-1.91.0.beta1","boost-1.91.0","boost-1.91.0-1","boost-1.92.0.beta1","boost-1.92.0"],"ecosystem_specific":{"severity":"LOW"},"database_specific":{"introduced_range":"0251e5fa19564439f3d654df8d4de1abdbaa72b2:9f83dd55ea67f1bab62c20d29bc5527345aafc55","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/boost/OSV-2024-112.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66719"}]}
{"schema_version":"1.9.2","id":"OSV-2024-112","published":"2024-02-16T00:05:47.896843Z","modified":"2026-11-12T14:30:13.336186509Z","summary":"Stack-overflow in boost::read_graphviz_detail::parser::parse_subgraph","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66719\n\n```\nCrash type: Stack-overflow\nCrash state:\nboost::read_graphviz_detail::parser::parse_subgraph\nboost::read_graphviz_detail::parser::parse_endpoint_rest\nboost::read_graphviz_detail::parser::parse_stmt\n```\n","affected":[{"package":{"name":"boost","ecosystem":"OSS-Fuzz","purl":"pkg:generic/boost"},"ranges":[{"type":"GIT","repo":"https://github.com/boostorg/boost.git","events":[{"introduced":"9072bfc2d969ca1e8c49651232817201e05e3eae"},{"introduced":"206cf016ae9454ed65e9c5faf4a322f31444fb80"}]}],"versions":["boost-1.85.0","boost-1.85.0.beta1","boost-1.86.0.beta1","boost-1.86.0","boost-1.87.0.beta1","boost-1.87.0","boost-1.88.0.beta1","boost-1.88.0","boost-1.89.0.beta1","boost-1.89.0","boost-1.90.0.beta1","boost-1.90.0","boost-1.91.0.beta1","boost-1.91.0","boost-1.91.0-1","boost-1.92.0.beta1","boost-1.92.0","boost-1.93.0.beta1"],"ecosystem_specific":{"severity":"LOW"},"database_specific":{"introduced_range":"0251e5fa19564439f3d654df8d4de1abdbaa72b2:9f83dd55ea67f1bab62c20d29bc5527345aafc55","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/boost/OSV-2024-112.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66719"}]}
+1 -1
View File
@@ -1 +1 @@
{"schema_version":"1.9.2","id":"OSV-2024-659","published":"2024-07-18T00:01:18.765548Z","modified":"2026-11-07T14:45:04.514943621Z","summary":"Index-out-of-bounds in gf_vvc_parse_nalu_bs","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70392\n\n```\nCrash type: Index-out-of-bounds\nCrash state:\ngf_vvc_parse_nalu_bs\ngf_inspect_dump_nalu_internal\ninspect_process\n```\n","affected":[{"package":{"name":"gpac","ecosystem":"OSS-Fuzz","purl":"pkg:generic/gpac"},"ranges":[{"type":"GIT","repo":"https://github.com/gpac/gpac","events":[{"introduced":"99a7952e91938f8c0d16f2235b912de1fed6c1f8"}]}],"versions":["testtag0.1","abi-12","abi-12.16","abi-12.17","abi-12.18","abi-12.19","abi-12.20","abi-12.21","abi-12.22","abi-12.23","abi-12.24","abi-12.25","abi-12.26","abi-12.27","abi-13","abi-13.0","abi-14","abi-14.0","abi-15","abi-15.0","abi-15.1","abi-15.2","abi-16","abi-16.2","abi-16.3","abi-16.4","abi-16.5","v26.02.0","abi-16.6","abi-16.7","abi-16.8","abi-16.9","abi-16.10","abi-16.11","abi-16.12","abi-16.13","abi-16.14","abi-16.15","abi-16.16","abi-16.17","abi-16.18","abi-16.19","abi-16.20","abi-16.21","abi-16.22","v26.07.0","abi-16.23","abi-16.24","abi-16.25","abi-16.26","abi-16.27","abi-16.28","abi-16.29"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"introduced_range":"df8121066cf8fb25cc70adf7ca8b35bda82fe216:a012d226ec8de965159f8477e8929bb5d2f57c31","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/gpac/OSV-2024-659.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70392"}]}
{"schema_version":"1.9.2","id":"OSV-2024-659","published":"2024-07-18T00:01:18.765548Z","modified":"2026-11-12T14:45:02.853786785Z","summary":"Index-out-of-bounds in gf_vvc_parse_nalu_bs","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70392\n\n```\nCrash type: Index-out-of-bounds\nCrash state:\ngf_vvc_parse_nalu_bs\ngf_inspect_dump_nalu_internal\ninspect_process\n```\n","affected":[{"package":{"name":"gpac","ecosystem":"OSS-Fuzz","purl":"pkg:generic/gpac"},"ranges":[{"type":"GIT","repo":"https://github.com/gpac/gpac","events":[{"introduced":"99a7952e91938f8c0d16f2235b912de1fed6c1f8"}]}],"versions":["testtag0.1","abi-12","abi-12.16","abi-12.17","abi-12.18","abi-12.19","abi-12.20","abi-12.21","abi-12.22","abi-12.23","abi-12.24","abi-12.25","abi-12.26","abi-12.27","abi-13","abi-13.0","abi-14","abi-14.0","abi-15","abi-15.0","abi-15.1","abi-15.2","abi-16","abi-16.2","abi-16.3","abi-16.4","abi-16.5","v26.02.0","abi-16.6","abi-16.7","abi-16.8","abi-16.9","abi-16.10","abi-16.11","abi-16.12","abi-16.13","abi-16.14","abi-16.15","abi-16.16","abi-16.17","abi-16.18","abi-16.19","abi-16.20","abi-16.21","abi-16.22","v26.07.0","abi-16.23","abi-16.24","abi-16.25","abi-16.26","abi-16.27","abi-16.28","abi-16.29","abi-16.30"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"introduced_range":"df8121066cf8fb25cc70adf7ca8b35bda82fe216:a012d226ec8de965159f8477e8929bb5d2f57c31","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/gpac/OSV-2024-659.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70392"}]}
+1 -1
View File
@@ -1 +1 @@
{"schema_version":"1.9.2","id":"OSV-2024-664","published":"2024-07-18T00:13:55.576218Z","modified":"2026-11-07T14:45:04.511454120Z","summary":"Heap-buffer-overflow in gf_dash_group_get_template","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70342\n\n```\nCrash type: Heap-buffer-overflow WRITE 1\nCrash state:\ngf_dash_group_get_template\ngf_dash_resolve_url\ngf_dash_download_init_segment\n```\n","affected":[{"package":{"name":"gpac","ecosystem":"OSS-Fuzz","purl":"pkg:generic/gpac"},"ranges":[{"type":"GIT","repo":"https://github.com/gpac/gpac","events":[{"introduced":"7323c74ff523fa2d5c4db793d5dfbc611ae505c4"},{"introduced":"60a10d09edb60bd6b4b588d36e685cc3ad9feeb9"}]}],"versions":["testtag0.1","abi-12","abi-12.16","abi-12.17","abi-12.18","abi-12.19","abi-12.20","abi-12.21","abi-12.22","abi-12.23","abi-12.24","abi-12.25","abi-12.26","abi-12.27","abi-13","abi-13.0","abi-14","abi-14.0","abi-15","abi-15.0","abi-15.1","abi-15.2","abi-16","abi-16.2","abi-16.3","abi-16.4","abi-16.5","v26.02.0","abi-16.6","abi-16.7","abi-16.8","abi-16.9","abi-16.10","abi-16.11","abi-16.12","abi-16.13","abi-16.14","abi-16.15","abi-16.16","abi-16.17","abi-16.18","abi-16.19","abi-16.20","abi-16.21","abi-16.22","v26.07.0","abi-16.23","abi-16.24","abi-16.25","abi-16.26","abi-16.27","abi-16.28","abi-16.29"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/gpac/OSV-2024-664.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70342"}]}
{"schema_version":"1.9.2","id":"OSV-2024-664","published":"2024-07-18T00:13:55.576218Z","modified":"2026-11-12T14:45:02.853870355Z","summary":"Heap-buffer-overflow in gf_dash_group_get_template","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70342\n\n```\nCrash type: Heap-buffer-overflow WRITE 1\nCrash state:\ngf_dash_group_get_template\ngf_dash_resolve_url\ngf_dash_download_init_segment\n```\n","affected":[{"package":{"name":"gpac","ecosystem":"OSS-Fuzz","purl":"pkg:generic/gpac"},"ranges":[{"type":"GIT","repo":"https://github.com/gpac/gpac","events":[{"introduced":"7323c74ff523fa2d5c4db793d5dfbc611ae505c4"},{"introduced":"60a10d09edb60bd6b4b588d36e685cc3ad9feeb9"}]}],"versions":["testtag0.1","abi-12","abi-12.16","abi-12.17","abi-12.18","abi-12.19","abi-12.20","abi-12.21","abi-12.22","abi-12.23","abi-12.24","abi-12.25","abi-12.26","abi-12.27","abi-13","abi-13.0","abi-14","abi-14.0","abi-15","abi-15.0","abi-15.1","abi-15.2","abi-16","abi-16.2","abi-16.3","abi-16.4","abi-16.5","v26.02.0","abi-16.6","abi-16.7","abi-16.8","abi-16.9","abi-16.10","abi-16.11","abi-16.12","abi-16.13","abi-16.14","abi-16.15","abi-16.16","abi-16.17","abi-16.18","abi-16.19","abi-16.20","abi-16.21","abi-16.22","v26.07.0","abi-16.23","abi-16.24","abi-16.25","abi-16.26","abi-16.27","abi-16.28","abi-16.29","abi-16.30"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/gpac/OSV-2024-664.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70342"}]}
+1 -1
View File
@@ -1 +1 @@
{"schema_version":"1.9.2","id":"OSV-2024-695","published":"2024-07-31T00:02:35.217594Z","modified":"2026-11-07T14:45:04.512517415Z","summary":"Stack-buffer-overflow in gf_vvc_parse_nalu_bs","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70549\n\n```\nCrash type: Stack-buffer-overflow WRITE 4\nCrash state:\ngf_vvc_parse_nalu_bs\ngf_inspect_dump_nalu_internal\ninspect_process\n```\n","affected":[{"package":{"name":"gpac","ecosystem":"OSS-Fuzz","purl":"pkg:generic/gpac"},"ranges":[{"type":"GIT","repo":"https://github.com/gpac/gpac","events":[{"introduced":"99a7952e91938f8c0d16f2235b912de1fed6c1f8"}]}],"versions":["testtag0.1","abi-12","abi-12.16","abi-12.17","abi-12.18","abi-12.19","abi-12.20","abi-12.21","abi-12.22","abi-12.23","abi-12.24","abi-12.25","abi-12.26","abi-12.27","abi-13","abi-13.0","abi-14","abi-14.0","abi-15","abi-15.0","abi-15.1","abi-15.2","abi-16","abi-16.2","abi-16.3","abi-16.4","abi-16.5","v26.02.0","abi-16.6","abi-16.7","abi-16.8","abi-16.9","abi-16.10","abi-16.11","abi-16.12","abi-16.13","abi-16.14","abi-16.15","abi-16.16","abi-16.17","abi-16.18","abi-16.19","abi-16.20","abi-16.21","abi-16.22","v26.07.0","abi-16.23","abi-16.24","abi-16.25","abi-16.26","abi-16.27","abi-16.28","abi-16.29"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"introduced_range":"df8121066cf8fb25cc70adf7ca8b35bda82fe216:a012d226ec8de965159f8477e8929bb5d2f57c31","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/gpac/OSV-2024-695.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70549"}]}
{"schema_version":"1.9.2","id":"OSV-2024-695","published":"2024-07-31T00:02:35.217594Z","modified":"2026-11-12T14:45:02.856061124Z","summary":"Stack-buffer-overflow in gf_vvc_parse_nalu_bs","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70549\n\n```\nCrash type: Stack-buffer-overflow WRITE 4\nCrash state:\ngf_vvc_parse_nalu_bs\ngf_inspect_dump_nalu_internal\ninspect_process\n```\n","affected":[{"package":{"name":"gpac","ecosystem":"OSS-Fuzz","purl":"pkg:generic/gpac"},"ranges":[{"type":"GIT","repo":"https://github.com/gpac/gpac","events":[{"introduced":"99a7952e91938f8c0d16f2235b912de1fed6c1f8"}]}],"versions":["testtag0.1","abi-12","abi-12.16","abi-12.17","abi-12.18","abi-12.19","abi-12.20","abi-12.21","abi-12.22","abi-12.23","abi-12.24","abi-12.25","abi-12.26","abi-12.27","abi-13","abi-13.0","abi-14","abi-14.0","abi-15","abi-15.0","abi-15.1","abi-15.2","abi-16","abi-16.2","abi-16.3","abi-16.4","abi-16.5","v26.02.0","abi-16.6","abi-16.7","abi-16.8","abi-16.9","abi-16.10","abi-16.11","abi-16.12","abi-16.13","abi-16.14","abi-16.15","abi-16.16","abi-16.17","abi-16.18","abi-16.19","abi-16.20","abi-16.21","abi-16.22","v26.07.0","abi-16.23","abi-16.24","abi-16.25","abi-16.26","abi-16.27","abi-16.28","abi-16.29","abi-16.30"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"introduced_range":"df8121066cf8fb25cc70adf7ca8b35bda82fe216:a012d226ec8de965159f8477e8929bb5d2f57c31","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/gpac/OSV-2024-695.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70549"}]}
+1 -1
View File
@@ -1 +1 @@
{"schema_version":"1.9.2","id":"OSV-2024-719","published":"2024-08-07T00:05:22.699506Z","modified":"2026-11-07T14:45:04.513873627Z","summary":"Heap-buffer-overflow in hevc_ref_pic_lists_modification","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70890\n\n```\nCrash type: Heap-buffer-overflow WRITE 4\nCrash state:\nhevc_ref_pic_lists_modification\ngf_hevc_parse_nalu_bs\ngf_inspect_dump_nalu_internal\n```\n","affected":[{"package":{"name":"gpac","ecosystem":"OSS-Fuzz","purl":"pkg:generic/gpac"},"ranges":[{"type":"GIT","repo":"https://github.com/gpac/gpac","events":[{"introduced":"21cf0d2d4a0d6e5d14ffaa8472c9157f1333d379"}]}],"versions":["testtag0.1","abi-12","abi-12.16","abi-12.17","abi-12.18","abi-12.19","abi-12.20","abi-12.21","abi-12.22","abi-12.23","abi-12.24","abi-12.25","abi-12.26","abi-12.27","abi-13","abi-13.0","abi-14","abi-14.0","abi-15","abi-15.0","abi-15.1","abi-15.2","abi-16","abi-16.2","abi-16.3","abi-16.4","abi-16.5","v26.02.0","abi-16.6","abi-16.7","abi-16.8","abi-16.9","abi-16.10","abi-16.11","abi-16.12","abi-16.13","abi-16.14","abi-16.15","abi-16.16","abi-16.17","abi-16.18","abi-16.19","abi-16.20","abi-16.21","abi-16.22","v26.07.0","abi-16.23","abi-16.24","abi-16.25","abi-16.26","abi-16.27","abi-16.28","abi-16.29"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"introduced_range":"cf9017e7f44c1d0c9a4e520083aece0d3ab329f7:df8121066cf8fb25cc70adf7ca8b35bda82fe216","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/gpac/OSV-2024-719.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70890"}]}
{"schema_version":"1.9.2","id":"OSV-2024-719","published":"2024-08-07T00:05:22.699506Z","modified":"2026-11-12T14:45:02.855845907Z","summary":"Heap-buffer-overflow in hevc_ref_pic_lists_modification","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70890\n\n```\nCrash type: Heap-buffer-overflow WRITE 4\nCrash state:\nhevc_ref_pic_lists_modification\ngf_hevc_parse_nalu_bs\ngf_inspect_dump_nalu_internal\n```\n","affected":[{"package":{"name":"gpac","ecosystem":"OSS-Fuzz","purl":"pkg:generic/gpac"},"ranges":[{"type":"GIT","repo":"https://github.com/gpac/gpac","events":[{"introduced":"21cf0d2d4a0d6e5d14ffaa8472c9157f1333d379"}]}],"versions":["testtag0.1","abi-12","abi-12.16","abi-12.17","abi-12.18","abi-12.19","abi-12.20","abi-12.21","abi-12.22","abi-12.23","abi-12.24","abi-12.25","abi-12.26","abi-12.27","abi-13","abi-13.0","abi-14","abi-14.0","abi-15","abi-15.0","abi-15.1","abi-15.2","abi-16","abi-16.2","abi-16.3","abi-16.4","abi-16.5","v26.02.0","abi-16.6","abi-16.7","abi-16.8","abi-16.9","abi-16.10","abi-16.11","abi-16.12","abi-16.13","abi-16.14","abi-16.15","abi-16.16","abi-16.17","abi-16.18","abi-16.19","abi-16.20","abi-16.21","abi-16.22","v26.07.0","abi-16.23","abi-16.24","abi-16.25","abi-16.26","abi-16.27","abi-16.28","abi-16.29","abi-16.30"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"introduced_range":"cf9017e7f44c1d0c9a4e520083aece0d3ab329f7:df8121066cf8fb25cc70adf7ca8b35bda82fe216","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/gpac/OSV-2024-719.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70890"}]}
+1 -1
View File
@@ -1 +1 @@
{"schema_version":"1.9.2","id":"OSV-2026-1512","published":"2026-11-08T00:22:15.690048Z","modified":"2026-11-12T12:30:04.834347956Z","summary":"Heap-buffer-overflow in cram_encode_container","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=582906998\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\ncram_encode_container\ncram_flush_container_mt\ncram_put_bam_seq\n```\n","affected":[{"package":{"name":"htslib","ecosystem":"OSS-Fuzz","purl":"pkg:generic/htslib"},"ranges":[{"type":"GIT","repo":"https://github.com/samtools/htslib.git","events":[{"introduced":"843ca7f53fad9538fe46df2c9d5a503b6b7afbaa"},{"fixed":"711871ab53f8133115dceed997d11f481c024e0a"},{"introduced":"6ff2e25c36e82fd9194702270bca322d321e1397"}]}],"versions":["1.21.1","1.21.2","1.21.3","1.22.1","1.22.2","1.22.3","1.22.4","1.23","1.23.1","1.23.2","1.23.3","1.24","1.24.1","1.25"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"introduced_range":"09c89d8f12b8367a5b869b563f5ae6f0888fb0f3:6a399ca07a0d6bb435676c68689ba361d592ebc9","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/htslib/OSV-2026-1512.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=582906998"}]}
{"schema_version":"1.9.2","id":"OSV-2026-1512","published":"2026-11-08T00:22:15.690048Z","modified":"2026-11-12T14:30:05.720760431Z","summary":"Heap-buffer-overflow in cram_encode_container","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=582906998\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\ncram_encode_container\ncram_flush_container_mt\ncram_put_bam_seq\n```\n","affected":[{"package":{"name":"htslib","ecosystem":"OSS-Fuzz","purl":"pkg:generic/htslib"},"ranges":[{"type":"GIT","repo":"https://github.com/samtools/htslib.git","events":[{"introduced":"843ca7f53fad9538fe46df2c9d5a503b6b7afbaa"},{"fixed":"711871ab53f8133115dceed997d11f481c024e0a"},{"fixed":"ae5f79dd51cd296195293690b6f59f0b982ae877"},{"introduced":"6ff2e25c36e82fd9194702270bca322d321e1397"}]}],"versions":["1.21.1","1.21.2","1.21.3","1.22.1","1.22.2","1.22.3","1.22.4","1.23","1.23.1","1.23.2","1.23.3","1.24","1.24.1","1.25"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"fixed_range":"1a66eebeaeb5230d6514476306dd2dc4141b82f3:ae5f79dd51cd296195293690b6f59f0b982ae877","introduced_range":"09c89d8f12b8367a5b869b563f5ae6f0888fb0f3:6a399ca07a0d6bb435676c68689ba361d592ebc9","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/htslib/OSV-2026-1512.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=582906998"}]}