A use-of-uninitialized-value vulnerability was identified in the libjxl library within the DoTestOneInput function. This issue was discovered through OSS-Fuzz and affects versions 0.12-snapshot and 0.12.0. A fix has been committed in a later version.
A security exception crash was reported in the Apache Lucene library within the method org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone. The issue was identified by OSS-Fuzz and involves a crash state related to cloning token attribute implementations. No specific versions affected or patch information are provided. There is no evidence of exploitation in the wild.
A security exception crash was reported in the Apache Lucene library within the ASCIIFoldingFilter.foldToASCII method. The issue was identified by OSS-Fuzz and results in a security exception during token processing. No specific versions are stated as affected, and no patch or fix information is currently available.
A heap-buffer-overflow vulnerability was identified in the pcre2 library's pcre2_compile_32 function. The issue was reported by OSS-Fuzz and involves a write operation that exceeds the allocated heap buffer. No specific affected versions or patches are provided in the available data. There is no evidence of known exploits in the wild at this time.
A security exception vulnerability was reported in the org.htmlunit.cyberneko.HTMLTagBalancer.endElement method of the htmlunit library versions 4.19.0, 4.20.0, and 4.21.0. The issue was identified by OSS-Fuzz and involves a crash triggered by malformed HTML processing. A fix has been committed to address this vulnerability.
A heap-buffer-overflow vulnerability has been identified in the Tarantool software, specifically in the mmcall function. This issue was reported by OSS-Fuzz and involves an 8-byte write overflow. The vulnerability is considered high severity but no CVSS score is provided. The affected versions include those at or after commit 8c7cfb1cd0b3f5ce1d5b181403f68f7aaf657d9a. There is no information on available patches or exploits in the wild.
A heap-buffer-overflow vulnerability exists in the libical library within the function icalmemory_tmp_copy, as reported by OSS-Fuzz. This flaw can lead to out-of-bounds memory writes during processing of certain input strings. The issue has been fixed in a specific commit identified by the hash 130581f5cdb6501da8533b7bd3cae92eb01ea18a.
A heap-use-after-free vulnerability was identified in QuickJS within the JS_DefineProperty function. This issue was reported by OSS-Fuzz and involves a read operation on freed heap memory, which can lead to undefined behavior or potential memory corruption.
A use-of-uninitialized-value vulnerability was reported in Quickjs affecting the JS_DefineProperty function. The issue was identified by OSS-Fuzz and results in a crash due to uninitialized memory usage. A fix has been committed to address this flaw.
A stack-buffer-overflow vulnerability was identified in the snmp_input function of the net-snmp project. The issue was reported by OSS-Fuzz and involves an 8-byte read overflow leading to a crash. A fix has been committed to address this vulnerability.
A heap-buffer-overflow vulnerability exists in the generic_unpack function of OpenEXR versions 3.3.4 through 3.4.2 and related release candidates. The issue was identified by OSS-Fuzz and involves an out-of-bounds read during pixel data processing. A patch is available to address this flaw.
A vulnerability in the Assimp library versions 5.4.1 through 6.0.4 causes an UNKNOWN READ crash in the function Assimp::StreamReader<false, false>::Get<signed char>, triggered during binary file reading in the COB importer. This issue was identified by OSS-Fuzz and has been fixed in a later commit.
A security exception crash occurs in the com.alibaba.fastjson2.JSONReader.readArray method, as reported by OSS-Fuzz. The crash involves the Java CharsetEncoder constructor and affects multiple specific versions of fastjson2. No CVSS score or detailed exploit information is provided.
A heap-buffer-overflow vulnerability exists in the Assimp library within the SceneCombiner::CopyScene function, as reported by OSS-Fuzz. The issue occurs during scene copying operations and affects multiple versions of Assimp from 5.3.0 through 6.0.5. This vulnerability could lead to memory corruption when exporting scenes using Assimp's Export and ExportToBlob functions.
A heap-buffer-overflow vulnerability exists in the Tarantool software within the lj_buf_ruleb128 function. This issue was discovered via OSS-Fuzz and involves a read overflow on the heap. Multiple specific versions of Tarantool are affected. There is no CVSS score or vendor patch information currently available, and no known exploits in the wild have been reported.