A memory safety issue has been reported in librsvg involving an UNKNOWN READ crash in the _blit_xrgb32_lerp_spans function. The crash was identified through OSS-Fuzz testing and involves the rendering pipeline functions _blit_xrgb32_lerp_spans, _cairo_rectangular_scan_converter_generate, and composite_boxes. The vulnerability affects multiple specific versions of librsvg from 2.58.92 through 2.63.3. No CVSS score is assigned, and no known exploits or patches are currently documented.
An unknown read memory issue was reported in the Assimp library within the NDOImporter::InternReadFile function. This vulnerability was identified through OSS-Fuzz testing and involves a crash due to an unknown read operation during file import processing.
A global buffer overflow vulnerability exists in the AnnouncePunctuation function of espeak-ng versions 1.51 and 1.52.0. This issue was identified by OSS-Fuzz and involves a write out-of-bounds error. The flaw has been fixed in a later commit. No public exploit or active exploitation is currently known.
An UNKNOWN READ crash was reported in the Boost library's regex formatter component by OSS-Fuzz. The crash involves the boost::re_detail_500::basic_regex_formatter template instantiated with std::__1::ostream_iterator<char>. No specific versions are identified as affected, and no patch or remediation information is provided.
A heap-buffer-overflow vulnerability has been identified in the gpac software within the hevc_ref_pic_lists_modification function. This issue was reported by OSS-Fuzz and involves a write operation that exceeds the allocated heap buffer. The crash occurs during HEVC NAL unit parsing and inspection.
A heap-use-after-free vulnerability exists in libxml2 within the xmlCharEncCloseFunc function. This issue was identified by OSS-Fuzz and involves a read operation on freed heap memory, potentially leading to memory corruption or crashes. The vulnerability affects multiple specific versions of libxml2 from 2.14.0 through 2.15.4. No CVSS score or vendor patch information is currently available.
A security exception crash was identified in the Checkstyle tool within the JavaLanguageParser.expr method, reported by OSS-Fuzz. The crash involves UTF-8 encoding operations in the Java base module. No CVSS score or detailed impact information is provided.
A stack-buffer-overflow vulnerability exists in the gpac project's function gf_vvc_parse_nalu_bs, as reported by OSS-Fuzz. This vulnerability causes a write overflow of 4 bytes on the stack during parsing operations. The issue was identified through a crash report but no specific exploit or patch information is provided.
A heap-buffer-overflow vulnerability exists in the gpac project within the function gf_dash_group_get_template. This issue was reported by OSS-Fuzz and involves a write overflow on the heap. The vulnerability affects version 26.02.0 and versions at or after commit 7323c74ff523fa2d5dfbc611ae505c4. No CVSS score is available, and no known exploits in the wild have been reported.
A security exception crash occurs in the Checkstyle JavaLanguageParser component, specifically in the expr method, as reported by OSS-Fuzz. The crash involves Java's HeapCharBuffer initialization and CharBuffer wrapping. No CVSS score is available, but the issue is rated medium severity.
A security exception crash was identified in the Checkstyle tool within the JavaLanguageParser.expr method, reported by OSS-Fuzz. The crash involves UTF-8 encoding operations in the Java base module. This issue is classified as medium severity and affects certain versions of Checkstyle. No CVSS score or detailed impact information is provided.
A heap-buffer-overflow vulnerability exists in the H5F_addr_encode function of the hdf5 library, as reported by OSS-Fuzz. The issue causes a write overflow on the heap, potentially leading to memory corruption. Multiple specific versions of hdf5 are affected. No official patch or remediation information is provided in the available data.
A heap-buffer-overflow vulnerability exists in the Exiv2 library within the AsfVideo::GUIDTag constructor. This issue was identified by OSS-Fuzz and involves an out-of-bounds read of 8 bytes during processing of ASF video metadata. The vulnerability affects specific versions of Exiv2 from 0.28.0 through 0.28.9. No CVSS score or vendor patch information is currently available.
A security exception crash occurs in the Checkstyle tool within the JavaLanguageParser.expr method, as reported by OSS-Fuzz. The crash involves Java's HeapCharBuffer and CharBuffer.wrap methods. This issue was identified in a specific commit version of Checkstyle and is classified with medium severity.