A stack overflow vulnerability has been reported in the Boost library within the function boost::read_graphviz_detail::parser::parse_subgraph. The issue was identified by OSS-Fuzz and results in a crash due to stack overflow during parsing operations.
A heap-buffer-overflow vulnerability exists in the inflate function of the c-blosc2 compression library. This issue was identified through an OSS-Fuzz report and involves a read overflow during decompression operations. Multiple versions of c-blosc2 are affected. No CVSS score is provided, but the severity is assessed as medium based on the available information.
A medium severity vulnerability in libheif was reported by OSS-Fuzz involving an unknown read error in the HeifPixelImage::overlay function. The issue causes a crash during image overlay processing in the HEIF image decoding workflow. Multiple specific versions of libheif are affected, but no patch or fix information is currently provided.
A heap-buffer-overflow vulnerability exists in the Matio library within the H5D__scatter_mem function. This issue was identified by OSS-Fuzz and involves an out-of-bounds write operation. The flaw affects Matio versions 1.5.24 through 1.5.30 and has been fixed in a later commit.
A heap-buffer-overflow vulnerability exists in the Assimp library's MD5MeshParser component, specifically in the MD5MeshParser constructor. This issue was reported by OSS-Fuzz and involves a read overflow on the heap during parsing of MD5 mesh files.
A heap-buffer-overflow vulnerability exists in the libucl library within the function ucl_object_dtor_unref_single. This issue was identified by OSS-Fuzz and involves an out-of-bounds read of 8 bytes during object destruction.
A heap-buffer-overflow vulnerability exists in the c-blosc2 library within the ZSTD_decompressMultiFrame function. This issue was identified by OSS-Fuzz and involves an out-of-bounds read during decompression operations.
A heap-use-after-free vulnerability exists in Fluent Bit in the function mk_event_timeout_destroy. This issue involves a write operation on memory that has already been freed, which can cause instability or crashes in affected versions of Fluent Bit.
A heap-buffer-overflow vulnerability exists in the OpenCV library within the function opj_jp2_apply_pclr, related to JPEG 2000 decoding. This issue was reported by OSS-Fuzz and involves a read overflow on the heap.
A heap-buffer-overflow vulnerability exists in the H5MM_xstrdup function of the hdf5 library, as reported by OSS-Fuzz. This issue causes a read overflow of 5 bytes, leading to a crash in specific internal functions related to symbol table lookup. Multiple specific versions of hdf5 are affected. No CVSS score or known exploits in the wild are reported.
A vulnerability in the hdf5 library involving a negative-size parameter in the H5MM_memcpy function was reported by OSS-Fuzz. The issue causes a crash related to memory copying operations during object link decoding and message iteration. Multiple specific versions of hdf5 are affected, including 1.14.1 and several 2.x pre-release and release versions. No patch or official fix information is currently available.
A heap-buffer-overflow vulnerability exists in the sdhci_write function of QEMU, as reported by OSS-Fuzz. This issue involves a write operation that exceeds the allocated heap buffer, potentially leading to memory corruption. The vulnerability affects multiple specific versions of QEMU from 7.0.0 through 11.1.0-rc2 and beyond a certain commit. No CVSS score is provided, but the severity is assessed as high due to the nature of heap-buffer-overflow flaws.
A vulnerability in the hdf5 library causes an UNKNOWN READ crash in the function H5FL__blk_gc_list, as reported by OSS-Fuzz. The crash occurs during garbage collection routines in the library. This issue affects specific versions of hdf5 including 2.0.0 through 2.2.0. No patch or official fix information is provided in the available data. There are no known exploits in the wild for this vulnerability.
A heap-buffer-overflow vulnerability exists in the H5FS__sect_link function of the hdf5 library, as reported by OSS-Fuzz. This vulnerability involves an out-of-bounds read of 8 bytes on the heap. Multiple specific versions of hdf5 are affected, including 1.14.1, 2.0.0, 2.1.0-pre1test, 2.1.0, 2.1.1, 2.2.0-rc1, and 2.2.0. No CVSS score or vendor patch information is provided, and no known exploits in the wild have been reported.
A heap-buffer-overflow vulnerability exists in the H5MM_memcpy function of the hdf5 library, as reported by OSS-Fuzz. The issue causes a read overflow during memory copying operations related to cache serialization and image generation. Multiple specific versions of hdf5 are affected. No patch or official fix information is provided in the available data.
A heap-buffer-overflow vulnerability exists in the c-blosc2 library within the ZSTD_decompressSequencesLong_bmi2 function. This issue was identified by OSS-Fuzz and involves an out-of-bounds read of 8 bytes during decompression sequences. The vulnerability affects multiple versions of c-blosc2 up to and including version 3.2.0 and some later commits. No CVSS score is provided, but the severity is assessed as medium.
A use-of-uninitialized-value vulnerability was reported in libhevc, specifically in the function ihevce_strm_fill_done. The issue was identified by OSS-Fuzz and involves uninitialized memory usage that could lead to undefined behavior or crashes.
A use-of-uninitialized-value vulnerability was reported in libhevc affecting multiple versions up to 1.8.7. The issue occurs in the complexity_RC_reset_marking function and was identified by OSS-Fuzz. No CVSS score or detailed impact information is provided.