A vulnerability in OpenEXR versions 3.5.0 through 3.5.3 and their release candidates causes an UNKNOWN READ crash in the destructor of ojph::local::param_nlt. This issue was identified by OSS-Fuzz and results in a crash during object destruction.
A heap-buffer-overflow vulnerability exists in the ndpi_search_l2tp function of the ndpi product, as reported by OSS-Fuzz. This flaw involves an out-of-bounds read on the heap memory during packet processing.
A security exception crash was reported in the Apache Lucene library's ArrayUtil.copyOfSubArray method, identified by OSS-Fuzz. The crash occurs during operations involving deep copying of byte arrays and term initialization.
A vulnerability in Fluent Bit causes an UNKNOWN READ crash in the renumber_by_map function. This issue was identified by OSS-Fuzz and affects multiple specific versions of Fluent Bit. A patch is available to address this vulnerability.
A global buffer overflow vulnerability exists in the mod-auth-openidc module within the function oidc_cfg_redirect_urls_allowed_get, as reported by OSS-Fuzz. This vulnerability involves an out-of-bounds read of 8 bytes. A patch is available to address this issue.
A vulnerability was identified in the zxc library related to a memcpy parameter overlap in the function zxc_decompress_chunk_wrapper_default, as reported by OSS-Fuzz. This issue causes a crash during decompression operations. A patch is available to address this flaw.
A heap-buffer-overflow vulnerability exists in Assimp version 6.0.6 within the ColladaExporter component's WriteController function, as reported by OSS-Fuzz. This issue involves an out-of-bounds read of 4 bytes on the heap.
A heap-use-after-free vulnerability was reported in the Assimp library version 6.0.6, specifically in the BVHLoader component's ReadNodeChannels function. This issue was identified by OSS-Fuzz and involves a read operation on memory that has already been freed.
A use-of-uninitialized-value vulnerability was reported in Assimp's IRRImporter component, specifically in the ComputeAnimations function. The issue was identified through OSS-Fuzz and involves uninitialized memory usage during animation computation.
A heap-buffer-overflow vulnerability was reported in the Poppler library related to the cairo_type1_font_subset_for_each_glyph function. The issue was identified by OSS-Fuzz and involves a read overflow in the heap memory during font subset processing.
A heap-buffer-overflow vulnerability exists in Assimp version 6.0.6 within the LWOImporter component, specifically in the LoadLWO2TextureHeader function. This issue was reported by OSS-Fuzz and involves reading beyond the allocated heap buffer, which can cause a crash.
A bad-cast error occurs in Assimp version 6.0.6 during the parsing of Blender collections, leading to a crash. The issue involves an incorrect cast to a shared_ptr element type in the BlenderImporter component.
A heap-buffer-overflow vulnerability was identified in Assimp version 6.0.6 within the ObjExporter component, specifically in the indexMap function related to vertex data handling. The issue was reported by OSS-Fuzz and involves a write overflow of 12 bytes on the heap.
A use-of-uninitialized-value vulnerability was reported in Assimp version 6.0.6, specifically in the PbrtExporter component's WriteTextures function. The issue was identified by OSS-Fuzz and results in a crash due to uninitialized memory usage during texture writing operations.
A use-of-uninitialized-value vulnerability was reported in the Assimp library's glTFExporter component, specifically in the GetTexSampler function. This issue was identified through OSS-Fuzz and involves uninitialized memory usage during material export operations.
An index-out-of-bounds vulnerability was reported in the print_insn_tic6x function of the binutils project. The issue was identified by OSS-Fuzz and involves a crash due to accessing memory outside the intended bounds during disassembly operations. No specific affected versions or patch information is provided.
A heap-buffer-overflow vulnerability has been identified in the binutils project, specifically in the function bfd_getl16. The issue was reported by OSS-Fuzz and involves a read overflow on the heap. No affected versions or patch information are provided in the available data.
A use-of-uninitialized-value vulnerability was identified in the LibRaw library, specifically in the fbdd function. This issue was reported by OSS-Fuzz and causes a crash due to reading uninitialized memory during image processing.