# Vulnerabilities published in 2023 - [OSV-2023-90](https://insights.sbomify.com/OSV-2023-90/): Heap-buffer-overflow in LibRaw_buffer_datastream::scanf_one (not scored) - [OSV-2023-899](https://insights.sbomify.com/OSV-2023-899/): Heap-buffer-overflow in cosm_create_key (not scored) - [OSV-2023-896](https://insights.sbomify.com/OSV-2023-896/): UNKNOWN READ in deliver_chunked_chunks (not scored) - [OSV-2023-894](https://insights.sbomify.com/OSV-2023-894/): Heap-double-free in dwg_free_object (not scored) - [OSV-2023-890](https://insights.sbomify.com/OSV-2023-890/): Heap-use-after-free in dwarf_dealloc (not scored) - [OSV-2023-89](https://insights.sbomify.com/OSV-2023-89/): Heap-buffer-overflow in H5O__mtime_new_encode (not scored) - [OSV-2023-885](https://insights.sbomify.com/OSV-2023-885/): UNKNOWN READ in bytes1_char_at (not scored) - [OSV-2023-883](https://insights.sbomify.com/OSV-2023-883/): Security exception in org.apache.lucene.util.ArrayUtil.copyOfSubArray (not scored) - [OSV-2023-881](https://insights.sbomify.com/OSV-2023-881/): Heap-buffer-overflow in read_tmpl (not scored) - [OSV-2023-88](https://insights.sbomify.com/OSV-2023-88/): Stack-buffer-overflow in pdfi_read_cff_dict (not scored) - [OSV-2023-877](https://insights.sbomify.com/OSV-2023-877/): Heap-buffer-overflow in btf_ensure_modifiable (not scored) - [OSV-2023-874](https://insights.sbomify.com/OSV-2023-874/): Memcpy-param-overlap in bit_u_expand (not scored) - [OSV-2023-873](https://insights.sbomify.com/OSV-2023-873/): UNKNOWN WRITE in icu_74::Calendar::set (not scored) - [OSV-2023-872](https://insights.sbomify.com/OSV-2023-872/): Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal (not scored) - [OSV-2023-870](https://insights.sbomify.com/OSV-2023-870/): Heap-buffer-overflow in icu_74::SimpleDateFormat::subFormat (not scored) - [OSV-2023-869](https://insights.sbomify.com/OSV-2023-869/): Heap-buffer-overflow in Assimp::MD5::MD5MeshParser::MD5MeshParser (not scored) - [OSV-2023-867](https://insights.sbomify.com/OSV-2023-867/): Negative-size-param in http_cb (not scored) - [OSV-2023-865](https://insights.sbomify.com/OSV-2023-865/): UNKNOWN in WasmEdge::Loader::SharedLibrary::load (not scored) - [OSV-2023-862](https://insights.sbomify.com/OSV-2023-862/): Heap-use-after-free in g_datalist_get_flags (not scored) - [OSV-2023-86](https://insights.sbomify.com/OSV-2023-86/): UNKNOWN READ in isvce_cabac_flush (not scored) - [OSV-2023-857](https://insights.sbomify.com/OSV-2023-857/): Segv on unknown address in FunctionCompiler::compileReturn (not scored) - [OSV-2023-855](https://insights.sbomify.com/OSV-2023-855/): Heap-double-free in dwg_free_common_entity_data (not scored) - [OSV-2023-850](https://insights.sbomify.com/OSV-2023-850/): Heap-buffer-overflow in bit_TV_to_utf8 (not scored) - [OSV-2023-849](https://insights.sbomify.com/OSV-2023-849/): Stack-buffer-overflow in ulocimp_toLanguageTag_74 (not scored) - [OSV-2023-844](https://insights.sbomify.com/OSV-2023-844/): Heap-buffer-overflow in Video::VP9::Decoder::create_video_frame (not scored) - [OSV-2023-840](https://insights.sbomify.com/OSV-2023-840/): Null-dereference READ in isvcd_parse_inter_slice_data_cavlc_enh_lyr (not scored) - [OSV-2023-839](https://insights.sbomify.com/OSV-2023-839/): Global-buffer-overflow in iusace_quantize_lines (not scored) - [OSV-2023-838](https://insights.sbomify.com/OSV-2023-838/): Use-of-uninitialized-value in wabt::BinaryReaderIR::OnOpcode (not scored) - [OSV-2023-837](https://insights.sbomify.com/OSV-2023-837/): Heap-buffer-overflow in uint7_get_64 (not scored) - [OSV-2023-819](https://insights.sbomify.com/OSV-2023-819/): Heap-buffer-overflow in ucl_object_dtor_unref_single (not scored) - [OSV-2023-813](https://insights.sbomify.com/OSV-2023-813/): UNKNOWN READ in parse_priv_value (not scored) - [OSV-2023-811](https://insights.sbomify.com/OSV-2023-811/): Invalid-free in bit_chain_alloc_size (not scored) - [OSV-2023-806](https://insights.sbomify.com/OSV-2023-806/): Heap-buffer-overflow in H5F__accum_free (not scored) - [OSV-2023-800](https://insights.sbomify.com/OSV-2023-800/): Heap-buffer-overflow in XCFImageFormat::loadTileRLE (not scored) - [OSV-2023-80](https://insights.sbomify.com/OSV-2023-80/): Heap-buffer-overflow in set_data (not scored) - [OSV-2023-797](https://insights.sbomify.com/OSV-2023-797/): Stack-buffer-overflow in QBuffer::readData (not scored) - [OSV-2023-795](https://insights.sbomify.com/OSV-2023-795/): Security exception in org.apache.poi.hwpf.converter.AbstractWordConverter.processNoteAnchor (not scored) - [OSV-2023-793](https://insights.sbomify.com/OSV-2023-793/): Security exception in org.apache.lucene.util.BytesRefBuilder. (not scored) - [OSV-2023-79](https://insights.sbomify.com/OSV-2023-79/): Heap-buffer-overflow in H5O__fsinfo_decode (not scored) - [OSV-2023-78](https://insights.sbomify.com/OSV-2023-78/): Heap-buffer-overflow in ucl_object_dtor_unref_single (not scored) - [OSV-2023-779](https://insights.sbomify.com/OSV-2023-779/): Use-of-uninitialized-value in dev_io_capture (not scored) - [OSV-2023-777](https://insights.sbomify.com/OSV-2023-777/): Heap-buffer-overflow in dxf_fixup_string (not scored) - [OSV-2023-776](https://insights.sbomify.com/OSV-2023-776/): Heap-buffer-overflow in ndpi_domain_classify_contains (not scored) - [OSV-2023-775](https://insights.sbomify.com/OSV-2023-775/): Security exception in com.github.javaparser.CommentsInserter.insertComments (not scored) - [OSV-2023-77](https://insights.sbomify.com/OSV-2023-77/): Heap-buffer-overflow in H5C__load_cache_image (not scored) - [OSV-2023-769](https://insights.sbomify.com/OSV-2023-769/): Index-out-of-bounds in derive_spatial_luma_vector_prediction (not scored) - [OSV-2023-764](https://insights.sbomify.com/OSV-2023-764/): Heap-buffer-overflow in pim_pim_packet (not scored) - [OSV-2023-761](https://insights.sbomify.com/OSV-2023-761/): Heap-buffer-overflow in ICMPinfo::dissectICMP (not scored) - [OSV-2023-76](https://insights.sbomify.com/OSV-2023-76/): Heap-buffer-overflow in H5SM_delete (not scored) - [OSV-2023-758](https://insights.sbomify.com/OSV-2023-758/): Heap-double-free in bit_TV_to_utf8 (not scored) - [OSV-2023-756](https://insights.sbomify.com/OSV-2023-756/): Heap-buffer-overflow in rawspeed::DngDecoder::decodeMetaDataInternal (not scored) - [OSV-2023-754](https://insights.sbomify.com/OSV-2023-754/): Heap-buffer-overflow in H5O__chunk_protect (not scored) - [OSV-2023-753](https://insights.sbomify.com/OSV-2023-753/): Stack-buffer-overflow in iasecc_crt_parse (not scored) - [OSV-2023-750](https://insights.sbomify.com/OSV-2023-750/): Security exception in org.antlr.v4.runtime.atn.PredictionContext.fromRuleContext (not scored) - [OSV-2023-75](https://insights.sbomify.com/OSV-2023-75/): Heap-buffer-overflow in isvcd_interlyr_motion_mode_pred_dyadic (not scored) - [OSV-2023-748](https://insights.sbomify.com/OSV-2023-748/): Segv on unknown address in dwg_encode (not scored) - [OSV-2023-745](https://insights.sbomify.com/OSV-2023-745/): Heap-buffer-overflow in pcpp::SomeIpSdLayer::isDataValid (not scored) - [OSV-2023-744](https://insights.sbomify.com/OSV-2023-744/): Stack-buffer-overflow in sc_color_fprintf_va (not scored) - [OSV-2023-743](https://insights.sbomify.com/OSV-2023-743/): Out-of-memory in QueryParserFuzzer (not scored) - [OSV-2023-741](https://insights.sbomify.com/OSV-2023-741/): Heap-buffer-overflow in Flow::dissectBittorrent (not scored) - [OSV-2023-739](https://insights.sbomify.com/OSV-2023-739/): UNKNOWN READ in OT::glyph_variations_t::create_from_glyphs_var_data (not scored) - [OSV-2023-738](https://insights.sbomify.com/OSV-2023-738/): Use-of-uninitialized-value in _PyFunction_FromConstructor (not scored) - [OSV-2023-736](https://insights.sbomify.com/OSV-2023-736/): Heap-buffer-overflow in HeifContext::interpret_heif_file (not scored) - [OSV-2023-734](https://insights.sbomify.com/OSV-2023-734/): Container-overflow in libbrotlidec.so.1 (not scored) - [OSV-2023-728](https://insights.sbomify.com/OSV-2023-728/): Use-of-uninitialized-value in aesEncryptBlock (not scored) - [OSV-2023-726](https://insights.sbomify.com/OSV-2023-726/): Heap-buffer-overflow in Flow::dissectNetBIOS (not scored) - [OSV-2023-723](https://insights.sbomify.com/OSV-2023-723/): Heap-buffer-overflow in H5MM_memcpy (not scored) - [OSV-2023-722](https://insights.sbomify.com/OSV-2023-722/): Heap-buffer-overflow in H5MM_memcpy (not scored) - [OSV-2023-721](https://insights.sbomify.com/OSV-2023-721/): Stack-buffer-overflow in crc24q_check (not scored) - [OSV-2023-72](https://insights.sbomify.com/OSV-2023-72/): Heap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor (not scored) - [OSV-2023-719](https://insights.sbomify.com/OSV-2023-719/): Security exception in org.apache.commons.jxpath.ri.compiler.CoreFunction.toString (not scored) - [OSV-2023-717](https://insights.sbomify.com/OSV-2023-717/): Heap-buffer-overflow in bit_TV_to_utf8_codepage (not scored) - [OSV-2023-715](https://insights.sbomify.com/OSV-2023-715/): Stack-use-after-scope in ulocimp_addLikelySubtags_74 (not scored) - [OSV-2023-714](https://insights.sbomify.com/OSV-2023-714/): Security exception in org.apache.poi.ddf.EscherContainerRecord.fillFields (not scored) - [OSV-2023-710](https://insights.sbomify.com/OSV-2023-710/): Heap-buffer-overflow in Flow::dissectMDNS (not scored) - [OSV-2023-709](https://insights.sbomify.com/OSV-2023-709/): Heap-buffer-overflow in QOIHandler::read (not scored) - [OSV-2023-705](https://insights.sbomify.com/OSV-2023-705/): Security exception in org.apache.lucene.util.automaton.RegExp.toAutomaton (not scored) - [OSV-2023-697](https://insights.sbomify.com/OSV-2023-697/): Heap-buffer-overflow in IEC104Stats::processPacket (not scored) - [OSV-2023-696](https://insights.sbomify.com/OSV-2023-696/): Security exception in org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone (not scored) - [OSV-2023-692](https://insights.sbomify.com/OSV-2023-692/): Invalid-free in reset_context (not scored) - [OSV-2023-69](https://insights.sbomify.com/OSV-2023-69/): Heap-use-after-free in zend_ast_evaluate_inner (not scored) - [OSV-2023-689](https://insights.sbomify.com/OSV-2023-689/): Use-of-uninitialized-value (not scored) - [OSV-2023-688](https://insights.sbomify.com/OSV-2023-688/): Invalid-free in Flow::~Flow (not scored) - [OSV-2023-685](https://insights.sbomify.com/OSV-2023-685/): Invalid-free in reset_context (not scored) - [OSV-2023-684](https://insights.sbomify.com/OSV-2023-684/): Heap-use-after-free in __xmlRaiseError (not scored) - [OSV-2023-680](https://insights.sbomify.com/OSV-2023-680/): Security exception in org.apache.poi.hdgf.streams.PointerContainingStream.findChildren (not scored) - [OSV-2023-68](https://insights.sbomify.com/OSV-2023-68/): Heap-buffer-overflow in isvcd_residual_samp_mb_dyadic (not scored) - [OSV-2023-675](https://insights.sbomify.com/OSV-2023-675/): Heap-use-after-free in parse_options (not scored) - [OSV-2023-674](https://insights.sbomify.com/OSV-2023-674/): Heap-buffer-overflow in get_grouplength (not scored) - [OSV-2023-673](https://insights.sbomify.com/OSV-2023-673/): Heap-buffer-overflow in match (not scored) - [OSV-2023-67](https://insights.sbomify.com/OSV-2023-67/): Heap-use-after-free in config__cleanup (not scored) - [OSV-2023-665](https://insights.sbomify.com/OSV-2023-665/): Security exception in org.apache.poi.hdgf.streams.PointerContainingStream.findChildren (not scored) - [OSV-2023-663](https://insights.sbomify.com/OSV-2023-663/): Segv on unknown address in decUnitCompare (not scored) - [OSV-2023-662](https://insights.sbomify.com/OSV-2023-662/): Security exception in org.apache.commons.io.IOUtils.byteArray (not scored) - [OSV-2023-660](https://insights.sbomify.com/OSV-2023-660/): Security exception in org.apache.poi.hwpf.model.StyleSheet.createPap (not scored) - [OSV-2023-66](https://insights.sbomify.com/OSV-2023-66/): Heap-buffer-overflow in mosquitto__strdup (not scored) - [OSV-2023-645](https://insights.sbomify.com/OSV-2023-645/): Segv on unknown address in decUnitCompare (not scored) - [OSV-2023-640](https://insights.sbomify.com/OSV-2023-640/): Stack-buffer-overflow in initialize_encryption_key (not scored) - [OSV-2023-636](https://insights.sbomify.com/OSV-2023-636/): Security exception in jflex.core.NFA.insertNFA (not scored) - [OSV-2023-634](https://insights.sbomify.com/OSV-2023-634/): Heap-buffer-overflow in bit_read_BB (not scored) --- From sbomify Insights: https://insights.sbomify.com/years/2023/page/4/