# Vulnerabilities published in 2023


- [OSV-2023-631](https://insights.sbomify.com/OSV-2023-631/): Heap-buffer-overflow in test_verify (not scored)
- [OSV-2023-627](https://insights.sbomify.com/OSV-2023-627/): Security exception in org.apache.lucene.util.automaton.RegExp.toAutomaton (not scored)
- [OSV-2023-623](https://insights.sbomify.com/OSV-2023-623/): Heap-use-after-free in Elf32_free (not scored)
- [OSV-2023-619](https://insights.sbomify.com/OSV-2023-619/): Security exception in java.base/java.util.regex.Pattern$GroupTail.match (not scored)
- [OSV-2023-618](https://insights.sbomify.com/OSV-2023-618/): Security exception in java.base/java.util.regex.Pattern$Loop.match (not scored)
- [OSV-2023-617](https://insights.sbomify.com/OSV-2023-617/): Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr (not scored)
- [OSV-2023-610](https://insights.sbomify.com/OSV-2023-610/): Security exception in org.apache.lucene.util.automaton.RegExp.toAutomaton (not scored)
- [OSV-2023-61](https://insights.sbomify.com/OSV-2023-61/): Heap-buffer-overflow in xmlParseTryOrFinish (not scored)
- [OSV-2023-609](https://insights.sbomify.com/OSV-2023-609/): Stack-buffer-overflow in sc_pkcs15_get_lastupdate (not scored)
- [OSV-2023-606](https://insights.sbomify.com/OSV-2023-606/): Heap-buffer-overflow in ZSTD_decompressMultiFrame (not scored)
- [OSV-2023-605](https://insights.sbomify.com/OSV-2023-605/): Heap-use-after-free in Elf64_free (not scored)
- [OSV-2023-6](https://insights.sbomify.com/OSV-2023-6/): Heap-buffer-overflow in parse_skip_ws (not scored)
- [OSV-2023-599](https://insights.sbomify.com/OSV-2023-599/): Negative-size-param in passDoAction (not scored)
- [OSV-2023-598](https://insights.sbomify.com/OSV-2023-598/): Heap-use-after-free in zval_call_destructor (not scored)
- [OSV-2023-586](https://insights.sbomify.com/OSV-2023-586/): Heap-buffer-overflow in setcos_create_key (not scored)
- [OSV-2023-581](https://insights.sbomify.com/OSV-2023-581/): Heap-buffer-overflow in wwunpack (not scored)
- [OSV-2023-580](https://insights.sbomify.com/OSV-2023-580/): Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr (not scored)
- [OSV-2023-578](https://insights.sbomify.com/OSV-2023-578/): Heap-buffer-overflow in cosm_new_file (not scored)
- [OSV-2023-576](https://insights.sbomify.com/OSV-2023-576/): Heap-double-free in sc_pkcs15_free_object_content (not scored)
- [OSV-2023-573](https://insights.sbomify.com/OSV-2023-573/): Negative-size-param in check_content_type_and_change_protocol (not scored)
- [OSV-2023-566](https://insights.sbomify.com/OSV-2023-566/): Heap-buffer-overflow in check_content_type_and_change_protocol (not scored)
- [OSV-2023-560](https://insights.sbomify.com/OSV-2023-560/): Stack-buffer-overflow in sc_pkcs15_get_lastupdate (not scored)
- [OSV-2023-56](https://insights.sbomify.com/OSV-2023-56/): Heap-buffer-overflow in git_oid_raw_cmp (not scored)
- [OSV-2023-556](https://insights.sbomify.com/OSV-2023-556/): Heap-buffer-overflow in xt_valid_enum_values (not scored)
- [OSV-2023-555](https://insights.sbomify.com/OSV-2023-555/): Heap-buffer-overflow in Gfx::InputStreamer::read_u24 (not scored)
- [OSV-2023-554](https://insights.sbomify.com/OSV-2023-554/): Heap-buffer-overflow in OT::CmapSubtable::get_glyph (not scored)
- [OSV-2023-551](https://insights.sbomify.com/OSV-2023-551/): Heap-buffer-overflow in OT::CmapSubtable::collect_unicodes (not scored)
- [OSV-2023-55](https://insights.sbomify.com/OSV-2023-55/): Index-out-of-bounds in LibRaw::apply_tiff (not scored)
- [OSV-2023-547](https://insights.sbomify.com/OSV-2023-547/): UNKNOWN READ in r_str_ncpy (not scored)
- [OSV-2023-546](https://insights.sbomify.com/OSV-2023-546/): Invalid-free in jpeg_free_large (not scored)
- [OSV-2023-543](https://insights.sbomify.com/OSV-2023-543/): Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept (not scored)
- [OSV-2023-542](https://insights.sbomify.com/OSV-2023-542/): Security exception in net.jsign.appx.Zip64EndOfCentralDirectoryRecord.read (not scored)
- [OSV-2023-538](https://insights.sbomify.com/OSV-2023-538/): Heap-buffer-overflow in Gfx::BooleanDecoder::initialize (not scored)
- [OSV-2023-536](https://insights.sbomify.com/OSV-2023-536/): Heap-buffer-overflow in Assimp::MD5::MD5Parser::ParseHeader (not scored)
- [OSV-2023-528](https://insights.sbomify.com/OSV-2023-528/): Memcpy-param-overlap in pdfi_copy_truetype_font (not scored)
- [OSV-2023-527](https://insights.sbomify.com/OSV-2023-527/): Heap-buffer-overflow in default_get_outline (not scored)
- [OSV-2023-525](https://insights.sbomify.com/OSV-2023-525/): Security exception in jaz.Zer.reportFinding (not scored)
- [OSV-2023-522](https://insights.sbomify.com/OSV-2023-522/): Security exception in com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf (not scored)
- [OSV-2023-521](https://insights.sbomify.com/OSV-2023-521/): Security exception in com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf (not scored)
- [OSV-2023-510](https://insights.sbomify.com/OSV-2023-510/): Heap-buffer-overflow in uofs (not scored)
- [OSV-2023-51](https://insights.sbomify.com/OSV-2023-51/): Heap-use-after-free in ZSTD_freeDDict (not scored)
- [OSV-2023-509](https://insights.sbomify.com/OSV-2023-509/): Heap-buffer-overflow in ndpi_search_thrift_tcp_udp (not scored)
- [OSV-2023-508](https://insights.sbomify.com/OSV-2023-508/): Heap-buffer-overflow in AffixMgr::compound_check (not scored)
- [OSV-2023-507](https://insights.sbomify.com/OSV-2023-507/): Heap-buffer-overflow in IEC104Stats::processPacket (not scored)
- [OSV-2023-506](https://insights.sbomify.com/OSV-2023-506/): Use-of-uninitialized-value in dev_io_capture (not scored)
- [OSV-2023-505](https://insights.sbomify.com/OSV-2023-505/): UNKNOWN WRITE in regcomp (not scored)
- [OSV-2023-504](https://insights.sbomify.com/OSV-2023-504/): Heap-buffer-overflow in ndpi_search_line (not scored)
- [OSV-2023-501](https://insights.sbomify.com/OSV-2023-501/): UNKNOWN READ in _dwarf_exec_frame_instr (not scored)
- [OSV-2023-500](https://insights.sbomify.com/OSV-2023-500/): Heap-buffer-overflow in stbiw__encode_png_line (not scored)
- [OSV-2023-499](https://insights.sbomify.com/OSV-2023-499/): Heap-use-after-free in obj_free (not scored)
- [OSV-2023-495](https://insights.sbomify.com/OSV-2023-495/): Heap-buffer-overflow in utf8ToUtf16 (not scored)
- [OSV-2023-49](https://insights.sbomify.com/OSV-2023-49/): Heap-buffer-overflow in lex_scan (not scored)
- [OSV-2023-483](https://insights.sbomify.com/OSV-2023-483/): Security exception in com.github.javaparser.CommentsInserter.insertComments (not scored)
- [OSV-2023-480](https://insights.sbomify.com/OSV-2023-480/): Heap-buffer-overflow in NetworkInterface::dissectPacket (not scored)
- [OSV-2023-48](https://insights.sbomify.com/OSV-2023-48/): Global-buffer-overflow in isvce_write_coeff4x4_cavlc (not scored)
- [OSV-2023-477](https://insights.sbomify.com/OSV-2023-477/): Global-buffer-overflow in htmlParseHTMLAttribute (not scored)
- [OSV-2023-474](https://insights.sbomify.com/OSV-2023-474/): Global-buffer-overflow in xmlDictLookup (not scored)
- [OSV-2023-472](https://insights.sbomify.com/OSV-2023-472/): Heap-buffer-overflow in TestFuzzCommonAssistanceParseFileBuffer.c (not scored)
- [OSV-2023-471](https://insights.sbomify.com/OSV-2023-471/): Heap-buffer-overflow in H5FS__sinfo_serialize_node_cb (not scored)
- [OSV-2023-470](https://insights.sbomify.com/OSV-2023-470/): Heap-use-after-free in psi_device_ref_finalize (not scored)
- [OSV-2023-467](https://insights.sbomify.com/OSV-2023-467/): Stack-buffer-overflow in SetPitchGradient (not scored)
- [OSV-2023-462](https://insights.sbomify.com/OSV-2023-462/): Heap-buffer-overflow in IEC104Stats::processPacket (not scored)
- [OSV-2023-460](https://insights.sbomify.com/OSV-2023-460/): Segv on unknown address in config__bridge_cleanup (not scored)
- [OSV-2023-46](https://insights.sbomify.com/OSV-2023-46/): Heap-buffer-overflow in json_cquote (not scored)
- [OSV-2023-458](https://insights.sbomify.com/OSV-2023-458/): Invalid-free in hb_free_impl (not scored)
- [OSV-2023-455](https://insights.sbomify.com/OSV-2023-455/): Heap-buffer-overflow in bit_TV_to_utf8 (not scored)
- [OSV-2023-453](https://insights.sbomify.com/OSV-2023-453/): UNKNOWN READ in ih264e_cabac_put_byte (not scored)
- [OSV-2023-452](https://insights.sbomify.com/OSV-2023-452/): Heap-buffer-overflow in json_write_TF (not scored)
- [OSV-2023-451](https://insights.sbomify.com/OSV-2023-451/): Heap-buffer-overflow in BundlePacket (not scored)
- [OSV-2023-445](https://insights.sbomify.com/OSV-2023-445/): Heap-buffer-overflow in LossyDctDecoder_execute (not scored)
- [OSV-2023-444](https://insights.sbomify.com/OSV-2023-444/): Heap-buffer-overflow in opj_jp2_apply_pclr (not scored)
- [OSV-2023-443](https://insights.sbomify.com/OSV-2023-443/): Use-after-poison in file_is_simh (not scored)
- [OSV-2023-440](https://insights.sbomify.com/OSV-2023-440/): Heap-double-free in dwg_free_object (not scored)
- [OSV-2023-437](https://insights.sbomify.com/OSV-2023-437/): Heap-buffer-overflow in internal_huf_decompress (not scored)
- [OSV-2023-436](https://insights.sbomify.com/OSV-2023-436/): Heap-buffer-overflow in ndpi_check_punycode_string (not scored)
- [OSV-2023-430](https://insights.sbomify.com/OSV-2023-430/): Heap-buffer-overflow in H5MM_xstrdup (not scored)
- [OSV-2023-426](https://insights.sbomify.com/OSV-2023-426/): Heap-buffer-overflow in libdeflate_zlib_decompress_ex (not scored)
- [OSV-2023-425](https://insights.sbomify.com/OSV-2023-425/): Heap-buffer-overflow in ICMPinfo::dissectICMP (not scored)
- [OSV-2023-423](https://insights.sbomify.com/OSV-2023-423/): Heap-buffer-overflow in NetworkInterface::dissectPacket (not scored)
- [OSV-2023-422](https://insights.sbomify.com/OSV-2023-422/): Heap-use-after-free in wmem_memdup (not scored)
- [OSV-2023-421](https://insights.sbomify.com/OSV-2023-421/): Global-buffer-overflow in hf_adjustment (not scored)
- [OSV-2023-420](https://insights.sbomify.com/OSV-2023-420/): Heap-use-after-free in fragment_addresses_equal (not scored)
- [OSV-2023-42](https://insights.sbomify.com/OSV-2023-42/): Heap-buffer-overflow in bit_read_BB (not scored)
- [OSV-2023-418](https://insights.sbomify.com/OSV-2023-418/): Heap-buffer-overflow in bfd_getl32 (not scored)
- [OSV-2023-416](https://insights.sbomify.com/OSV-2023-416/): UNKNOWN READ in dxf_fixup_string (not scored)
- [OSV-2023-415](https://insights.sbomify.com/OSV-2023-415/): UNKNOWN READ in dxf_fixup_string (not scored)
- [OSV-2023-412](https://insights.sbomify.com/OSV-2023-412/): UNKNOWN READ in dxf_fixup_string (not scored)
- [OSV-2023-41](https://insights.sbomify.com/OSV-2023-41/): Heap-use-after-free in sk_num (not scored)
- [OSV-2023-409](https://insights.sbomify.com/OSV-2023-409/): Heap-use-after-free in zval_call_destructor (not scored)
- [OSV-2023-408](https://insights.sbomify.com/OSV-2023-408/): Security exception in org.apache.lucene.util.ArrayUtil.growExact (not scored)
- [OSV-2023-407](https://insights.sbomify.com/OSV-2023-407/): Stack-buffer-overflow in DwaCompressor_readChannelRules (not scored)
- [OSV-2023-405](https://insights.sbomify.com/OSV-2023-405/): Heap-buffer-overflow in _lou_stringHash (not scored)
- [OSV-2023-404](https://insights.sbomify.com/OSV-2023-404/): Invalid-free in Assimp::FBX::Scope::Scope (not scored)
- [OSV-2023-402](https://insights.sbomify.com/OSV-2023-402/): Heap-use-after-free in Assimp::FBXExporter::WriteObjects (not scored)
- [OSV-2023-399](https://insights.sbomify.com/OSV-2023-399/): Heap-use-after-free in get_got_entry (not scored)
- [OSV-2023-397](https://insights.sbomify.com/OSV-2023-397/): Heap-buffer-overflow in json_write_TF (not scored)
- [OSV-2023-396](https://insights.sbomify.com/OSV-2023-396/): Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal (not scored)
- [OSV-2023-395](https://insights.sbomify.com/OSV-2023-395/): Stack-buffer-overflow in sc_path_print (not scored)
- [OSV-2023-392](https://insights.sbomify.com/OSV-2023-392/): Negative-size-param in H5MM_memcpy (not scored)
- [OSV-2023-391](https://insights.sbomify.com/OSV-2023-391/): UNKNOWN READ in wmem_tree_lookup32_array_le (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/5/