# Vulnerabilities published in 2023


- [OSV-2023-390](https://insights.sbomify.com/OSV-2023-390/): Heap-buffer-overflow in sdhci_write (not scored)
- [OSV-2023-388](https://insights.sbomify.com/OSV-2023-388/): Heap-buffer-overflow (not scored)
- [OSV-2023-385](https://insights.sbomify.com/OSV-2023-385/): Bad-cast to Assimp::BaseImporter from invalid vptr (not scored)
- [OSV-2023-384](https://insights.sbomify.com/OSV-2023-384/): Heap-use-after-free in mrb_str_hash_m (not scored)
- [OSV-2023-382](https://insights.sbomify.com/OSV-2023-382/): Use-of-uninitialized-value in wabt::BinaryReaderObjdump::PrintInitExpr (not scored)
- [OSV-2023-381](https://insights.sbomify.com/OSV-2023-381/): UNKNOWN READ in H5FL__blk_gc_list (not scored)
- [OSV-2023-380](https://insights.sbomify.com/OSV-2023-380/): UNKNOWN WRITE in bool OT::Layout::Common::Coverage::serialize<hb_map_iter_t<hb_map_iter_t<hb_filt (not scored)
- [OSV-2023-38](https://insights.sbomify.com/OSV-2023-38/): Heap-use-after-free in zend_generator_dtor_storage (not scored)
- [OSV-2023-379](https://insights.sbomify.com/OSV-2023-379/): Heap-buffer-overflow in void sort_r_simple<> (not scored)
- [OSV-2023-377](https://insights.sbomify.com/OSV-2023-377/): UNKNOWN WRITE in bool OT::Layout::Common::CoverageFormat2_4<OT::Layout::MediumTypes>::serialize<h (not scored)
- [OSV-2023-376](https://insights.sbomify.com/OSV-2023-376/): UNKNOWN WRITE in OT::Layout::GPOS_impl::CursivePosFormat1::subset (not scored)
- [OSV-2023-375](https://insights.sbomify.com/OSV-2023-375/): Heap-buffer-overflow in H5MM_memcpy (not scored)
- [OSV-2023-372](https://insights.sbomify.com/OSV-2023-372/): UNKNOWN WRITE in hb_ot_layout_substitute_start (not scored)
- [OSV-2023-370](https://insights.sbomify.com/OSV-2023-370/): Heap-buffer-overflow in H5FS__sect_link (not scored)
- [OSV-2023-366](https://insights.sbomify.com/OSV-2023-366/): Heap-use-after-free in gc_mark_children (not scored)
- [OSV-2023-364](https://insights.sbomify.com/OSV-2023-364/): Heap-double-free in HashMgr::~HashMgr (not scored)
- [OSV-2023-361](https://insights.sbomify.com/OSV-2023-361/): Heap-buffer-overflow in tok_get_normal_mode (not scored)
- [OSV-2023-359](https://insights.sbomify.com/OSV-2023-359/): Heap-buffer-overflow in H5MM_memcpy (not scored)
- [OSV-2023-358](https://insights.sbomify.com/OSV-2023-358/): Heap-double-free in wolfCrypt_custom_free (not scored)
- [OSV-2023-357](https://insights.sbomify.com/OSV-2023-357/): Heap-buffer-overflow in flac__analyze_frame (not scored)
- [OSV-2023-356](https://insights.sbomify.com/OSV-2023-356/): Heap-buffer-overflow in pdf_nextobject (not scored)
- [OSV-2023-353](https://insights.sbomify.com/OSV-2023-353/): Stack-buffer-overflow in pdfi_read_cff_dict (not scored)
- [OSV-2023-350](https://insights.sbomify.com/OSV-2023-350/): UNKNOWN READ in cli_html_normalise (not scored)
- [OSV-2023-35](https://insights.sbomify.com/OSV-2023-35/): Heap-buffer-overflow in parse_classes_64 (not scored)
- [OSV-2023-346](https://insights.sbomify.com/OSV-2023-346/): UNKNOWN WRITE in void std::__1::allocator_traits<std::__1::allocator<wabt::interp::HandlerDesc> > (not scored)
- [OSV-2023-345](https://insights.sbomify.com/OSV-2023-345/): Heap-buffer-overflow in mg_mqtt_parse (not scored)
- [OSV-2023-344](https://insights.sbomify.com/OSV-2023-344/): Heap-buffer-overflow in tok_get_normal_mode (not scored)
- [OSV-2023-343](https://insights.sbomify.com/OSV-2023-343/): Heap-buffer-overflow in _libssh2_ntohu32 (not scored)
- [OSV-2023-342](https://insights.sbomify.com/OSV-2023-342/): Heap-use-after-free in ih264_inter_pred_luma_vert_ssse3 (not scored)
- [OSV-2023-340](https://insights.sbomify.com/OSV-2023-340/): Heap-double-free in grk::DecompressCodeblock::release (not scored)
- [OSV-2023-34](https://insights.sbomify.com/OSV-2023-34/): Heap-use-after-free in gc_trace (not scored)
- [OSV-2023-337](https://insights.sbomify.com/OSV-2023-337/): Heap-buffer-overflow in PyBytes_FromStringAndSize (not scored)
- [OSV-2023-335](https://insights.sbomify.com/OSV-2023-335/): Security exception in org.json.JSONArray.writeTo (not scored)
- [OSV-2023-334](https://insights.sbomify.com/OSV-2023-334/): Heap-buffer-overflow in unicode_decode_utf8 (not scored)
- [OSV-2023-333](https://insights.sbomify.com/OSV-2023-333/): Heap-buffer-overflow in ih264d_get_bits_h264 (not scored)
- [OSV-2023-332](https://insights.sbomify.com/OSV-2023-332/): Heap-buffer-overflow in RegionGeometry_Polygon::parse (not scored)
- [OSV-2023-330](https://insights.sbomify.com/OSV-2023-330/): Heap-buffer-overflow in RegionItem::parse (not scored)
- [OSV-2023-328](https://insights.sbomify.com/OSV-2023-328/): Heap-buffer-overflow in RegionItem::parse (not scored)
- [OSV-2023-327](https://insights.sbomify.com/OSV-2023-327/): Heap-double-free in HashMgr::~HashMgr (not scored)
- [OSV-2023-326](https://insights.sbomify.com/OSV-2023-326/): Heap-use-after-free in dynsec_clients__find (not scored)
- [OSV-2023-323](https://insights.sbomify.com/OSV-2023-323/): Heap-buffer-overflow in OT::glyf_impl::SubsetGlyph::serialize (not scored)
- [OSV-2023-322](https://insights.sbomify.com/OSV-2023-322/): Use-after-poison in str_new_frozen_buffer (not scored)
- [OSV-2023-321](https://insights.sbomify.com/OSV-2023-321/): Heap-use-after-free in ucl_hash_func (not scored)
- [OSV-2023-319](https://insights.sbomify.com/OSV-2023-319/): Heap-buffer-overflow in ZSTD_decompressSequencesLong_bmi2 (not scored)
- [OSV-2023-316](https://insights.sbomify.com/OSV-2023-316/): Segv on unknown address in dwg_ref_get_object (not scored)
- [OSV-2023-314](https://insights.sbomify.com/OSV-2023-314/): Heap-buffer-overflow in dwg_encode (not scored)
- [OSV-2023-311](https://insights.sbomify.com/OSV-2023-311/): Heap-double-free in cache_bclose (not scored)
- [OSV-2023-31](https://insights.sbomify.com/OSV-2023-31/): Heap-use-after-free in zip_source_open (not scored)
- [OSV-2023-307](https://insights.sbomify.com/OSV-2023-307/): Heap-buffer-overflow in bit_read_BB (not scored)
- [OSV-2023-303](https://insights.sbomify.com/OSV-2023-303/): Heap-use-after-free in picture_copy_props (not scored)
- [OSV-2023-302](https://insights.sbomify.com/OSV-2023-302/): UNKNOWN READ in google_myanmar_tools::ZawgyiDetector::ZawgyiDetector (not scored)
- [OSV-2023-298](https://insights.sbomify.com/OSV-2023-298/): UNKNOWN READ in active_edges (not scored)
- [OSV-2023-297](https://insights.sbomify.com/OSV-2023-297/): UNKNOWN READ in pdfi_read_cff_font (not scored)
- [OSV-2023-286](https://insights.sbomify.com/OSV-2023-286/): Heap-buffer-overflow in _dwarf_memcpy_noswap_bytes (not scored)
- [OSV-2023-285](https://insights.sbomify.com/OSV-2023-285/): Stack-buffer-overflow in fn_ElIn_evaluate (not scored)
- [OSV-2023-284](https://insights.sbomify.com/OSV-2023-284/): Global-buffer-overflow in dwg_codepage_dxfstr (not scored)
- [OSV-2023-282](https://insights.sbomify.com/OSV-2023-282/): Heap-use-after-free in mrb_gc_mark (not scored)
- [OSV-2023-281](https://insights.sbomify.com/OSV-2023-281/): Heap-buffer-overflow in unsigned long simdutf::haswell::convert_masked_utf8_to_utf16< (not scored)
- [OSV-2023-280](https://insights.sbomify.com/OSV-2023-280/): Heap-use-after-free in mrb_str_hash_m (not scored)
- [OSV-2023-28](https://insights.sbomify.com/OSV-2023-28/): Heap-buffer-overflow in sas_read2 (not scored)
- [OSV-2023-279](https://insights.sbomify.com/OSV-2023-279/): Heap-use-after-free in filename_cmp (not scored)
- [OSV-2023-278](https://insights.sbomify.com/OSV-2023-278/): Heap-buffer-overflow in simdutf::haswell::implementation::convert_utf8_to_utf32 (not scored)
- [OSV-2023-276](https://insights.sbomify.com/OSV-2023-276/): Heap-use-after-free in aiScene::~aiScene (not scored)
- [OSV-2023-273](https://insights.sbomify.com/OSV-2023-273/): Heap-buffer-overflow in add_complete_typeobj (not scored)
- [OSV-2023-272](https://insights.sbomify.com/OSV-2023-272/): Heap-buffer-overflow in unsigned long simdutf::haswell::convert_masked_utf8_to_utf16< (not scored)
- [OSV-2023-271](https://insights.sbomify.com/OSV-2023-271/): Heap-buffer-overflow in bit_utf8_to_TU (not scored)
- [OSV-2023-270](https://insights.sbomify.com/OSV-2023-270/): Heap-buffer-overflow in bit_utf8_to_TU (not scored)
- [OSV-2023-27](https://insights.sbomify.com/OSV-2023-27/): Heap-buffer-overflow in OT::Layout::GPOS_impl::PairSet<OT::Layout::MediumTypes>::apply (not scored)
- [OSV-2023-269](https://insights.sbomify.com/OSV-2023-269/): Heap-buffer-overflow in bit_utf8_to_TU (not scored)
- [OSV-2023-265](https://insights.sbomify.com/OSV-2023-265/): Heap-double-free in xmlHashDefaultDeallocator (not scored)
- [OSV-2023-261](https://insights.sbomify.com/OSV-2023-261/): Heap-buffer-overflow in HtpRequestBodyHandleMultipart (not scored)
- [OSV-2023-257](https://insights.sbomify.com/OSV-2023-257/): Global-buffer-overflow in read_coding_unit (not scored)
- [OSV-2023-252](https://insights.sbomify.com/OSV-2023-252/): UNKNOWN READ in iv_put (not scored)
- [OSV-2023-251](https://insights.sbomify.com/OSV-2023-251/): Stack-buffer-overflow in ext11_work_out_bundles (not scored)
- [OSV-2023-249](https://insights.sbomify.com/OSV-2023-249/): Global-buffer-overflow in xmlStrndup (not scored)
- [OSV-2023-248](https://insights.sbomify.com/OSV-2023-248/): Heap-double-free in _dwarf_read_line_table_header (not scored)
- [OSV-2023-246](https://insights.sbomify.com/OSV-2023-246/): Heap-double-free in _dwarf_read_line_table_header (not scored)
- [OSV-2023-243](https://insights.sbomify.com/OSV-2023-243/): UNKNOWN WRITE in processCertificateElements (not scored)
- [OSV-2023-242](https://insights.sbomify.com/OSV-2023-242/): Use-of-uninitialized-value in xmlSwitchEncoding (not scored)
- [OSV-2023-240](https://insights.sbomify.com/OSV-2023-240/): Invalid-free in fuzz_die_cu_attrs.c (not scored)
- [OSV-2023-239](https://insights.sbomify.com/OSV-2023-239/): Use-of-uninitialized-value in ihevce_strm_fill_done (not scored)
- [OSV-2023-235](https://insights.sbomify.com/OSV-2023-235/): Use-of-uninitialized-value in complexity_RC_reset_marking (not scored)
- [OSV-2023-234](https://insights.sbomify.com/OSV-2023-234/): Use-of-uninitialized-value in ihevce_enc_frm_proc_slave_thrd (not scored)
- [OSV-2023-229](https://insights.sbomify.com/OSV-2023-229/): Heap-buffer-overflow in ndpi_workflow_process_packet (not scored)
- [OSV-2023-225](https://insights.sbomify.com/OSV-2023-225/): Heap-buffer-overflow in std::__1::enable_if<true, void>::type APFSBtreeNodeIterator<APFSBtreeNode<apfs_o (not scored)
- [OSV-2023-222](https://insights.sbomify.com/OSV-2023-222/): Heap-buffer-overflow in hb_subset_plan_t::hb_subset_plan_t (not scored)
- [OSV-2023-221](https://insights.sbomify.com/OSV-2023-221/): Heap-use-after-free in flac__analyze_frame (not scored)
- [OSV-2023-219](https://insights.sbomify.com/OSV-2023-219/): UNKNOWN WRITE in processCertificateElements (not scored)
- [OSV-2023-216](https://insights.sbomify.com/OSV-2023-216/): Heap-buffer-overflow in H5G__node_cmp3 (not scored)
- [OSV-2023-215](https://insights.sbomify.com/OSV-2023-215/): Global-buffer-overflow in htmlParsePI (not scored)
- [OSV-2023-213](https://insights.sbomify.com/OSV-2023-213/): Global-buffer-overflow in htmlParseDocument (not scored)
- [OSV-2023-212](https://insights.sbomify.com/OSV-2023-212/): Global-buffer-overflow in xmlParseEntityDecl (not scored)
- [OSV-2023-211](https://insights.sbomify.com/OSV-2023-211/): Global-buffer-overflow in xmlStrndup (not scored)
- [OSV-2023-206](https://insights.sbomify.com/OSV-2023-206/): Global-buffer-overflow in xmlParseContentInternal (not scored)
- [OSV-2023-205](https://insights.sbomify.com/OSV-2023-205/): Global-buffer-overflow in base_C_MessageSignFinal (not scored)
- [OSV-2023-204](https://insights.sbomify.com/OSV-2023-204/): Global-buffer-overflow in htmlParseChunk (not scored)
- [OSV-2023-201](https://insights.sbomify.com/OSV-2023-201/): UNKNOWN READ in Assimp::SMDImporter::ParseNodeInfo (not scored)
- [OSV-2023-200](https://insights.sbomify.com/OSV-2023-200/): Segv on unknown address in mrb_vm_find_method (not scored)
- [OSV-2023-199](https://insights.sbomify.com/OSV-2023-199/): Global-buffer-overflow in xmlParseQName (not scored)
- [OSV-2023-197](https://insights.sbomify.com/OSV-2023-197/): Global-buffer-overflow in base_C_MessageEncryptInit (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/6/