# Vulnerabilities published in 2024


- [OSV-2024-503](https://insights.sbomify.com/OSV-2024-503/): Heap-buffer-overflow in pdf_save_viewer_state (not scored)
- [OSV-2024-496](https://insights.sbomify.com/OSV-2024-496/): UNKNOWN READ in chunk_free_object (not scored)
- [OSV-2024-495](https://insights.sbomify.com/OSV-2024-495/): UNKNOWN READ in chunk_free_object (not scored)
- [OSV-2024-493](https://insights.sbomify.com/OSV-2024-493/): UNKNOWN READ in chunk_free_object (not scored)
- [OSV-2024-490](https://insights.sbomify.com/OSV-2024-490/): Security exception in com.github.javaparser.CommentsInserter.insertComments (not scored)
- [OSV-2024-477](https://insights.sbomify.com/OSV-2024-477/): Heap-buffer-overflow in ultrahdr::gain_map_metadata::decodeGainmapMetadata (not scored)
- [OSV-2024-476](https://insights.sbomify.com/OSV-2024-476/): Heap-buffer-overflow in ultrahdr::getYuv420Pixel (not scored)
- [OSV-2024-473](https://insights.sbomify.com/OSV-2024-473/): Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr (not scored)
- [OSV-2024-471](https://insights.sbomify.com/OSV-2024-471/): Use-of-uninitialized-value in vpx_codec_peek_stream_info (not scored)
- [OSV-2024-469](https://insights.sbomify.com/OSV-2024-469/): Heap-buffer-overflow in check_content_type_and_change_protocol (not scored)
- [OSV-2024-460](https://insights.sbomify.com/OSV-2024-460/): UNKNOWN READ in glslang::TInfoSinkBase::location (not scored)
- [OSV-2024-456](https://insights.sbomify.com/OSV-2024-456/): Heap-buffer-overflow in ih264d_read_coeff4x4_cabac (not scored)
- [OSV-2024-453](https://insights.sbomify.com/OSV-2024-453/): Use-of-uninitialized-value in encode_base64_differential (not scored)
- [OSV-2024-451](https://insights.sbomify.com/OSV-2024-451/): Use-of-uninitialized-value in XpackDynamicTable::_make_space (not scored)
- [OSV-2024-450](https://insights.sbomify.com/OSV-2024-450/): Use-of-uninitialized-value in ink_filepath_merge (not scored)
- [OSV-2024-449](https://insights.sbomify.com/OSV-2024-449/): Use-of-uninitialized-value in YAML::Stream::Stream (not scored)
- [OSV-2024-440](https://insights.sbomify.com/OSV-2024-440/): UNKNOWN READ (not scored)
- [OSV-2024-434](https://insights.sbomify.com/OSV-2024-434/): Use-of-uninitialized-value in validate_bluetooth_device_address (not scored)
- [OSV-2024-431](https://insights.sbomify.com/OSV-2024-431/): Use-of-uninitialized-value in Lexer::ReadToken (not scored)
- [OSV-2024-423](https://insights.sbomify.com/OSV-2024-423/): Use-of-uninitialized-value in Lexer::Error (not scored)
- [OSV-2024-422](https://insights.sbomify.com/OSV-2024-422/): Use-of-uninitialized-value in cdc_task (not scored)
- [OSV-2024-420](https://insights.sbomify.com/OSV-2024-420/): Use-of-uninitialized-value in Lexer::Error (not scored)
- [OSV-2024-42](https://insights.sbomify.com/OSV-2024-42/): Heap-double-free in dwg_free_common_entity_data (not scored)
- [OSV-2024-409](https://insights.sbomify.com/OSV-2024-409/): Use-of-uninitialized-value in Lexer::ReadToken (not scored)
- [OSV-2024-404](https://insights.sbomify.com/OSV-2024-404/): Use-of-uninitialized-value in avifSequenceHeaderParse (not scored)
- [OSV-2024-403](https://insights.sbomify.com/OSV-2024-403/): UNKNOWN READ in mem_planar_put_image_slow (not scored)
- [OSV-2024-402](https://insights.sbomify.com/OSV-2024-402/): Stack-buffer-overflow in SwiftProtobuf.TextFormatScanner. (not scored)
- [OSV-2024-400](https://insights.sbomify.com/OSV-2024-400/): Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr (not scored)
- [OSV-2024-4](https://insights.sbomify.com/OSV-2024-4/): Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr (not scored)
- [OSV-2024-398](https://insights.sbomify.com/OSV-2024-398/): Use-of-uninitialized-value in wabt::BinaryReaderObjdump::PrintInitExpr (not scored)
- [OSV-2024-396](https://insights.sbomify.com/OSV-2024-396/): UNKNOWN READ in jvp_object_free (not scored)
- [OSV-2024-395](https://insights.sbomify.com/OSV-2024-395/): Use-of-uninitialized-value in pcapint_filter_with_aux_data (not scored)
- [OSV-2024-393](https://insights.sbomify.com/OSV-2024-393/): Heap-buffer-overflow in pcpp::BgpLayer::getHeaderLen (not scored)
- [OSV-2024-390](https://insights.sbomify.com/OSV-2024-390/): Heap-buffer-overflow in H5O__cache_chk_serialize (not scored)
- [OSV-2024-39](https://insights.sbomify.com/OSV-2024-39/): Heap-buffer-overflow in simdutf::westmere::implementation::convert_utf8_to_utf32 (not scored)
- [OSV-2024-389](https://insights.sbomify.com/OSV-2024-389/): Heap-buffer-overflow in JS_CallInternal (not scored)
- [OSV-2024-387](https://insights.sbomify.com/OSV-2024-387/): Heap-buffer-overflow in H5F_addr_encode (not scored)
- [OSV-2024-384](https://insights.sbomify.com/OSV-2024-384/): Heap-use-after-free in json_fixed_string (not scored)
- [OSV-2024-382](https://insights.sbomify.com/OSV-2024-382/): UNKNOWN READ in pcpp::Packet::destructPacketData (not scored)
- [OSV-2024-381](https://insights.sbomify.com/OSV-2024-381/): Heap-buffer-overflow in H5F__accum_free (not scored)
- [OSV-2024-380](https://insights.sbomify.com/OSV-2024-380/): Heap-use-after-free in H5FL__blk_gc_list (not scored)
- [OSV-2024-38](https://insights.sbomify.com/OSV-2024-38/): Heap-buffer-overflow in json_HEADER (not scored)
- [OSV-2024-379](https://insights.sbomify.com/OSV-2024-379/): UNKNOWN READ in H5SL_first (not scored)
- [OSV-2024-372](https://insights.sbomify.com/OSV-2024-372/): Security exception in java.base/java.util.Arrays.copyOf (not scored)
- [OSV-2024-371](https://insights.sbomify.com/OSV-2024-371/): UNKNOWN READ in jv_array_set (not scored)
- [OSV-2024-370](https://insights.sbomify.com/OSV-2024-370/): Heap-buffer-overflow in H5O__chunk_protect (not scored)
- [OSV-2024-369](https://insights.sbomify.com/OSV-2024-369/): Segv on unknown address in pcpp::IPv6Layer::~IPv6Layer (not scored)
- [OSV-2024-360](https://insights.sbomify.com/OSV-2024-360/): Heap-buffer-overflow in pcpp::TelnetLayer::getFieldLen (not scored)
- [OSV-2024-36](https://insights.sbomify.com/OSV-2024-36/): Heap-use-after-free in LLVMFuzzerRunDriver (not scored)
- [OSV-2024-359](https://insights.sbomify.com/OSV-2024-359/): Security exception in graphql.schema.GraphQLTypeUtil.simplePrint (not scored)
- [OSV-2024-352](https://insights.sbomify.com/OSV-2024-352/): Heap-buffer-overflow in __parse_options (not scored)
- [OSV-2024-351](https://insights.sbomify.com/OSV-2024-351/): UNKNOWN READ in H5SL__release_common (not scored)
- [OSV-2024-349](https://insights.sbomify.com/OSV-2024-349/): Security exception in java.base/java.lang.AbstractStringBuilder.<init> (not scored)
- [OSV-2024-345](https://insights.sbomify.com/OSV-2024-345/): Use-of-uninitialized-value in aesEncryptBlock (not scored)
- [OSV-2024-343](https://insights.sbomify.com/OSV-2024-343/): Heap-buffer-overflow in pcpp::BgpUpdateMessageLayer::setPathAttributes (not scored)
- [OSV-2024-341](https://insights.sbomify.com/OSV-2024-341/): UNKNOWN READ in PointerVector.h (not scored)
- [OSV-2024-340](https://insights.sbomify.com/OSV-2024-340/): Heap-buffer-overflow in Exiv2::AsfVideo::GUIDTag::GUIDTag (not scored)
- [OSV-2024-334](https://insights.sbomify.com/OSV-2024-334/): Heap-buffer-overflow in readParsedPacket (not scored)
- [OSV-2024-333](https://insights.sbomify.com/OSV-2024-333/): UNKNOWN READ in Mat_VarPrint (not scored)
- [OSV-2024-330](https://insights.sbomify.com/OSV-2024-330/): UNKNOWN READ in std::__1::__POW10_SPLIT_2 (not scored)
- [OSV-2024-33](https://insights.sbomify.com/OSV-2024-33/): Heap-buffer-overflow in ctxload_probe_data (not scored)
- [OSV-2024-324](https://insights.sbomify.com/OSV-2024-324/): Use-of-uninitialized-value in do_callout_jit (not scored)
- [OSV-2024-323](https://insights.sbomify.com/OSV-2024-323/): Security exception in com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst (not scored)
- [OSV-2024-322](https://insights.sbomify.com/OSV-2024-322/): Container-overflow in strtol (not scored)
- [OSV-2024-319](https://insights.sbomify.com/OSV-2024-319/): Stack-buffer-underflow in filter_apply_chain (not scored)
- [OSV-2024-314](https://insights.sbomify.com/OSV-2024-314/): Heap-buffer-overflow in config__add_listener (not scored)
- [OSV-2024-309](https://insights.sbomify.com/OSV-2024-309/): Use-of-uninitialized-value in fast_forward_first_n_chars (not scored)
- [OSV-2024-30](https://insights.sbomify.com/OSV-2024-30/): Heap-buffer-overflow in mrb_memsearch (not scored)
- [OSV-2024-3](https://insights.sbomify.com/OSV-2024-3/): Stack-buffer-overflow in icu_75::TZDBTimeZoneNames::getMetaZoneNames (not scored)
- [OSV-2024-294](https://insights.sbomify.com/OSV-2024-294/): Segv on unknown address in gx_device_forward_finalize (not scored)
- [OSV-2024-293](https://insights.sbomify.com/OSV-2024-293/): Stack-buffer-overflow in shoco_decompress (not scored)
- [OSV-2024-29](https://insights.sbomify.com/OSV-2024-29/): Heap-buffer-overflow in mrb_memsearch (not scored)
- [OSV-2024-288](https://insights.sbomify.com/OSV-2024-288/): Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr (not scored)
- [OSV-2024-283](https://insights.sbomify.com/OSV-2024-283/): Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement (not scored)
- [OSV-2024-28](https://insights.sbomify.com/OSV-2024-28/): Security exception in java.base/java.util.Arrays.copyOf (not scored)
- [OSV-2024-278](https://insights.sbomify.com/OSV-2024-278/): Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr (not scored)
- [OSV-2024-274](https://insights.sbomify.com/OSV-2024-274/): Heap-use-after-free in Mat_VarFree (not scored)
- [OSV-2024-272](https://insights.sbomify.com/OSV-2024-272/): Heap-buffer-overflow in DDS_Security_Deserialize_ParticipantBuiltinTopicData (not scored)
- [OSV-2024-269](https://insights.sbomify.com/OSV-2024-269/): Security exception in java.base/java.util.stream.AbstractPipeline.evaluate (not scored)
- [OSV-2024-267](https://insights.sbomify.com/OSV-2024-267/): Heap-buffer-overflow in SetDataFormat (not scored)
- [OSV-2024-265](https://insights.sbomify.com/OSV-2024-265/): Heap-buffer-overflow in Mat_VarDuplicate (not scored)
- [OSV-2024-264](https://insights.sbomify.com/OSV-2024-264/): UNKNOWN READ in cli_html_normalise (not scored)
- [OSV-2024-255](https://insights.sbomify.com/OSV-2024-255/): UNKNOWN READ (not scored)
- [OSV-2024-251](https://insights.sbomify.com/OSV-2024-251/): Heap-use-after-free in gx_device_forward_finalize (not scored)
- [OSV-2024-25](https://insights.sbomify.com/OSV-2024-25/): Stack-buffer-overflow in icu_75::PluralRuleParser::parse (not scored)
- [OSV-2024-248](https://insights.sbomify.com/OSV-2024-248/): Security exception in com.github.javaparser.CommentsInserter.insertComments (not scored)
- [OSV-2024-246](https://insights.sbomify.com/OSV-2024-246/): UNKNOWN READ in ndpi_detection_process_packet (not scored)
- [OSV-2024-245](https://insights.sbomify.com/OSV-2024-245/): Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept (not scored)
- [OSV-2024-24](https://insights.sbomify.com/OSV-2024-24/): Security exception in java.base/java.util.Arrays.copyOf (not scored)
- [OSV-2024-239](https://insights.sbomify.com/OSV-2024-239/): Use-of-uninitialized-value in H5G__ent_to_link (not scored)
- [OSV-2024-233](https://insights.sbomify.com/OSV-2024-233/): Use-of-uninitialized-value in WelsDec::CWelsDecoder::ReorderPicturesInDisplay (not scored)
- [OSV-2024-223](https://insights.sbomify.com/OSV-2024-223/): UNKNOWN READ in H5HG_read (not scored)
- [OSV-2024-221](https://insights.sbomify.com/OSV-2024-221/): Heap-buffer-overflow in libspdm_copy_mem (not scored)
- [OSV-2024-22](https://insights.sbomify.com/OSV-2024-22/): Heap-use-after-free in ucl_hash_func (not scored)
- [OSV-2024-217](https://insights.sbomify.com/OSV-2024-217/): Heap-use-after-free in dropNode (not scored)
- [OSV-2024-207](https://insights.sbomify.com/OSV-2024-207/): Heap-buffer-overflow in emit_goto (not scored)
- [OSV-2024-204](https://insights.sbomify.com/OSV-2024-204/): Heap-use-after-free in JS_NewObjectFromShape (not scored)
- [OSV-2024-20](https://insights.sbomify.com/OSV-2024-20/): Heap-buffer-overflow in bam_aux_get (not scored)
- [OSV-2024-198](https://insights.sbomify.com/OSV-2024-198/): Heap-use-after-free in xmlCopyPropInternal (not scored)
- [OSV-2024-195](https://insights.sbomify.com/OSV-2024-195/): Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/3/