# Vulnerabilities published in 2024


- [OSV-2024-194](https://insights.sbomify.com/OSV-2024-194/): Heap-use-after-free in xmlDOMWrapNSNormAcquireNormalizedNs (not scored)
- [OSV-2024-193](https://insights.sbomify.com/OSV-2024-193/): Use-of-uninitialized-value in api.c (not scored)
- [OSV-2024-189](https://insights.sbomify.com/OSV-2024-189/): Negative-size-param in vcf_parse_format (not scored)
- [OSV-2024-187](https://insights.sbomify.com/OSV-2024-187/): Heap-buffer-overflow in pcre2_fuzzsupport.c (not scored)
- [OSV-2024-184](https://insights.sbomify.com/OSV-2024-184/): Security exception in org.threeten.bp.format.DateTimeFormatterBuilder$CompositePrinterParser.parse (not scored)
- [OSV-2024-182](https://insights.sbomify.com/OSV-2024-182/): Heap-buffer-overflow in pcre2_fuzzsupport.c (not scored)
- [OSV-2024-181](https://insights.sbomify.com/OSV-2024-181/): Security exception in org.antlr.v4.runtime.atn.PredictionContext.fromRuleContext (not scored)
- [OSV-2024-180](https://insights.sbomify.com/OSV-2024-180/): Heap-buffer-overflow in ixheaace_process (not scored)
- [OSV-2024-18](https://insights.sbomify.com/OSV-2024-18/): Heap-use-after-free in QPDF::read_xref (not scored)
- [OSV-2024-179](https://insights.sbomify.com/OSV-2024-179/): UNKNOWN READ in gs_font_finalize (not scored)
- [OSV-2024-178](https://insights.sbomify.com/OSV-2024-178/): Global-buffer-overflow in dissect_dns_answer (not scored)
- [OSV-2024-177](https://insights.sbomify.com/OSV-2024-177/): Heap-buffer-overflow in p11_rpc_buffer_get_date_value (not scored)
- [OSV-2024-173](https://insights.sbomify.com/OSV-2024-173/): Heap-buffer-overflow in pcre2_fuzzsupport.c (not scored)
- [OSV-2024-171](https://insights.sbomify.com/OSV-2024-171/): Security exception in org.threeten.bp.format.DateTimeFormatterBuilder$CompositePrinterParser.parse (not scored)
- [OSV-2024-170](https://insights.sbomify.com/OSV-2024-170/): Use-of-uninitialized-value in pcpp::Packet::createFirstLayer (not scored)
- [OSV-2024-17](https://insights.sbomify.com/OSV-2024-17/): Heap-use-after-free in iasecc_delete_file (not scored)
- [OSV-2024-167](https://insights.sbomify.com/OSV-2024-167/): Security exception in com.github.javaparser.GeneratedJavaParser.Expression (not scored)
- [OSV-2024-163](https://insights.sbomify.com/OSV-2024-163/): Stack-buffer-overflow in H5S_get_simple_extent_dims (not scored)
- [OSV-2024-161](https://insights.sbomify.com/OSV-2024-161/): Heap-buffer-overflow in pcre2_fuzzsupport.c (not scored)
- [OSV-2024-157](https://insights.sbomify.com/OSV-2024-157/): Heap-buffer-overflow in gf_strmemstr (not scored)
- [OSV-2024-156](https://insights.sbomify.com/OSV-2024-156/): Stack-buffer-overflow in rtpin_satip_get_server_ip (not scored)
- [OSV-2024-153](https://insights.sbomify.com/OSV-2024-153/): Heap-buffer-overflow in od_ec_dec_init (not scored)
- [OSV-2024-151](https://insights.sbomify.com/OSV-2024-151/): Heap-buffer-overflow in od_ec_dec_normalize (not scored)
- [OSV-2024-149](https://insights.sbomify.com/OSV-2024-149/): Heap-use-after-free in get_ls_tile_buffers (not scored)
- [OSV-2024-144](https://insights.sbomify.com/OSV-2024-144/): UNKNOWN READ in spvtools::val::ValidateAccessChain (not scored)
- [OSV-2024-142](https://insights.sbomify.com/OSV-2024-142/): Heap-buffer-overflow in gf_gz_decompress_payload_ex (not scored)
- [OSV-2024-1411](https://insights.sbomify.com/OSV-2024-1411/): Use-of-uninitialized-value in mark_context (not scored)
- [OSV-2024-1406](https://insights.sbomify.com/OSV-2024-1406/): UNKNOWN READ in _TIFFVSetField (not scored)
- [OSV-2024-140](https://insights.sbomify.com/OSV-2024-140/): Container-overflow in WasmEdge::LLVM::Compiler::compile (not scored)
- [OSV-2024-1391](https://insights.sbomify.com/OSV-2024-1391/): Heap-buffer-overflow in gsicc_create_getv2buffer (not scored)
- [OSV-2024-1388](https://insights.sbomify.com/OSV-2024-1388/): Security exception in com.google.gson.internal.bind.TypeAdapters$28.write (not scored)
- [OSV-2024-1380](https://insights.sbomify.com/OSV-2024-1380/): Index-out-of-bounds in ndpi_search_dns (not scored)
- [OSV-2024-138](https://insights.sbomify.com/OSV-2024-138/): Security exception in com.github.javaparser.GeneratedJavaParser.Expression (not scored)
- [OSV-2024-1375](https://insights.sbomify.com/OSV-2024-1375/): Index-out-of-bounds in dwg_decode_eed (not scored)
- [OSV-2024-1372](https://insights.sbomify.com/OSV-2024-1372/): Bad-cast to Assimp::LogStream from Assimp::OptimizeMeshesProcess (not scored)
- [OSV-2024-137](https://insights.sbomify.com/OSV-2024-137/): Global-buffer-overflow in igraph_dl_yylex (not scored)
- [OSV-2024-1356](https://insights.sbomify.com/OSV-2024-1356/): Heap-buffer-overflow in ChunkAssignData (not scored)
- [OSV-2024-1355](https://insights.sbomify.com/OSV-2024-1355/): UNKNOWN READ in glslang::TInfoSinkBase::location (not scored)
- [OSV-2024-1351](https://insights.sbomify.com/OSV-2024-1351/): Use-of-uninitialized-value in Archive::UnexpEndArcMsg (not scored)
- [OSV-2024-135](https://insights.sbomify.com/OSV-2024-135/): Heap-buffer-overflow in BS_ReadByte (not scored)
- [OSV-2024-1348](https://insights.sbomify.com/OSV-2024-1348/): Heap-buffer-overflow in glslang::HlslGrammar::acceptDeclaration (not scored)
- [OSV-2024-1346](https://insights.sbomify.com/OSV-2024-1346/): UNKNOWN READ in glslang::HlslTokenStream::advanceToken (not scored)
- [OSV-2024-1343](https://insights.sbomify.com/OSV-2024-1343/): Container-overflow in glslang::HlslParseContext::decomposeIntrinsic (not scored)
- [OSV-2024-1336](https://insights.sbomify.com/OSV-2024-1336/): Security exception in org.checkerframework.checker.formatter.util.FormatUtil.formatParameterCategories (not scored)
- [OSV-2024-1332](https://insights.sbomify.com/OSV-2024-1332/): Negative-size-param in extract_mr_data (not scored)
- [OSV-2024-1330](https://insights.sbomify.com/OSV-2024-1330/): Heap-buffer-overflow in zoom_search_again (not scored)
- [OSV-2024-1326](https://insights.sbomify.com/OSV-2024-1326/): Heap-buffer-overflow in ndpi_search_mikrotik (not scored)
- [OSV-2024-1324](https://insights.sbomify.com/OSV-2024-1324/): Heap-buffer-overflow in Assimp::FBXExporter::WriteObjects (not scored)
- [OSV-2024-1322](https://insights.sbomify.com/OSV-2024-1322/): Security exception in com.alibaba.fastjson2.JSONReader.readObject (not scored)
- [OSV-2024-1320](https://insights.sbomify.com/OSV-2024-1320/): Heap-buffer-overflow in process_page_ (not scored)
- [OSV-2024-1312](https://insights.sbomify.com/OSV-2024-1312/): Heap-buffer-overflow in jv_string_vfmt (not scored)
- [OSV-2024-1310](https://insights.sbomify.com/OSV-2024-1310/): Use-of-uninitialized-value in decompress_yuv.cc (not scored)
- [OSV-2024-1297](https://insights.sbomify.com/OSV-2024-1297/): Heap-buffer-overflow in rijndaelSetupEncrypt (not scored)
- [OSV-2024-1293](https://insights.sbomify.com/OSV-2024-1293/): Use-of-uninitialized-value in k5_hashtab_add (not scored)
- [OSV-2024-1282](https://insights.sbomify.com/OSV-2024-1282/): Segv on unknown address in udiv (not scored)
- [OSV-2024-1279](https://insights.sbomify.com/OSV-2024-1279/): Heap-buffer-overflow in opj_j2k_read_tile_header (not scored)
- [OSV-2024-1274](https://insights.sbomify.com/OSV-2024-1274/): Segv on unknown address in yara_yyparse (not scored)
- [OSV-2024-1272](https://insights.sbomify.com/OSV-2024-1272/): Segv on unknown address in std::__1::ios_base::~ios_base (not scored)
- [OSV-2024-1266](https://insights.sbomify.com/OSV-2024-1266/): UNKNOWN READ in llama_output_reserve (not scored)
- [OSV-2024-1261](https://insights.sbomify.com/OSV-2024-1261/): Stack-buffer-overflow in _pcre2_compile_class_not_nested_16 (not scored)
- [OSV-2024-1254](https://insights.sbomify.com/OSV-2024-1254/): Security exception in org.apache.lucene.util.ArrayUtil.growExact (not scored)
- [OSV-2024-1253](https://insights.sbomify.com/OSV-2024-1253/): Segv on unknown address in llama_output_reserve (not scored)
- [OSV-2024-1251](https://insights.sbomify.com/OSV-2024-1251/): UNKNOWN WRITE in s_DCTD_process (not scored)
- [OSV-2024-1249](https://insights.sbomify.com/OSV-2024-1249/): Heap-buffer-overflow in extract_ice_option (not scored)
- [OSV-2024-1244](https://insights.sbomify.com/OSV-2024-1244/): Heap-buffer-overflow in extract_fmtp (not scored)
- [OSV-2024-1241](https://insights.sbomify.com/OSV-2024-1241/): Heap-buffer-overflow in polygonToCellsExperimental (not scored)
- [OSV-2024-1239](https://insights.sbomify.com/OSV-2024-1239/): Heap-buffer-overflow in convsamp (not scored)
- [OSV-2024-1237](https://insights.sbomify.com/OSV-2024-1237/): Use-of-uninitialized-value in jit_compile (not scored)
- [OSV-2024-1232](https://insights.sbomify.com/OSV-2024-1232/): Segv on unknown address in cranelift_filetests::function_runner::Trampoline::call::hb2e77cf3a13ebaf4 (not scored)
- [OSV-2024-1230](https://insights.sbomify.com/OSV-2024-1230/): Heap-buffer-overflow in extract_rtpmap (not scored)
- [OSV-2024-123](https://insights.sbomify.com/OSV-2024-123/): Heap-use-after-free in dxf_tables_read (not scored)
- [OSV-2024-1220](https://insights.sbomify.com/OSV-2024-1220/): UNKNOWN READ in Assimp::NDOImporter::InternReadFile (not scored)
- [OSV-2024-1218](https://insights.sbomify.com/OSV-2024-1218/): UNKNOWN READ in Poco::UTF16Encoding::queryConvert (not scored)
- [OSV-2024-1216](https://insights.sbomify.com/OSV-2024-1216/): Use-of-uninitialized-value in Poco::Net::NTLMCredentials::parseChallengeMessage (not scored)
- [OSV-2024-1212](https://insights.sbomify.com/OSV-2024-1212/): Heap-buffer-overflow in cram_encode_container (not scored)
- [OSV-2024-1210](https://insights.sbomify.com/OSV-2024-1210/): Heap-buffer-overflow in parse_mixed_content (not scored)
- [OSV-2024-1209](https://insights.sbomify.com/OSV-2024-1209/): Heap-use-after-free in xmlValidateOneElement (not scored)
- [OSV-2024-1206](https://insights.sbomify.com/OSV-2024-1206/): Heap-buffer-overflow in extract_sendrecv_mode (not scored)
- [OSV-2024-1205](https://insights.sbomify.com/OSV-2024-1205/): Memcpy-param-overlap in repeat (not scored)
- [OSV-2024-1203](https://insights.sbomify.com/OSV-2024-1203/): Global-buffer-overflow in AnnouncePunctuation (not scored)
- [OSV-2024-1201](https://insights.sbomify.com/OSV-2024-1201/): Heap-buffer-overflow in polygonToCellsExperimental (not scored)
- [OSV-2024-1200](https://insights.sbomify.com/OSV-2024-1200/): UNKNOWN READ in eat_line (not scored)
- [OSV-2024-120](https://insights.sbomify.com/OSV-2024-120/): Security exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer (not scored)
- [OSV-2024-1186](https://insights.sbomify.com/OSV-2024-1186/): UNKNOWN READ in cfl_sds_len (not scored)
- [OSV-2024-1181](https://insights.sbomify.com/OSV-2024-1181/): Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr (not scored)
- [OSV-2024-118](https://insights.sbomify.com/OSV-2024-118/): Heap-buffer-overflow in sav_process_row (not scored)
- [OSV-2024-1179](https://insights.sbomify.com/OSV-2024-1179/): UNKNOWN READ in __dynamic_cast (not scored)
- [OSV-2024-1175](https://insights.sbomify.com/OSV-2024-1175/): Use-of-uninitialized-value in mark_context (not scored)
- [OSV-2024-117](https://insights.sbomify.com/OSV-2024-117/): Security exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer (not scored)
- [OSV-2024-1164](https://insights.sbomify.com/OSV-2024-1164/): Use-of-uninitialized-value in format_message (not scored)
- [OSV-2024-1161](https://insights.sbomify.com/OSV-2024-1161/): Security exception in java.base/java.util.Arrays.copyOfRange (not scored)
- [OSV-2024-1159](https://insights.sbomify.com/OSV-2024-1159/): Use-of-uninitialized-value in decompress_yuv.cc (not scored)
- [OSV-2024-1158](https://insights.sbomify.com/OSV-2024-1158/): Use-of-uninitialized-value in format_message (not scored)
- [OSV-2024-1150](https://insights.sbomify.com/OSV-2024-1150/): Heap-buffer-overflow in extract_mr_data (not scored)
- [OSV-2024-1149](https://insights.sbomify.com/OSV-2024-1149/): Use-of-uninitialized-value in ultrahdr::uhdr_gainmap_metadata_frac::encodeGainmapMetadata (not scored)
- [OSV-2024-1145](https://insights.sbomify.com/OSV-2024-1145/): Heap-buffer-overflow in ultrahdr::getYuv444Pixel (not scored)
- [OSV-2024-1144](https://insights.sbomify.com/OSV-2024-1144/): Security exception in graphql.schema.GraphQLTypeUtil.simplePrint (not scored)
- [OSV-2024-114](https://insights.sbomify.com/OSV-2024-114/): Segv on unknown address in lj_BC_RET1 (not scored)
- [OSV-2024-1133](https://insights.sbomify.com/OSV-2024-1133/): Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr (not scored)
- [OSV-2024-1128](https://insights.sbomify.com/OSV-2024-1128/): Segv on unknown address in udiv (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/4/