OSV-2020-1443 Segv on unknown address in clang::Sema::ActOnCapScopeReturnStmt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20420 Crash type: Segv on unknown address Crash state: clang::Sema::ActOnCapScopeReturnStmt clang::Sema::BuildReturnStmt clang::Sema::ActOnReturnStmt...

OSV-2020-1435 Stack-buffer-overflow in void put_epel_hv_fallback<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22174 Crash type: Stack-buffer-overflow READ 2 Crash state: void putepelhvfallback accelerationfunctions::puthevcepelhv void mcchroma...

OSV-2020-1438 Use-of-uninitialized-value in PerceptibleReciprocal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21803 Crash type: Use-of-uninitialized-value Crash state: PerceptibleReciprocal CompositeImage MergeImageLayers...

OSV-2020-1428 Heap-buffer-overflow in yr_object_set_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Heap-buffer-overflow READ 10 Crash state: yrobjectsetstring dexparse dexload...

OSV-2020-1431 Use-of-uninitialized-value in RoundToUnity

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19955 Crash type: Use-of-uninitialized-value Crash state: RoundToUnity CompositeImage MergeImageLayers...

OSV-2020-1425 Use-of-uninitialized-value in dotnet_parse_com

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8901 Crash type: Use-of-uninitialized-value Crash state: dotnetparsecom dotnetload yrmodulesload...

OSV-2020-1411 Segv on unknown address in clang::Sema::getCurLambda

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19243 Crash type: Segv on unknown address Crash state: clang::Sema::getCurLambda clang::Sema::ActOnFinishFullExpr clang::Sema::ActOnExprStmt...

OSV-2020-1403 Use-of-uninitialized-value in put_weighted_pred_8_fallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22101 Crash type: Use-of-uninitialized-value Crash state: putweightedpred8fallback accelerationfunctions::putweightedpred generateinterpredictionsamples...

OSV-2020-1384 Segv on unknown address in llvm::llvm_unreachable_internal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19652 Crash type: Segv on unknown address Crash state: llvm::llvmunreachableinternal clang::operator clang::Sema::SetMemberAccessSpecifier...

OSV-2020-1377 Segv on unknown address in slice_segment_header::operator=

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22924 Crash type: Segv on unknown address Crash state: slicesegmentheader::operator= slicesegmentheader::read decodercontext::readsliceNAL...

OSV-2020-1375 Use-of-uninitialized-value in WriteBlob

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12473 Crash type: Use-of-uninitialized-value Crash state: WriteBlob WriteEPTImage WriteImage...

OSV-2020-1308 Heap-use-after-free in Interpreter::evaluate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15846 Crash type: Heap-use-after-free READ 4 Crash state: Interpreter::evaluate Interpreter::manifestJson Interpreter::evaluate...

OSV-2020-1270 Heap-buffer-overflow in SSLv3ParseHandshakeType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21478 Crash type: Heap-buffer-overflow WRITE 1 Crash state: SSLv3ParseHandshakeType SSLv3ParseHandshakeProtocol SSLv3Decode...

OSV-2020-1229 Heap-buffer-overflow in Sass::Prelexer::quoted_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15890 Crash type: Heap-buffer-overflow READ 1 Crash state: Sass::Prelexer::quotedstring char const Sass::Prelexer::alternatives& char const Sass::Prelexer::sequence&...

OSV-2020-1116 Heap-use-after-free in Interpreter::evaluate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15888 Crash type: Heap-use-after-free READ 4 Crash state: Interpreter::evaluate jsonnetvmexecute jsonnetevaluatesnippetaux...

OSV-2020-1064 Heap-buffer-overflow in ndr_push_bytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22926 Crash type: Heap-buffer-overflow READ 2 Crash state: ndrpushbytes ndrpusharrayuint8 ndrpushnbtrdatadata...

OSV-2020-1020 Use-of-uninitialized-value in Sass::Prelexer::quoted_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15890 Crash type: Use-of-uninitialized-value Crash state: Sass::Prelexer::quotedstring char const Sass::Prelexer::sequence& char const Sass::Prelexer::alternatives&...

OSV-2020-1003 Heap-buffer-overflow in Sass::Prelexer::quoted_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15890 Crash type: Heap-buffer-overflow READ 1 Crash state: Sass::Prelexer::quotedstring char const Sass::Prelexer::sequence& char const Sass::Parser::lex&...

OSV-2020-960 Use-of-uninitialized-value in prvTidyDecodeUTF8BytesToChar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12656 Crash type: Use-of-uninitialized-value Crash state: prvTidyDecodeUTF8BytesToChar prvTidyGetUTF8 PPrintText...

OSV-2020-931 Use-of-uninitialized-value in Sass::Prelexer::quoted_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15890 Crash type: Use-of-uninitialized-value Crash state: Sass::Prelexer::quotedstring char const Sass::Prelexer::sequence& Sass::Prelexer::restringuriopen...