OSV-2021-1607 Container-overflow in void jxl::CopyImageTo<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41235 Crash type: Container-overflow READ 4 Crash state: void jxl::CopyImageTo jxl::ModularFrameDecoder::DecodeGroup jxl::FrameDecoder::ProcessACGroup...

OSV-2021-1594 Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41144 Crash type: Heap-buffer-overflow READ 4 Crash state: llvm::DataLayout::getIndexedOffsetInType InterpreterStackFrame::ResolveConstantValue InterpreterStackFrame::ResolveConstant...

OSV-2021-1575 Heap-buffer-overflow in bfd_getl16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40967 Crash type: Heap-buffer-overflow READ 1 Crash state: bfdgetl16 parsemodule bfdvmsfindnearestline...

OSV-2021-1570 Heap-buffer-overflow in bfd_putl32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40919 Crash type: Heap-buffer-overflow WRITE 1 Crash state: bfdputl32 bpfelfgenericreloc bfdperformrelocation...

OSV-2021-1564 Heap-buffer-overflow in bfd_getl32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40908 Crash type: Heap-buffer-overflow READ 1 Crash state: bfdgetl32 bfdmipselfsectionfromshdr bfdsectionfromshdr...

OSV-2021-1563 Global-buffer-overflow in xstrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40915 Crash type: Global-buffer-overflow READ 1 Crash state: xstrdup scanfilteredsymbols scanallsymbols...

OSV-2021-1553 Segv on unknown address in bfd_getl16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40809 Crash type: Segv on unknown address Crash state: bfdgetl16 bfdmipselfrelocunshuffle bfdmipself32gprel16reloc...

OSV-2021-1549 Uncaught exception in com.google.gson.internal.bind.TypeAdapters$27.read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40830 Crash type: Uncaught exception Crash state: com.google.gson.internal.bind.TypeAdapters$27.read java.base/java.lang.StringUTF16.compress java.base/java.lang.String...

OSV-2021-1515 Heap-use-after-free in std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<std::__1::basic_

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40507 Crash type: Heap-use-after-free READ 1 Crash state: std::1::pairstd::1::treeiteratorstd::1::valuetypestd::1::basic dd::Propertiesimpl::set dd::eatpairs...

OSV-2021-1495 Use-of-uninitialized-value in key_fuzz_target

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40381 Crash type: Use-of-uninitialized-value Crash state: keyfuzztarget std::1::function::funcvoid function.h...

OSV-2021-1493 Global-buffer-overflow in fb_label_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40368 Crash type: Global-buffer-overflow WRITE 1 Crash state: fblabelname readasourcefile performanassemblypass...

OSV-2021-1454 Uncaught exception in org.jsoup.parser.HtmlTreeBuilder.process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39939 Crash type: Uncaught exception Crash state: org.jsoup.parser.HtmlTreeBuilder.process org.jsoup.parser.HtmlTreeBuilderState$9.process org.jsoup.parser.HtmlTreeBuilder.process...

OSV-2021-1449 UNKNOWN WRITE in void QtPrivate::QPodArrayOps<QPainterPath::Element>::emplace<QPainterPath::Eleme

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39957 Crash type: UNKNOWN WRITE Crash state: void QtPrivate::QPodArrayOps::emplaceQPainterPath::Eleme QPainterPath::lineTo QOutlineMapper::clipElements...

OSV-2021-1447 UNKNOWN READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39900 Crash type: UNKNOWN READ Crash state: NULL...

OSV-2021-1425 Heap-buffer-overflow in fr_dns_label_to_value_box

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39689 Crash type: Heap-buffer-overflow READ 1 Crash state: frdnslabeltovaluebox decodevaluetrampoline frstructfromnetwork...

OSV-2021-1338 Uncaught exception in org.jsoup.parser.HtmlTreeBuilder.process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38982 Crash type: Uncaught exception Crash state: org.jsoup.parser.HtmlTreeBuilder.process org.jsoup.parser.HtmlTreeBuilderState$18.process org.jsoup.parser.HtmlTreeBuilder.process...

OSV-2021-1333 Heap-buffer-overflow in pe_get_section_full_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38952 Crash type: Heap-buffer-overflow READ 1 Crash state: pegetsectionfullname peload yrmodulesload...

OSV-2021-1245 Heap-buffer-overflow in ucl_object_dtor_unref_single

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38550 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectdtorunrefsingle uclobjectdtorunref uclhashdestroy...

OSV-2021-1234 Heap-buffer-overflow in ndr_push_array_uint8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38480 Crash type: Heap-buffer-overflow READ 2 Crash state: ndrpusharrayuint8 ndrpushnbtrdatadata ndrpushnbtrdata...

OSV-2021-1197 Heap-buffer-overflow in H5O__linfo_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38041 Crash type: Heap-buffer-overflow READ 1 Crash state: H5Olinfodecode H5Omsgreadoh H5Omsgread...