OSV-2021-901 Stack-use-after-return in __readlink

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35565 Crash type: Stack-use-after-return WRITE 8 Crash state: readlink v9fscoreadlink v9fsreadlink...

OSV-2021-899 Heap-buffer-overflow in synth_name_to_path

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35548 Crash type: Heap-buffer-overflow READ 8 Crash state: synthnametopath v9fsconametopath v9fscompleterename...

OSV-2021-897 Heap-buffer-overflow in ZSTD_decompressMultiFrame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35537 Crash type: Heap-buffer-overflow READ Crash state: ZSTDdecompressMultiFrame ZSTDdecompressusingDDict bloscd...

OSV-2021-882 Uncaught exception

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35392 Crash type: Uncaught exception Crash state: NULL...

OSV-2021-870 Stack-use-after-return in v9fs_co_lgetxattr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35290 Crash type: Stack-use-after-return READ 8 Crash state: v9fscolgetxattr v9fsxattrwalk coroutinetrampoline...

OSV-2021-852 Heap-buffer-overflow in parseInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35153 Crash type: Heap-buffer-overflow READ 1 Crash state: parseInternal JavaExampleFuzzerNativeparse...

OSV-2021-841 Heap-use-after-free in AK::StringImpl::create

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34973 Crash type: Heap-use-after-free READ Crash state: AK::StringImpl::create AK::String::String AK::URLParser::parsedataurl...

OSV-2021-821 Stack-buffer-overflow in jsoncons::bson::decimal128_to_chars

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34816 Crash type: Stack-buffer-overflow WRITE 6 Crash state: jsoncons::bson::decimal128tochars jsoncons::bson::basicbsonparserjsoncons::binarystreamsource, std::1::allo...

OSV-2021-810 Global-buffer-overflow in SubstitutePhonemes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34747 Crash type: Global-buffer-overflow READ 2 Crash state: SubstitutePhonemes MakePhonemeList TranslateClause...

OSV-2021-791 UNKNOWN READ in std::__1::__tree<std::__1::__value_type<Json::Value::CZString, Json::Value>, std

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34531 Crash type: UNKNOWN READ Crash state: std::1::tree, std std::1::mapJson::Value::CZString, Json::Value, std::1::lessJson::Value::CZ Json::Value::begin...

OSV-2021-776 UNKNOWN READ in std::__1::__tree<std::__1::__value_type<Json::Value::CZString, Json::Value>, std

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34443 Crash type: UNKNOWN READ Crash state: std::1::tree, std std::1::mapJson::Value::CZString, Json::Value, std::1::lessJson::Value::CZ Json::Value::begin...

OSV-2021-757 Use-of-uninitialized-value in nn_check_initialized

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34156 Crash type: Use-of-uninitialized-value Crash state: nncheckinitialized nnzero ecgdsasignraw...

OSV-2021-702 Heap-double-free in flb_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33750 Crash type: Heap-double-free Crash state: flbfree flbparserjsondo flbparserdo...

OSV-2021-692 UNKNOWN READ in qpaintengineex_lineTo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33678 Crash type: UNKNOWN READ Crash state: qpaintengineexlineTo bool qtstrokeside QStroker::processCurrentSubpath...

OSV-2021-688 Segv on unknown address in std::__Fuzzer::basic_string<char, std::__Fuzzer::char_traits<char>, std::__Fuzze

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33682 Crash type: Segv on unknown address Crash state: std::Fuzzer::basicstring, std::Fuzze std::Fuzzer::moneypunctbyname::init...

OSV-2021-675 Segv on unknown address in lxc_conf_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33551 Crash type: Segv on unknown address Crash state: lxcconffree lxccontainerfree lxccontainerput...

OSV-2021-665 UNKNOWN READ in QOutlineMapper::convertPath

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33438 Crash type: UNKNOWN READ Crash state: QOutlineMapper::convertPath QRasterPaintEngine::fill QPaintEngineEx::stroke...

OSV-2021-646 Heap-use-after-free in std::__1::__tree_iterator<std::__1::__value_type<std::__1::basic_string<char, st

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33315 Crash type: Heap-use-after-free READ 8 Crash state: std::1::treeiteratorstd::1::valuetypestd::1::basicstringchar, st draco::Metadata::AddSubMetadata draco::MetadataDecoder::DecodeMetadata...

OSV-2021-594 Global-buffer-overflow in read_coding_unit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32791 Crash type: Global-buffer-overflow READ 1 Crash state: readcodingunit readcodingquadtree readcodingquadtree...

OSV-2021-570 Uncaught exception in com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeObject

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32554 Crash type: Uncaught exception Crash state: com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeObject java.base/java.lang.invoke.MethodHandleNatives.refKindIsField...