OSV-2020-2249 Heap-buffer-overflow in grk::t1_part1::T1Part1::decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28328 Crash type: Heap-buffer-overflow READ Crash state: grk::t1part1::T1Part1::decompress grk::DecompressBlockExec::open grk::T1DecompressScheduler::decompressBlock...

OSV-2020-2246 Heap-use-after-free in check_connection

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28254 Crash type: Heap-use-after-free READ 6 Crash state: checkconnection fuzzcheckconnection httpfuzzer.c...

OSV-2020-2243 Heap-buffer-overflow in grk::BitIO::bytein

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28313 Crash type: Heap-buffer-overflow READ 1 Crash state: grk::BitIO::bytein grk::BitIO::read grk::BitIO::getnumpasses...

OSV-2020-2228 Heap-buffer-overflow in grk::t1_part1::T1Part1::decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28227 Crash type: Heap-buffer-overflow READ Crash state: grk::t1part1::T1Part1::decompress grk::DecompressBlockExec::open grk::T1DecompressScheduler::decompressBlock...

OSV-2020-2216 Heap-buffer-overflow in ojph::local::ojph_decode_codeblock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28103 Crash type: Heap-buffer-overflow WRITE 4 Crash state: ojph::local::ojphdecodecodeblock grk::t1ht::T1HT::decompress grk::DecompressBlockExec::open...

OSV-2020-2190 Heap-buffer-overflow in my_ismbchar_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27813 Crash type: Heap-buffer-overflow READ 2 Crash state: myismbcharutf8 checkcolumnname getvariable...

OSV-2020-2167 Heap-buffer-overflow in ojph::local::ojph_decode_codeblock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27533 Crash type: Heap-buffer-overflow WRITE 4 Crash state: ojph::local::ojphdecodecodeblock grk::t1ht::T1HT::decompress grk::DecompressBlockExec::open...

OSV-2020-2131 Stack-use-after-return in solidity::smtutil::CHCSmtLib2Interface::querySolver

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26997 Crash type: Stack-use-after-return READ 8 Crash state: solidity::smtutil::CHCSmtLib2Interface::querySolver solidity::smtutil::CHCSmtLib2Interface::query solidity::frontend::CHC::query...

OSV-2020-2124 UNKNOWN READ in jsoncharutils.h

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26859 Crash type: UNKNOWN READ Crash state: jsoncharutils.h...

OSV-2020-2117 Heap-buffer-overflow in flb_msgpack_gelf_value_ext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26851 Crash type: Heap-buffer-overflow READ 1 Crash state: flbmsgpackgelfvalueext flbmsgpacktogelf flbmsgpackrawtogelf...

OSV-2020-2106 UNKNOWN READ in grk::SparseBuffer<6u, 6u>::read_or_write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26702 Crash type: UNKNOWN READ Crash state: grk::SparseBuffer::readorwrite grk::SparseBuffer::read bool grk::decompresspartialtile...

OSV-2020-2095 Heap-buffer-overflow in grk::Subband::Subband

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26589 Crash type: Heap-buffer-overflow READ 1 Crash state: grk::Subband::Subband grk::TileComponent::subbandIntersectsAOI grk::T2Decompress::decompresspackets...

OSV-2020-2091 UNKNOWN READ in WelsDec::WelsMarkAsRef

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26533 Crash type: UNKNOWN READ Crash state: WelsDec::WelsMarkAsRef WelsDec::MarkECFrameAsRef WelsDec::CheckAndFinishLastPic...

OSV-2020-2090 Heap-buffer-overflow in grk::Subband::Subband

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26500 Crash type: Heap-buffer-overflow READ 1 Crash state: grk::Subband::Subband grk::TileComponent::subbandIntersectsAOI grk::T2Decompress::decompresspackets...

OSV-2020-2081 UNKNOWN READ in presym_sym2name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26400 Crash type: UNKNOWN READ Crash state: presymsym2name sym2namelen mrbsymnamelen...

OSV-2020-2077 UNKNOWN READ in WelsCommon::WelsFree

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26347 Crash type: UNKNOWN READ Crash state: WelsCommon::WelsFree WelsCommon::CMemoryAlign::WelsFree WelsDec::FreePicture...

OSV-2020-2069 UNKNOWN READ in grk::SparseBuffer<6u, 6u>::read_or_write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26322 Crash type: UNKNOWN READ Crash state: grk::SparseBuffer::readorwrite grk::SparseBuffer::read bool grk::decodepartialtile...

OSV-2020-2067 Heap-buffer-overflow in WelsDec::DecodeCurrentAccessUnit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26302 Crash type: Heap-buffer-overflow WRITE Crash state: WelsDec::DecodeCurrentAccessUnit WelsDec::ConstructAccessUnit WelsDecodeBs...

OSV-2020-2062 Heap-buffer-overflow in WelsDec::WelsDecodeMbCabacISliceBaseMode0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26303 Crash type: Heap-buffer-overflow WRITE 4 Crash state: WelsDec::WelsDecodeMbCabacISliceBaseMode0 WelsDec::WelsDecodeMbCabacISlice WelsDec::WelsDecodeSlice...

OSV-2020-2018 Heap-use-after-free in fpixChangeRefcount

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26260 Crash type: Heap-use-after-free READ 4 Crash state: fpixChangeRefcount fpixDestroy fpix2fuzzer.cc...