OSV-2021-1495 Use-of-uninitialized-value in key_fuzz_target

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40381 Crash type: Use-of-uninitialized-value Crash state: keyfuzztarget std::1::function::funcvoid function.h...

OSV-2021-1493 Global-buffer-overflow in fb_label_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40368 Crash type: Global-buffer-overflow WRITE 1 Crash state: fblabelname readasourcefile performanassemblypass...

OSV-2021-1454 Uncaught exception in org.jsoup.parser.HtmlTreeBuilder.process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39939 Crash type: Uncaught exception Crash state: org.jsoup.parser.HtmlTreeBuilder.process org.jsoup.parser.HtmlTreeBuilderState$9.process org.jsoup.parser.HtmlTreeBuilder.process...

OSV-2021-1449 UNKNOWN WRITE in void QtPrivate::QPodArrayOps<QPainterPath::Element>::emplace<QPainterPath::Eleme

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39957 Crash type: UNKNOWN WRITE Crash state: void QtPrivate::QPodArrayOps::emplaceQPainterPath::Eleme QPainterPath::lineTo QOutlineMapper::clipElements...

OSV-2021-1447 UNKNOWN READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39900 Crash type: UNKNOWN READ Crash state: NULL...

OSV-2021-1425 Heap-buffer-overflow in fr_dns_label_to_value_box

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39689 Crash type: Heap-buffer-overflow READ 1 Crash state: frdnslabeltovaluebox decodevaluetrampoline frstructfromnetwork...

OSV-2021-1338 Uncaught exception in org.jsoup.parser.HtmlTreeBuilder.process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38982 Crash type: Uncaught exception Crash state: org.jsoup.parser.HtmlTreeBuilder.process org.jsoup.parser.HtmlTreeBuilderState$18.process org.jsoup.parser.HtmlTreeBuilder.process...

OSV-2021-1333 Heap-buffer-overflow in pe_get_section_full_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38952 Crash type: Heap-buffer-overflow READ 1 Crash state: pegetsectionfullname peload yrmodulesload...

OSV-2021-1245 Heap-buffer-overflow in ucl_object_dtor_unref_single

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38550 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectdtorunrefsingle uclobjectdtorunref uclhashdestroy...

OSV-2021-1234 Heap-buffer-overflow in ndr_push_array_uint8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38480 Crash type: Heap-buffer-overflow READ 2 Crash state: ndrpusharrayuint8 ndrpushnbtrdatadata ndrpushnbtrdata...

OSV-2021-1197 Heap-buffer-overflow in H5O__linfo_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38041 Crash type: Heap-buffer-overflow READ 1 Crash state: H5Olinfodecode H5Omsgreadoh H5Omsgread...

OSV-2021-1186 Segv on unknown address in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37856 Crash type: Segv on unknown address Crash state: helpeructracecode...

OSV-2021-1183 UNKNOWN WRITE in draco::DepthFirstTraverser<draco::CornerTable, draco::MeshAttributeIndicesEncodi

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37864 Crash type: UNKNOWN WRITE Crash state: draco::DepthFirstTraverserdraco::CornerTable, draco::MeshAttributeIndicesEncodi draco::MeshTraversalSequencerdraco::DepthFirstTraverserdraco::CornerTable, dra...

OSV-2021-1166 Use-of-uninitialized-value in H5F_addr_decode_len

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37536 Crash type: Use-of-uninitialized-value Crash state: H5Faddrdecodelen H5VLnativetokentoaddr H5VLnativeobjectopen...

OSV-2021-1161 UNKNOWN READ in decode_ise

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37413 Crash type: UNKNOWN READ Crash state: decodeise physicaltosymbolic fuzzastcphysicaltosymbolic.cpp...

OSV-2021-1159 UNKNOWN WRITE in hb_bit_set_invertible_t::set

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37425 Crash type: UNKNOWN WRITE Crash state: hbbitsetinvertiblet::set hbsparsesett::set hbsetcopy...

OSV-2021-1153 Heap-buffer-overflow in hb_array_t<OT::IntType<unsigned int, 4u> const> hb_array_t<OT::IntType<unsigned

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37348 Crash type: Heap-buffer-overflow READ 4 Crash state: hbarrayt const hbarrayt ::copy hbheadt , decltype...

OSV-2021-1152 UNKNOWN READ in exif_mnote_data_apple_load

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37334 Crash type: UNKNOWN READ Crash state: exifmnotedataappleload exifmnotedataload interpretmakernote...

OSV-2021-1137 Uncaught exception in com.alibaba.fastjson.parser.DefaultJSONParser.parseObject

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37237 Crash type: Uncaught exception Crash state: com.alibaba.fastjson.parser.DefaultJSONParser.parseObject java.base/java.util.HashMap.tableSizeFor java.base/java.util.HashMap...

OSV-2021-1084 Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36738 Crash type: Heap-buffer-overflow READ 4 Crash state: llvm::DataLayout::getIndexedOffsetInType InterpreterStackFrame::ResolveConstantValue InterpreterStackFrame::ResolveConstant...