OSV-2020-1150 Global-buffer-overflow in ssl_sigalg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13800 Crash type: Global-buffer-overflow READ 2 Crash state: sslsigalg ssl3getserverkeyexchange ssl3connect...

OSV-2020-1136 Global-buffer-overflow in ssl_sigalg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13797 Crash type: Global-buffer-overflow READ 2 Crash state: sslsigalg tls1processsigalgs tlsextsigalgsserverparse...

OSV-2020-1005 Global-buffer-overflow in ihevcd_unpack_coeffs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16926 Crash type: Global-buffer-overflow READ 1 Crash state: ihevcdunpackcoeffs ihevcdiquantitransreconctb ihevcdprocess...

OSV-2020-936 Global-buffer-overflow in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20181 Crash type: Global-buffer-overflow READ 1 Crash state: arrow::Status arrow::VisitArrayInline arrow::internal::ValidateArrayData arrow::RecordBatch::ValidateFull...

rnp:fuzz_dump: Global-buffer-overflow in armor_parse_header

Project: https://github.com/rnpgp/rnp.git Detailed Report: https://oss-fuzz.com/testcase?key=5787309660962816 Project: rnp Fuzzing Engine: libFuzzer Fuzz Target: fuzzdump Job Type: libfuzzerasanrnp Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x7fcc9747e7a5 Crash...

binutils:fuzz_disassemble: Global-buffer-overflow in print_insn_arc

Detailed Report: https://oss-fuzz.com/testcase?key=6258025384640512 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisassemble Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x000001427320 Crash State: printinsnarc...

OSV-2020-685 Global-buffer-overflow in backup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18464 Crash type: Global-buffer-overflow READ 1 Crash state: backup peek lexconfig...

OSV-2020-633 Global-buffer-overflow in ne_find_element

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15056 Crash type: Global-buffer-overflow READ 8 Crash state: nefindelement neparse nestegginit...

OSV-2020-632 Global-buffer-overflow in parse_http_request

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14582 Crash type: Global-buffer-overflow READ 1 Crash state: parsehttprequest fuzzparsehttprequest...

OSV-2020-570 Global-buffer-overflow in decode_tlv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13542 Crash type: Global-buffer-overflow READ 4 Crash state: decodetlv dissectnoe calldissectorwork...

OSV-2020-518 Global-buffer-overflow in perfetto::trace_processor::ParseSystraceTracePoint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13481 Crash type: Global-buffer-overflow READ 1 Crash state: perfetto::traceprocessor::ParseSystraceTracePoint perfetto::traceprocessor::ProtoTraceParser::ParsePrint perfetto::traceprocessor::ProtoTraceParser::ParseFtracePacke...

OSV-2020-504 Global-buffer-overflow in lwan_parse_rfc_time

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14297 Crash type: Global-buffer-overflow READ 4 Crash state: lwanparserfctime parseifmodifiedsince fuzzparsehttprequest...

OSV-2020-462 Global-buffer-overflow in strsep_char

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14509 Crash type: Global-buffer-overflow READ Crash state: strsepchar parseproxyprotocolv1 parsehttprequest...

OSV-2020-431 Global-buffer-overflow in parse_headers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14511 Crash type: Global-buffer-overflow READ 2 Crash state: parseheaders parsehttprequest fuzzparsehttprequest...

OSV-2020-406 Global-buffer-overflow in lwan_strbuf_append_str

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18448 Crash type: Global-buffer-overflow READ Crash state: lwanstrbufappendstr parsesection parsesectionshorthand...

OSV-2020-337 Global-buffer-overflow in lex_multiline_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18626 Crash type: Global-buffer-overflow READ 1 Crash state: lexmultilinestring lexnext parsekeyvalue...

OSV-2020-279 Global-buffer-overflow in lex_multiline_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18562 Crash type: Global-buffer-overflow READ 3 Crash state: lexmultilinestring lexnext parsekeyvalue...

imagemagick:ping_dng_fuzzer: Global-buffer-overflow in LibRaw::parseCanonMakernotes

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5655361509130240 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingdngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Cra...

imagemagick:encoder_dng_fuzzer: Global-buffer-overflow in LibRaw::parseSigmaMakernote

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5693021307011072 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderdngfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Global-buffer-overflow READ 4...

OSV-2020-256 Global-buffer-overflow in dissect_wassp_sub_tlv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20004 Crash type: Global-buffer-overflow READ 8 Crash state: dissectwasspsubtlv dissectwasspsubtlv dissectwassptlv...