OSV-2021-1314 Use-of-uninitialized-value in LoadBinarySchema

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38817 Crash type: Use-of-uninitialized-value Crash state: LoadBinarySchema dotest flatbuffersmonsterfuzzer.cc...

OSV-2021-1312 Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38808 Crash type: Use-of-uninitialized-value Crash state: std::1::basicostream & std::1::putcha printjson fuzzdump.cpp...

OSV-2021-1311 Null-dereference READ in unzOpenCurrentFile3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38873 Crash type: Null-dereference READ Crash state: unzOpenCurrentFile3 unzOpenCurrentFile Assimp::ZipFileInfo::Extract...

OSV-2021-1310 Heap-use-after-free in hb_resolve_overflows

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38878 Crash type: Heap-use-after-free READ 4 Crash state: hbresolveoverflows repack hbsubsetorfail...

OSV-2021-1300 UNKNOWN READ in get_body

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38750 Crash type: UNKNOWN READ Crash state: getbody parsesdp fuzzparsemsg.c...

OSV-2021-1287 Use-of-uninitialized-value in piex::image_type_recognition::ContainsNikonSignatures

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38799 Crash type: Use-of-uninitialized-value Crash state: piex::imagetyperecognition::ContainsNikonSignatures piex::imagetyperecognition::NefTypeChecker::IsMyType piex::imagetyperecognition::RecognizeRawImageTypeLite...

OSV-2021-1269 Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38777 Crash type: Use-of-uninitialized-value Crash state: std::1::basicostream & std::1::putcha S2LaxPolylineShape::Init S2LaxPolylineShape::S2LaxPolylineShape...

OSV-2021-1266 UNKNOWN WRITE in void AK::BumpAllocator<true, 2097152ul>::for_each_chunk<AK::UniformBumpAllocator

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38701 Crash type: UNKNOWN WRITE Crash state: void AK::BumpAllocator::foreachchunk::BumpAllocatedLinkedList regex::Matcher::execute...

OSV-2021-1262 Heap-buffer-overflow in H5O__chunk_deserialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38686 Crash type: Heap-buffer-overflow READ 1 Crash state: H5Ochunkdeserialize H5Ocachechkdeserialize H5Cprotect...

OSV-2021-1261 UNKNOWN READ in kh_get_ucl_hash_node

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38660 Crash type: UNKNOWN READ Crash state: khgetuclhashnode uclhashsearch uclinherithandler...

OSV-2021-1258 Bad-cast to SplashPattern from invalid vptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38669 Crash type: Bad-cast Crash state: Bad-cast to SplashPattern from invalid vptr SplashState::SplashState Splash::restoreState...

OSV-2021-1257 Stack-buffer-overflow in GRIBDataset::Open

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38610 Crash type: Stack-buffer-overflow READ 1 Crash state: GRIBDataset::Open GDALOpenEx GDALOpen...

OSV-2021-1250 Segv on unknown address in ft_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38635 Crash type: Segv on unknown address Crash state: ftfree ftmemfree cffcmapunicodedone...

OSV-2021-1249 Heap-buffer-overflow in int flatbuffers::ReadScalar<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38578 Crash type: Heap-buffer-overflow READ 4 Crash state: int flatbuffers::ReadScalar flatbuffers::Table::GetVTable flatbuffers::Table::GetOptionalFieldOffset...

OSV-2021-1246 Heap-buffer-overflow in FSE_writeNCount_generic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38553 Crash type: Heap-buffer-overflow WRITE 1 Crash state: FSEwriteNCountgeneric FSEwriteNCount ZSTDbuildCTable...

OSV-2021-1245 Heap-buffer-overflow in ucl_object_dtor_unref_single

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38550 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectdtorunrefsingle uclobjectdtorunref uclhashdestroy...

OSV-2021-1239 Heap-buffer-overflow in stbi__load_and_postprocess_8bit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38394 Crash type: Heap-buffer-overflow READ 2 Crash state: stbiloadandpostprocess8bit stbimage.h...

OSV-2021-1238 UNKNOWN READ in cdf_read_property_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38393 Crash type: UNKNOWN READ Crash state: cdfreadpropertyinfo cdfunpacksummaryinfo cdfchecksummaryinfo...

OSV-2021-1236 UNKNOWN READ in icu_70::UCharsTrie::branchNext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38390 Crash type: UNKNOWN READ Crash state: icu70::UCharsTrie::branchNext icu70::UCharsTrie::firstForCodePoint icu70::CollationIterator::nextCE32FromContraction...

OSV-2021-1235 Heap-buffer-overflow in ih264d_fill_bs1_16x16mb_pslice

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38387 Crash type: Heap-buffer-overflow READ 4 Crash state: ih264dfillbs116x16mbpslice ih264dcomputebsnonmbaffthread ih264drecondeblkslice...