OSV-2021-1234 Heap-buffer-overflow in ndr_push_array_uint8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38480 Crash type: Heap-buffer-overflow READ 2 Crash state: ndrpusharrayuint8 ndrpushnbtrdatadata ndrpushnbtrdata...

OSV-2021-1230 UNKNOWN READ in helper_ret_stb_mmu_x86_64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38438 Crash type: UNKNOWN READ Crash state: helperretstbmmux8664 resumeallvcpusx8664 vmstartx8664...

OSV-2021-1227 Heap-buffer-overflow in blosclz_compress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38313 Crash type: Heap-buffer-overflow WRITE 1 Crash state: blosclzcompress bloscc dojob...

OSV-2021-1222 Invalid-free in swift_unexpectedError

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38323 Crash type: Invalid-free Crash state: swiftunexpectedError SwiftProtobuf.TextFormatEncodingVisitor.visitRepeatedMessageFieldA where A: Swi merged protocol witness for SwiftProtobuf.Visitor.visitRepeatedEnumFieldA where...

OSV-2021-1221 Heap-buffer-overflow in parse_via_param

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38307 Crash type: Heap-buffer-overflow READ 1 Crash state: parseviaparam parsevia gethdrfield...

OSV-2021-1218 Heap-buffer-overflow in value_move

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38298 Crash type: Heap-buffer-overflow READ 8 Crash state: valuemove mrbarysplice mrbaryaset...

OSV-2021-1217 Heap-use-after-free in ZEND_FETCH_OBJ_R_SPEC_CV_CONST_INLINE_HANDLER

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38297 Crash type: Heap-use-after-free READ 8 Crash state: ZENDFETCHOBJRSPECCVCONSTINLINEHANDLER ZENDFETCHOBJRSPECCVCONSTHANDLER fuzzerexecuteex...

OSV-2021-1216 Global-buffer-overflow in fr_is_base16_nstd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38283 Crash type: Global-buffer-overflow READ 1 Crash state: frisbase16nstd frbase16decodenstd frvalueboxfromstr...

OSV-2021-1215 Invalid-free in swift_unexpectedError

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38264 Crash type: Invalid-free Crash state: swiftunexpectedError function signature specialization Arg function signature specialization Arg...

OSV-2021-1213 UNKNOWN WRITE in mrb_vm_exec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38251 Crash type: UNKNOWN WRITE Crash state: mrbvmexec mrbvmrun mrbtoprun...

OSV-2021-1211 Heap-buffer-overflow in MqttDecode_Publish

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38237 Crash type: Heap-buffer-overflow WRITE 8 Crash state: MqttDecodePublish MqttClientDecodePacket MqttClientHandlePacket...

OSV-2021-1206 Stack-use-after-scope in uprv_stricmp_70

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38156 Crash type: Stack-use-after-scope READ 1 Crash state: uprvstricmp70 ulocimpgetLanguage70 canonicalize...

OSV-2021-1204 Heap-buffer-overflow in MqttClient_DecodePacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38146 Crash type: Heap-buffer-overflow WRITE 1 Crash state: MqttClientDecodePacket MqttClientHandlePacket MqttClientWaitType...

OSV-2021-1201 Heap-buffer-overflow in q_memchr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38065 Crash type: Heap-buffer-overflow READ 1 Crash state: qmemchr parsequotedparam parseparambody...

OSV-2021-1199 Heap-use-after-free in i_zval_ptr_dtor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38001 Crash type: Heap-use-after-free READ 1 Crash state: izvalptrdtor concatfunction zendbinaryop...

OSV-2021-1198 Heap-buffer-overflow in parse_param_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38052 Crash type: Heap-buffer-overflow READ 1 Crash state: parseparamname parseparam2 parseparams2...

OSV-2021-1197 Heap-buffer-overflow in H5O__linfo_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38041 Crash type: Heap-buffer-overflow READ 1 Crash state: H5Olinfodecode H5Omsgreadoh H5Omsgread...

OSV-2021-1194 Heap-use-after-free in zend_string_release

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38014 Crash type: Heap-use-after-free READ 4 Crash state: zendstringrelease zendclosurefreestorage zendobjectsstoredel...

OSV-2021-1192 Segv on unknown address in arrow::DefaultBackend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37927 Crash type: Segv on unknown address Crash state: arrow::DefaultBackend arrow::PoolBuffer::MakeUnique arrow::AllocateBuffer...

OSV-2021-1189 Segv on unknown address in arrow::DefaultBackend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37915 Crash type: Segv on unknown address Crash state: arrow::DefaultBackend arrow::defaultmemorypool arrow::ipc::IpcReadOptions::Defaults...