OSV-2021-585 Heap-buffer-overflow in ebitmap_match_any

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32675 Crash type: Heap-buffer-overflow READ 8 Crash state: ebitmapmatchany avtabmap cilcheckneverallow...

OSV-2021-581 UNKNOWN READ in unsigned short flatbuffers::ReadScalar<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32647 Crash type: UNKNOWN READ Crash state: unsigned short flatbuffers::ReadScalar flatbuffers::Table::GetOptionalFieldOffset flatbuffers::Table::CheckField...

OSV-2021-577 Segv on unknown address in dwg_free_MTEXTATTRIBUTEOBJECTCONTEXTDATA_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32604 Crash type: Segv on unknown address Crash state: dwgfreeMTEXTATTRIBUTEOBJECTCONTEXTDATAprivate dwgfreeMTEXTATTRIBUTEOBJECTCONTEXTDATA dwgfreevariablenoclass...

OSV-2021-573 Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32555 Crash type: Heap-buffer-overflow READ 2 Crash state: BEInt::operator unsigned short OT::IntType::operator unsigned int OT::RangeRecord::intersects...

OSV-2021-570 Uncaught exception in com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeObject

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32554 Crash type: Uncaught exception Crash state: com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeObject java.base/java.lang.invoke.MethodHandleNatives.refKindIsField...

OSV-2021-564 Uncaught exception in com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32514 Crash type: Uncaught exception Crash state: com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeArray java.base/java.lang.Module.isStaticallyExportedOrOpen...

OSV-2021-563 Heap-use-after-free in AK::NonnullOwnPtr<JS::IndexedPropertyStorage>::operator->

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32459 Crash type: Heap-use-after-free READ 8 Crash state: AK::NonnullOwnPtr::operator- JS::IndexedProperties::arraylikesize JS::IndexedProperties::append...

OSV-2021-562 Segv on unknown address in GC_generic_malloc_many

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32453 Crash type: Segv on unknown address Crash state: GCgenericmallocmany GCmallocatomic Strnewsize...

OSV-2021-561 UNKNOWN WRITE in wuffs_base__pixel_swizzler__bgr__bgra_premul__src

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32451 Crash type: UNKNOWN WRITE Crash state: wuffsbasepixelswizzlerbgrbgrapremulsrc wuffsbasepixelswizzlerswizzleinterleavedfromslice fuzz...

OSV-2021-560 Uncaught exception in java.base/java.lang.ClassLoader.defineClass0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32439 Crash type: Uncaught exception Crash state: java.base/java.lang.ClassLoader.defineClass0 java.base/java.lang.System$2.defineClass java.base/java.lang.invoke.MethodHandles$Lookup$ClassDefiner.defineClass...

OSV-2021-559 Uncaught exception in java.base/java.nio.CharBuffer.wrap

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32405 Crash type: Uncaught exception Crash state: java.base/java.nio.CharBuffer.wrap java.base/sun.nio.cs.StreamDecoder.implRead java.base/sun.nio.cs.StreamDecoder.read...

OSV-2021-558 Uncaught exception in java.base/java.nio.Buffer.<init>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32399 Crash type: Uncaught exception Crash state: java.base/java.nio.Buffer. java.base/java.nio.CharBuffer. java.base/java.nio.HeapCharBuffer...

OSV-2021-557 Heap-use-after-free in copy_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32375 Crash type: Heap-use-after-free READ 1 Crash state: copystring douncompressblock processblock...

OSV-2021-555 Uncaught exception in java.base/java.util.concurrent.ConcurrentHashMap.putVal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32395 Crash type: Uncaught exception Crash state: java.base/java.util.concurrent.ConcurrentHashMap.putVal java.base/java.util.concurrent.ConcurrentHashMap.put com.fasterxml.jackson.core.util.InternCache.intern...

OSV-2021-553 Heap-buffer-overflow in read_color_line

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32421 Crash type: Heap-buffer-overflow READ 1 Crash state: readcolorline readpaint ttfacegetpaint...

OSV-2021-552 Uncaught exception in java.base/java.lang.ClassLoader.defineClass0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32407 Crash type: Uncaught exception Crash state: java.base/java.lang.ClassLoader.defineClass0 java.base/java.lang.System$2.defineClass java.base/java.lang.invoke.MethodHandles$Lookup$ClassDefiner.defineClass...

OSV-2021-543 Heap-use-after-free in dxf_objects_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32275 Crash type: Heap-use-after-free READ 2 Crash state: dxfobjectsread dwgreaddxf llvmfuzz.c...

OSV-2021-542 Heap-buffer-overflow in luaG_getfuncline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32279 Crash type: Heap-buffer-overflow READ 1 Crash state: luaGgetfuncline luaGrunerror luaDgrowstack...

OSV-2021-540 Heap-buffer-overflow in g_array_append_vals

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32249 Crash type: Heap-buffer-overflow READ Crash state: garrayappendvals gbytearrayappend fuefifirmwarevolumewrite...

OSV-2021-536 Heap-use-after-free in cil_reset_classpermission

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32177 Crash type: Heap-use-after-free READ 8 Crash state: cilresetclasspermission cilresetclasspermsset cilresetclasspermslist...