OSV-2021-459 Segv on unknown address in slice_segment_header::operator=

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31492 Crash type: Segv on unknown address Crash state: slicesegmentheader::operator= slicesegmentheader::read decodercontext::readsliceNAL...

OSV-2021-457 Heap-buffer-overflow in unescape_tag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31491 Crash type: Heap-buffer-overflow READ 1 Crash state: unescapetag ircparsemessagetags ircservereventtags...

OSV-2021-455 Heap-use-after-free in zend_hash_iterator_pos_ex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31423 Crash type: Heap-use-after-free READ 1 Crash state: zendhashiteratorposex ZENDFEFETCHRWSPECVARHANDLER fuzzerexecuteex...

OSV-2021-454 Heap-buffer-overflow in irc_parse_message_tags

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31443 Crash type: Heap-buffer-overflow READ 8 Crash state: ircparsemessagetags ircservereventtags signalemitreal...

OSV-2021-453 UNKNOWN WRITE in std::__1::pair<unsigned int, void*> uWS::HttpParser::fenceAndConsumePostPadded<0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31457 Crash type: UNKNOWN WRITE Crash state: std::1::pair uWS::HttpParser::fenceAndConsumePostPadded0 uWS::HttpParser::consumePostPadded std::1::function::funcLLVMFuzzerTestOneInput::$0, std::1::allocatorLL...

OSV-2021-450 Global-buffer-overflow in coap_pdu_parse_opt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31479 Crash type: Global-buffer-overflow WRITE 1 Crash state: coappduparseopt coappduparse...

OSV-2021-448 Use-of-uninitialized-value in std::__1::__packaged_task_func<std::__1::__bind<grk::mct::decompress_irrev

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31365 Crash type: Use-of-uninitialized-value Crash state: std::1::packagedtaskfuncstd::1::bindgrk::mct::decompressirrev std::1::packagedtaskint ThreadPool::ThreadPool...

OSV-2021-447 Heap-buffer-overflow in luaG_runerror

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31331 Crash type: Heap-buffer-overflow READ 8 Crash state: luaGrunerror luaDpretailcall luaVexecute...

OSV-2020-2309 UNKNOWN WRITE in flb_utils_proxy_url_split

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31306 Crash type: UNKNOWN WRITE Crash state: flbutilsproxyurlsplit utilsfuzzer.c...

OSV-2021-446 Global-buffer-overflow in AK::StringView::operator==

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31351 Crash type: Global-buffer-overflow READ 1 Crash state: AK::StringView::operator== Markdown::CodeBlock::parse bool Markdown::helper...

OSV-2021-441 UNKNOWN WRITE in sudoers_lookup_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31250 Crash type: UNKNOWN WRITE Crash state: sudoerslookupcheck sudoerslookup fuzzsudoers.c...

OSV-2021-440 Heap-buffer-overflow in H5MM_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31265 Crash type: Heap-buffer-overflow WRITE 4 Crash state: H5MMmemcpy H5MMmalloc H5Cloadentry...

OSV-2021-437 Heap-use-after-free in ofats::any_detail::handler_traits<void>::handler_base<ofats::any_detail::handler

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31209 Crash type: Heap-use-after-free WRITE 8 Crash state: ofats::anydetail::handlertraits::handlerbaseofats::anydetail::handler uWS::Loop::wakeupCb usinternaldispatchreadypoll...

OSV-2021-435 Stack-buffer-overflow in ot::Cli::Interpreter::OutputFormatV

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31232 Crash type: Stack-buffer-overflow READ Crash state: ot::Cli::Interpreter::OutputFormatV ot::Cli::Interpreter::OutputLine ot::Cli::Interpreter::HandleDnsServiceResponse...

OSV-2021-430 Stack-buffer-overflow in tvb_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31198 Crash type: Stack-buffer-overflow WRITE Crash state: tvbmemcpy compositememcpy tvbgetnstringz...

OSV-2021-427 Heap-buffer-overflow in LibRaw::kodak_c330_load_raw

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31181 Crash type: Heap-buffer-overflow READ 1 Crash state: LibRaw::kodakc330loadraw LibRaw::unpack librawfuzzer.cc...

OSV-2021-421 Heap-use-after-free in __cil_verify_classperms

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31124 Crash type: Heap-use-after-free READ 8 Crash state: cilverifyclassperms verifymappermclassperms hashtabmap...

OSV-2021-417 Heap-use-after-free in __cil_verify_classperms

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31065 Crash type: Heap-use-after-free READ 8 Crash state: cilverifyclassperms cilverifyclasspermission cilpreverifyhelper...

OSV-2021-414 Heap-use-after-free in us_socket_close

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31047 Crash type: Heap-use-after-free READ 8 Crash state: ussocketclose wrapepollwait uslooprun...

OSV-2021-413 UNKNOWN WRITE in sudo_user_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31042 Crash type: UNKNOWN WRITE Crash state: sudouserfree sudoerspolicyclose fuzzpolicy.c...