OSV-2018-54 UNKNOWN READ in BEInt<short, 2>::operator short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11305 Crash type: UNKNOWN READ Crash state: BEInt::operator short AAT::KerxSubTableFormat1::drivercontextt::transition void AAT::StateTableDriver::EntryDat...

OSV-2017-14 Use-of-uninitialized-value in Archive::ConvertFileHeader

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4614 Crash type: Use-of-uninitialized-value Crash state: Archive::ConvertFileHeader Archive::ReadHeader15 Archive::ReadHeader...

OSV-2018-50 Heap-use-after-free in UA_Session_deleteMembersCleanup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5577 Crash type: Heap-use-after-free WRITE 8 Crash state: UASessiondeleteMembersCleanup removeSessionCallback UAServerrunshutdown...

OSV-2021-69 Uncaught exception in fuzz_loader.pkg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29519 Crash type: Uncaught exception Crash state: fuzzloader.pkg fuzzloader.pkg fuzzloader.pkg...

OSV-2018-46 Heap-buffer-overflow in GDAL_LercNS::RLE::readCount

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9282 Crash type: Heap-buffer-overflow READ 2 Crash state: GDALLercNS::RLE::readCount GDALLercNS::RLE::decompress GDALLercNS::Lerc2::ReadMask...

OSV-2017-13 Heap-buffer-overflow in File::Write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4293 Crash type: Heap-buffer-overflow READ Crash state: File::Write ComprDataIO::UnpWrite CmdExtract::UnstoreFile...

OSV-2018-40 UNKNOWN READ in ftp_disconnect

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12173 Crash type: UNKNOWN READ Crash state: ftpdisconnect Curldisconnect ConnectionExists...

OSV-2017-10 Heap-use-after-free in UA_Subscription_answerPublishRequestsNoSubscription

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4097 Crash type: Heap-use-after-free READ 8 Crash state: UASubscriptionanswerPublishRequestsNoSubscription UAServerrunshutdown start...

OSV-2018-36 UNKNOWN READ in ebml_parse_chunk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7887 Crash type: UNKNOWN READ Crash state: ebmlparsechunk matroskatypefind gsttypefindfactorycallfunction...

OSV-2017-9 Use-of-uninitialized-value in QuickOpen::Read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4507 Crash type: Use-of-uninitialized-value Crash state: QuickOpen::Read Archive::Read RawRead::Read...

OSV-2018-31 Heap-buffer-overflow in emu_edge_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11389 Crash type: Heap-buffer-overflow READ 2 Crash state: emuedgec warpaffine dav1dreconbinter8bpc...

OSV-2018-29 Heap-buffer-overflow in r_bin_mdmp_get_mem_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10222 Crash type: Heap-buffer-overflow READ 8 Crash state: rbinmdmpgetmeminfo rbinmdmpgetsrwx sections...

OSV-2018-26 UNKNOWN READ in BEInt<unsigned char, 1>::operator unsigned char

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11351 Crash type: UNKNOWN READ Crash state: BEInt::operator unsigned char OT::DeviceRecord::serialize OT::hdmx::serialize...

OSV-2018-22 Heap-buffer-overflow in gvs_read_unaligned_le

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9807 Crash type: Heap-buffer-overflow READ 1 Crash state: gvsreadunalignedle gvstupleisnormal gvariantserialisedisnormal...

OSV-2018-24 Heap-buffer-overflow in pcf_get_encodings

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9608 Crash type: Heap-buffer-overflow READ 1 Crash state: pcfgetencodings pcfloadfont PCFFaceInit...

OSV-2017-8 Heap-buffer-overflow in setcharset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4161 Crash type: Heap-buffer-overflow READ 1 Crash state: setcharset loop loop...

OSV-2018-19 Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6796 Crash type: Use-of-uninitialized-value Crash state: rawspeed::RawImageData::checkMemIsInitialized rawspeed::RawDecoder::decodeRaw rawspeed::alignedMalloc...

OSV-2020-2300 Heap-buffer-overflow in H5MM_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29493 Crash type: Heap-buffer-overflow READ Crash state: H5MMstrdup H5Oattrshareddecode H5Omsgiteratereal...

OSV-2018-15 Heap-buffer-overflow in json_parse_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9922 Crash type: Heap-buffer-overflow READ 1 Crash state: jsonparsestring jsonparse jsonparsearray...

OSV-2018-17 Use-of-uninitialized-value in FT_Set_Transform

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8811 Crash type: Use-of-uninitialized-value Crash state: FTSetTransform SplashFTFont::makeGlyph SplashFont::getGlyph...