OSV-2020-2243 Heap-buffer-overflow in grk::BitIO::bytein

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28313 Crash type: Heap-buffer-overflow READ 1 Crash state: grk::BitIO::bytein grk::BitIO::read grk::BitIO::getnumpasses...

OSV-2020-2242 Heap-buffer-overflow in tinfl_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28285 Crash type: Heap-buffer-overflow READ 1 Crash state: tinfldecompress mzinflate flbgzipuncompress...

OSV-2020-2241 Heap-buffer-overflow in mk_string_copy_substr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28277 Crash type: Heap-buffer-overflow READ Crash state: mkstringcopysubstr mkrconfmetaadd mkrconfread...

OSV-2020-2240 Heap-buffer-overflow in process_chunked_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28265 Crash type: Heap-buffer-overflow READ 1 Crash state: processchunkeddata processdata fuzzprocessdata...

OSV-2020-2239 Heap-buffer-overflow in flb_http_do

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28256 Crash type: Heap-buffer-overflow WRITE 1 Crash state: flbhttpdo httpfuzzer.c...

OSV-2020-2238 Heap-buffer-overflow in dotnet_parse_tilde_2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28253 Crash type: Heap-buffer-overflow READ Crash state: dotnetparsetilde2 dotnetparsetilde dotnetparsecom...

OSV-2020-2233 Heap-buffer-overflow in flb_sds_cat_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28222 Crash type: Heap-buffer-overflow READ 1 Crash state: flbsdscatutf8 flbmsgpackgelfvalue flbmsgpacktogelf...

OSV-2020-2230 Heap-buffer-overflow in _zend_is_inconsistent

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28129 Crash type: Heap-buffer-overflow READ 4 Crash state: zendisinconsistent zendhashfind zendhashfindptr...

OSV-2020-2228 Heap-buffer-overflow in grk::t1_part1::T1Part1::decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28227 Crash type: Heap-buffer-overflow READ Crash state: grk::t1part1::T1Part1::decompress grk::DecompressBlockExec::open grk::T1DecompressScheduler::decompressBlock...

OSV-2020-2223 Heap-use-after-free in e1000e_write_packet_to_guest

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28194 Crash type: Heap-use-after-free READ 8 Crash state: e1000ewritepackettoguest e1000ereceiveiov e1000encreceiveiov...

OSV-2020-2220 Heap-buffer-overflow in mk_rconf_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28241 Crash type: Heap-buffer-overflow READ 1 Crash state: mkrconfread mkrconfopen flbparserconffile...

serenity:FuzzGIFLoader: Global-buffer-overflow in Gfx::decode_frame

Detailed Report: https://oss-fuzz.com/testcase?key=6281737226944512 Project: serenity Fuzzing Engine: afl Fuzz Target: FuzzGIFLoader Job Type: aflasanserenity Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000000784fb0 Crash State: Gfx::decodeframe...

serenity:FuzzPNGLoader: Heap-buffer-overflow in decode

Detailed Report: https://oss-fuzz.com/testcase?key=6265409137016832 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzPNGLoader Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x604000000100 Crash State: decode codes fixed...

OSV-2020-2216 Heap-buffer-overflow in ojph::local::ojph_decode_codeblock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28103 Crash type: Heap-buffer-overflow WRITE 4 Crash state: ojph::local::ojphdecodecodeblock grk::t1ht::T1HT::decompress grk::DecompressBlockExec::open...

serenity:FuzzPNGLoader: Heap-buffer-overflow in decode

Detailed Report: https://oss-fuzz.com/testcase?key=5636989654925312 Project: serenity Fuzzing Engine: afl Fuzz Target: FuzzPNGLoader Job Type: aflasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x606000000112 Crash State: decode dynamic puff Sanitizer: addre...

serenity:FuzzRegexPosixExtended: Heap-buffer-overflow in regex::Lexer::back

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5077400093982720 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzRegexPosixExtended Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

llvm:llvm-dwarfdump-fuzzer: Heap-buffer-overflow in llvm::StringMapImpl::LookupBucketFor

Detailed Report: https://oss-fuzz.com/testcase?key=5071836601384960 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x607000000148 Crash State:...

OSV-2020-2212 Heap-buffer-overflow in ih264d_fill_bs1_16x16mb_pslice

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28039 Crash type: Heap-buffer-overflow READ 8 Crash state: ih264dfillbs116x16mbpslice ih264dcomputebsnonmbaffthread ih264drecondeblkslice...

OSV-2020-2205 Heap-buffer-overflow in ojph::local::ojph_decode_codeblock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27924 Crash type: Heap-buffer-overflow WRITE 4 Crash state: ojph::local::ojphdecodecodeblock grk::t1ht::T1HT::decompress grk::DecompressBlockExec::open...

OSV-2020-2201 Heap-buffer-overflow in String::append

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27912 Crash type: Heap-buffer-overflow READ 3 Crash state: String::append appendidentifier Itemfuncgetuservar::print...