OSV-2020-2140 Heap-double-free in flb_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27279 Crash type: Heap-double-free Crash state: flbfree flbhttpclientdestroy flbhttpclient...

OSV-2020-2138 Use-of-uninitialized-value in Mat_VarReadNextInfo5

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27258 Crash type: Use-of-uninitialized-value Crash state: MatVarReadNextInfo5 MatVarReadNextInfo MatGetDir...

OSV-2020-2136 UNKNOWN READ in flb_sds_cat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27234 Crash type: UNKNOWN READ Crash state: flbsdscat ratranslatetag flbratranslate...

OSV-2020-2134 UNKNOWN READ in wpabuf_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27269 Crash type: UNKNOWN READ Crash state: wpabuffree p2pdevicefree p2pflush...

OSV-2020-2133 Heap-buffer-overflow in tdefl_compress_lz_codes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27263 Crash type: Heap-buffer-overflow WRITE 8 Crash state: tdeflcompresslzcodes tdeflcompressblock tdeflflushblock...

OSV-2020-2132 Heap-buffer-overflow in flb_gzip_compress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27261 Crash type: Heap-buffer-overflow WRITE 1 Crash state: flbgzipcompress utilsfuzzer.c...

OSV-2020-2131 Stack-use-after-return in solidity::smtutil::CHCSmtLib2Interface::querySolver

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26997 Crash type: Stack-use-after-return READ 8 Crash state: solidity::smtutil::CHCSmtLib2Interface::querySolver solidity::smtutil::CHCSmtLib2Interface::query solidity::frontend::CHC::query...

OSV-2020-2130 Use-of-uninitialized-value in memory_test

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27020 Crash type: Use-of-uninitialized-value Crash state: memorytest fuzzersend SendBuffered...

OSV-2020-2128 Heap-use-after-free in pixChangeRefcount

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26967 Crash type: Heap-use-after-free READ 4 Crash state: pixChangeRefcount pixFree pixDestroy...

leptonica:adaptmap_fuzzer: Heap-use-after-free in pixChangeRefcount

Project: https://github.com/DanBloomberg/leptonica.git Detailed Report: https://oss-fuzz.com/testcase?key=4941737753313280 Project: leptonica Fuzzing Engine: libFuzzer Fuzz Target: adaptmapfuzzer Job Type: libfuzzerasanleptonica Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash...

imagemagick:ping_pwp_fuzzer: Stack-buffer-overflow in SetStringInfoDatum

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5632955822899200 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingpwpfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash...

libreoffice:fodtfuzzer: Container-overflow in std::__1::unique_ptr<SwXMLTableRow_Impl, std::__1::default_delete<SwXMLTableRow_

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5766728887566336 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: fodtfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Container-overflow READ 8 Crash...

OSV-2020-2124 UNKNOWN READ in jsoncharutils.h

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26859 Crash type: UNKNOWN READ Crash state: jsoncharutils.h...

OSV-2020-2122 Heap-buffer-overflow in void parquet::internal::DefRepLevelsToListInfo<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26829 Crash type: Heap-buffer-overflow WRITE 1 Crash state: void parquet::internal::DefRepLevelsToListInfo parquet::internal::DefRepLevelsToBitmap parquet::arrow::StructReader::BuildArray...

OSV-2020-2121 Use-of-uninitialized-value in WelsDec::BaseMC

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26861 Crash type: Use-of-uninitialized-value Crash state: WelsDec::BaseMC WelsDec::GetInterBPred WelsDec::WelsMbInterPrediction...

OSV-2020-2119 UNKNOWN READ in numberparsing.h

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26858 Crash type: UNKNOWN READ Crash state: numberparsing.h...

OSV-2020-2117 Heap-buffer-overflow in flb_msgpack_gelf_value_ext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26851 Crash type: Heap-buffer-overflow READ 1 Crash state: flbmsgpackgelfvalueext flbmsgpacktogelf flbmsgpackrawtogelf...

simdjson:fuzz_ondemand: Crash in jsoncharutils.h

Project: https://github.com/simdjson/simdjson.git https://github.com/lemire/simdjson.git Detailed Report: https://oss-fuzz.com/testcase?key=6259259773550592 Project: simdjson Fuzzing Engine: libFuzzer Fuzz Target: fuzzondemand Job Type: libfuzzerubsansimdjson Platform Id: linux Crash Type: UNKNOW...

OSV-2020-2115 Use-of-uninitialized-value in DeblockChromaLt42_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26758 Crash type: Use-of-uninitialized-value Crash state: DeblockChromaLt42c DeblockChromaLt4V2c WelsDec::FilteringEdgeChromaH...

skia:sksl2spirv: Segv on unknown address in std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::Expression

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=6198631948091392 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: sksl2spirv Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...