OSV-2020-1945 UNKNOWN READ in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20038 Crash type: UNKNOWN READ Crash state: helpeructracecode...

OSV-2020-1928 UNKNOWN READ in net_field_length_size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19830 Crash type: UNKNOWN READ Crash state: netfieldlengthsize netfieldlengthllsafe readokex...

OSV-2020-1923 Heap-buffer-overflow in do_print_ex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13914 Crash type: Heap-buffer-overflow READ 1 Crash state: doprintex asn1itemprintctx ASN1itemprint...

OSV-2020-1899 Heap-buffer-overflow in DeblockChromaLt42_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26068 Crash type: Heap-buffer-overflow READ 1 Crash state: DeblockChromaLt42c DeblockChromaLt4H2c WelsDec::FilteringEdgeChromaHV...

OSV-2020-1898 Heap-buffer-overflow in WelsDec::UpdateP16x16RefIdx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26078 Crash type: Heap-buffer-overflow WRITE 2 Crash state: WelsDec::UpdateP16x16RefIdx WelsDec::PredBDirectTemporal WelsDec::ParseInterBInfo...

OSV-2020-1897 Heap-buffer-overflow in stbi__tga_load

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22651 Crash type: Heap-buffer-overflow READ 3 Crash state: stbitgaload stbiloadmain stbiloadandpostprocess8bit...

glib:fuzz_uri_escape: Crash in g_string_insert_len

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed Report: https://oss-fuzz.com/testcase?key=6320624772055040 Project: glib Fuzzing Engine: libFuzzer Fuzz Target: fuzzuriescape Job Type: libfuzzermsanglib Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x728000010000 Crash State...

suricata:fuzz_siginit: Use-of-uninitialized-value in DetectDatarepParse

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=5762961148477440 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsiginit Job Type: libfuzzermsansuricata Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_MOBICLIP_fuzzer: Heap-buffer-overflow in predict_motion

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5758146355920896 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDMOBICLIPfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

openh264:decoder_fuzzer: Heap-buffer-overflow in DeblockChromaLt42_c

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=5460887169925120 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzerasani386openh264 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

arrow:parquet-arrow-fuzz: Negative-size-param in CopyUncompressedBlockToOutput

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=4914963406389248 Project: arrow Fuzzing Engine: honggfuzz Fuzz Target: parquet-arrow-fuzz Job Type: honggfuzzasanarrow Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in parquet::SerializedPageReader::DecompressIfNeeded

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5086499571499008 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

OSV-2020-1887 Heap-buffer-overflow in zmq::tcp_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26042 Crash type: Heap-buffer-overflow WRITE Crash state: zmq::tcpread zmq::streamenginebaset::read zmq::streamenginebaset::ineventinternal...

OSV-2020-1886 Use-of-uninitialized-value in gs_scan_token

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21622 Crash type: Use-of-uninitialized-value Crash state: gsscantoken interp gscallinterp...

OSV-2020-1885 Heap-use-after-free in xmlStaticCopyNode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26022 Crash type: Heap-use-after-free READ 4 Crash state: xmlStaticCopyNode xmlCopyNode xmlXIncludeLoadTxt...

OSV-2020-1883 Use-of-uninitialized-value in s_exD_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22225 Crash type: Use-of-uninitialized-value Crash state: sexDprocess sreadbuf sprocessreadbuf...

OSV-2020-1884 Segv on unknown address in process_ndpi_collected_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26015 Crash type: Segv on unknown address Crash state: processndpicollectedinfo packetprocessing ndpiworkflowprocesspacket...

OSV-2020-1882 Use-of-uninitialized-value in gx_dc_ht_colored_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21617 Crash type: Use-of-uninitialized-value Crash state: gxdchtcoloredread clistplaybackband clistplaybackfilebands...

OSV-2020-1880 Use-of-uninitialized-value in c_pdf14trans_clist_read_update

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21640 Crash type: Use-of-uninitialized-value Crash state: cpdf14transclistreadupdate applycreatecompositor executecompositorqueue...

OSV-2020-1878 Use-of-uninitialized-value in s_A85D_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21616 Crash type: Use-of-uninitialized-value Crash state: sA85Dprocess gsscantoken interp...