OSV-2020-1850 Heap-buffer-overflow in fmt::v6::basic_string_view<char>::basic_string_view

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21763 Crash type: Heap-buffer-overflow READ 2 Crash state: fmt::v6::basicstringview::basicstringview fmt::v6::basicformatargfmt::v6::basicformatcontextstd::1::backinsertit...

OSV-2020-1848 Heap-buffer-overflow in sc_oberthur_parse_publicinfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25943 Crash type: Heap-buffer-overflow READ 1 Crash state: scoberthurparsepublicinfo scpkcs15emuoberthurinit scpkcs15emuoberthurinitex...

OSV-2020-1847 Heap-buffer-overflow in WelsDec::NeedErrorCon

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25921 Crash type: Heap-buffer-overflow READ 1 Crash state: WelsDec::NeedErrorCon WelsDec::CheckAndFinishLastPic WelsDecodeBs...

OSV-2020-1845 Stack-buffer-overflow in void put_epel_hv_fallback<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25937 Crash type: Stack-buffer-overflow READ 2 Crash state: void putepelhvfallback accelerationfunctions::puthevcepelv void mcchroma...

OSV-2020-1844 Heap-buffer-overflow in hextoint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25935 Crash type: Heap-buffer-overflow READ 1 Crash state: hextoint getnamefromEFDatiPersonali itacnsadddatafiles...

OSV-2020-1843 Heap-buffer-overflow in SendUserAuthPkOk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25926 Crash type: Heap-buffer-overflow READ Crash state: SendUserAuthPkOk DoUserAuthRequestPublicKey DoUserAuthRequest...

openh264:decoder_fuzzer: Heap-buffer-overflow in WelsDec::UpdateP16x16MotionInfo

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=5195881580855296 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzerasanopenh264 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

arrow:parquet-arrow-fuzz: Global-buffer-overflow in WriteRingBuffer

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5737307070791680 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Global-buffer-overflow WRITE Crash Address: 0x000002cac164 Cras...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in sc_oberthur_parse_publicinfo

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5146664376205312 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

openh264:decoder_fuzzer: Crash in WelsCommon::WelsFree

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=6195267555295232 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzermsanopenh264 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f981c8f0020 Crash...

imagemagick:encoder_inline_fuzzer: Heap-buffer-overflow in Fax3Decode2D

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5127059796656128 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderinlinefuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 4...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in parquet::arrow::SchemaManifest::Make

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=4747568180101120 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x602000000b80 Crash...

openh264:decoder_fuzzer: Heap-buffer-overflow in WelsDec::DoErrorConSliceCopy

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=6331306349428736 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzerasani386openh264 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

OSV-2020-1841 UNKNOWN READ in avifRWDataSet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25911 Crash type: UNKNOWN READ Crash state: avifRWDataSet avifParseItemDataBox avifParseMetaBox...

OSV-2020-1840 Heap-use-after-free in avifFileTypeIsCompatible

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25910 Crash type: Heap-use-after-free READ 4 Crash state: avifFileTypeIsCompatible avifDecoderParse avifdecodefuzzer.cc...

OSV-2020-1839 UNKNOWN READ in flb_sds_cat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25904 Crash type: UNKNOWN READ Crash state: flbsdscat flbmsgpackgelfkey flbmsgpackgelfflatten...

OSV-2020-1836 Heap-buffer-overflow in hextoint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25885 Crash type: Heap-buffer-overflow READ 7 Crash state: hextoint getnamefromEFDatiPersonali itacnsadddatafiles...

OSV-2020-1835 Stack-buffer-overflow in fmt::v7::detail::buffer<char>::push_back

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25884 Crash type: Stack-buffer-overflow READ 1 Crash state: fmt::v7::detail::buffer::pushback std::1::backinsertiterator ::operator= fmt::v7::detail::bufferappender std::1::copyconstexprchar const, f...

OSV-2020-1834 Stack-buffer-overflow in onigenc_unicode_get_case_fold_codes_by_str

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25893 Crash type: Stack-buffer-overflow WRITE 4 Crash state: onigencunicodegetcasefoldcodesbystr utf16begetcasefoldcodesbystr unravelcasefoldstring...

wolfssl:fuzzer-wolfssh-server: Heap-buffer-overflow in SendUserAuthPkOk

Detailed Report: https://oss-fuzz.com/testcase?key=4871081842966528 Project: wolfssl Fuzzing Engine: afl Fuzz Target: fuzzer-wolfssh-server Job Type: aflasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x61100000013f Crash State: SendUserAuthPkOk...