OSV-2020-1759 Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25652 Crash type: Index-out-of-bounds Crash state: LibRaw::ahdinterpolaterandbinrgbandconverttocielab LibRaw::ahdinterpolaterandbandconverttocielab LibRaw::ahdinterpolate...

OSV-2020-1752 Heap-buffer-overflow in void mc_chroma<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25620 Crash type: Heap-buffer-overflow READ 2 Crash state: void mcchroma generateinterpredictionsamples decodepredictionunit...

OSV-2020-1748 Use-of-uninitialized-value in transform_4x4_luma_add_8_fallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25619 Crash type: Use-of-uninitialized-value Crash state: transform4x4lumaadd8fallback void accelerationfunctions::transform4x4dstadd void transformcoefficients...

OSV-2020-1742 Heap-use-after-free in grk::SOTMarker::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25602 Crash type: Heap-use-after-free READ 2 Crash state: grk::SOTMarker::read grk::j2kreadsot grk::CodeStream::processmarker...

OSV-2020-1741 Heap-use-after-free in zend_assign_to_variable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25601 Crash type: Heap-use-after-free READ 1 Crash state: zendassigntovariable zendstdwriteproperty ZENDASSIGNOBJSPECCVCONSTOPDATAVARHANDLER...

OSV-2020-1739 Index-out-of-bounds in tsk_img_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25580 Crash type: Index-out-of-bounds Crash state: tskimgread tskvsreadblock macloadtable...

monero:cold-transaction_fuzz_tests: Heap-buffer-overflow in unpack_vartime

Project: https://github.com/monero-project/monero.git Detailed Report: https://oss-fuzz.com/testcase?key=5164790941745152 Project: monero Fuzzing Engine: libFuzzer Fuzz Target: cold-transactionfuzztests Job Type: libfuzzerasanmonero Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in transform_4x4_luma_add_8_fallback

Detailed Report: https://oss-fuzz.com/testcase?key=5691391462866944 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: transform4x4lumaadd8fallback...

astc-encoder:astc_encode_decode_ise_fuzzer: Index-out-of-bounds in encode_ise

Project: https://github.com/ARM-software/astc-encoder.git Detailed Report: https://oss-fuzz.com/testcase?key=6292768555794432 Project: astc-encoder Fuzzing Engine: libFuzzer Fuzz Target: astcencodedecodeisefuzzer Job Type: libfuzzerubsanastc-encoder Platform Id: linux Crash Type:...

OSV-2020-1735 Heap-use-after-free in zend_gc_delref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25526 Crash type: Heap-use-after-free READ 4 Crash state: zendgcdelref izvalptrdtor zvalptrdtor...

OSV-2020-1733 Heap-buffer-overflow in le_to_u32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25533 Crash type: Heap-buffer-overflow READ 4 Crash state: letou32 letoi32 bcfdectypedint1safe...

OSV-2020-1730 Bad-cast to RDKit::Atom

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25547 Crash type: Bad-cast Crash state: Bad-cast to RDKit::Atom...

OSV-2020-1729 Use-of-uninitialized-value in ndpi_check_dga_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25545 Crash type: Use-of-uninitialized-value Crash state: ndpicheckdganame checkcontenttypeandchangeprotocol ndpicheckhttptcp...

OSV-2020-1727 Heap-buffer-overflow in mbedtls_nist_kw_wrap

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25529 Crash type: Heap-buffer-overflow WRITE 16 Crash state: mbedtlsnistkwwrap mbedtlscipherauthencrypt cryptofuzz::module::mbedTLSdetail::encryptAEAD...

OSV-2020-1726 Heap-use-after-free in xmlXPathNodeSetAdd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25536 Crash type: Heap-use-after-free READ 4 Crash state: xmlXPathNodeSetAdd xmlXPathGetElementsByIds xmlXPathIdFunction...

gdal:gtiff_fuzzer: Heap-buffer-overflow in Fax3Decode2D

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5139548596862976 Project: gdal Fuzzing Engine: honggfuzz Fuzz Target: gtifffuzzer Job Type: honggfuzzasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x615000000c80 Cra...

libxml2:xml: Heap-use-after-free in xmlXPathNodeSetAdd

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=4766294854074368 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: xml Job Type: libfuzzerasanlibxml2 Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x60c00000124...

htslib:hts_open_fuzzer: Heap-buffer-overflow in le_to_u32

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=6318532219109376 Project: htslib Fuzzing Engine: afl Fuzz Target: htsopenfuzzer Job Type: aflasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x609000018801 Crash...

imagemagick:ping_mvg_fuzzer: Use-of-uninitialized-value in RenderMVGContent

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5700912264511488 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

envoy:h2_capture_fuzz_test: Heap-use-after-free in Envoy::Http::ResponseDecoderWrapper::decodeMetadata

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=6214466168160256 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: h2capturefuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...