6062 matches found
OSV-2020-596 UNKNOWN READ in ot::PriorityQueue::GetHead
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13388 Crash type: UNKNOWN READ Crash state: ot::PriorityQueue::GetHead ot::Ip6::Ip6::HandleSendQueue ot::TaskletScheduler::ProcessQueuedTasklets...
OSV-2020-598 UNKNOWN READ in ot::Message::GetPriority
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13380 Crash type: UNKNOWN READ Crash state: ot::Message::GetPriority ot::PriorityQueue::RemoveFromList ot::PriorityQueue::Dequeue...
OSV-2020-600 Use-of-uninitialized-value in dprintf_formatf
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16699 Crash type: Use-of-uninitialized-value Crash state: dprintfformatf curlmvsnprintf curlmsnprintf...
OSV-2020-604 UNKNOWN READ in Sass::Parser::parseCompoundSelector
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15904 Crash type: UNKNOWN READ Crash state: Sass::Parser::parseCompoundSelector Sass::Parser::parseComplexSelector Sass::Parser::parseSelectorList...
OSV-2020-599 Index-out-of-bounds in prepare_macpads
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14768 Crash type: Index-out-of-bounds Crash state: preparemacpads gcrymdsetkey gcrymacsetkey...
OSV-2020-593 Heap-buffer-overflow in UInt32_encodeBinary
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12889 Crash type: Heap-buffer-overflow READ 4 Crash state: UInt32encodeBinary DiagnosticInfoencodeBinary DiagnosticInfoencodeBinary...
OSV-2020-578 Heap-use-after-free in WelsDec::ResetRefPicReferences
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13450 Crash type: Heap-use-after-free READ 8 Crash state: WelsDec::ResetRefPicReferences WelsDec::DecreasePicBuff WelsRequestMem...
OSV-2020-587 UNKNOWN READ in Interpreter::evaluate
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15844 Crash type: UNKNOWN READ Crash state: Interpreter::evaluate jsonnetvmexecute jsonnetevaluatesnippetaux...
OSV-2020-589 UNKNOWN WRITE in perfetto::trace_processor::ProtoTraceParser::ParsePowerRails
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14018 Crash type: UNKNOWN WRITE Crash state: perfetto::traceprocessor::ProtoTraceParser::ParsePowerRails perfetto::traceprocessor::ProtoTraceParser::ParseTracePacket...
OSV-2020-568 Heap-use-after-free in proc_plaintext
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13730 Crash type: Heap-use-after-free READ 4 Crash state: procplaintext doprocpackets procsignaturepackets...
OSV-2020-562 UNKNOWN READ in local_add_lv
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18030 Crash type: UNKNOWN READ Crash state: localaddlv yyparse mrbparserparse...
OSV-2020-570 Global-buffer-overflow in decode_tlv
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13542 Crash type: Global-buffer-overflow READ 4 Crash state: decodetlv dissectnoe calldissectorwork...
OSV-2020-574 Negative-size-param in r_buf_read
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14832 Crash type: Negative-size-param Crash state: rbufread binpegetcertificate binpeinit...
OSV-2020-565 Use-of-uninitialized-value in OT::AxisValue::sanitize
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14850 Crash type: Use-of-uninitialized-value Crash state: OT::AxisValue::sanitize bool OT::OffsetTo, true::sanitiz bool OT::UnsizedArrayOfOT::OffsetToOT::AxisValue, OT::IntTypeunsigned short,...
OSV-2020-569 Null-dereference READ
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15388 Crash type: Null-dereference READ Crash state: NULL...
OSV-2020-573 UNKNOWN READ in (__has_construct<std::__1::allocator<unsigned
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14479 Crash type: UNKNOWN READ Crash state: hasconstruct::value, void::t std::1::vector ::vectoruns...
OSV-2020-564 Heap-buffer-overflow in ihevcd_parse_slice_data
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17031 Crash type: Heap-buffer-overflow WRITE 1 Crash state: ihevcdparseslicedata ihevcdnalunit ihevcddecode...
OSV-2020-552 Heap-buffer-overflow in varlink_enqueue_json
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14708 Crash type: Heap-buffer-overflow WRITE Crash state: varlinkenqueuejson varlinkerror varlinkerrorb...
OSV-2020-555 Heap-use-after-free in WelsDec::CWelsDecoder::SetOption
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18747 Crash type: Heap-use-after-free WRITE 1 Crash state: WelsDec::CWelsDecoder::SetOption decoderfuzzer.cpp WelsCommon::WelsFree...