OSV-2021-1153 Heap-buffer-overflow in hb_array_t<OT::IntType<unsigned int, 4u> const> hb_array_t<OT::IntType<unsigned

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37348 Crash type: Heap-buffer-overflow READ 4 Crash state: hbarrayt const hbarrayt ::copy hbheadt , decltype...

OSV-2021-1152 UNKNOWN READ in exif_mnote_data_apple_load

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37334 Crash type: UNKNOWN READ Crash state: exifmnotedataappleload exifmnotedataload interpretmakernote...

OSV-2021-1137 Uncaught exception in com.alibaba.fastjson.parser.DefaultJSONParser.parseObject

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37237 Crash type: Uncaught exception Crash state: com.alibaba.fastjson.parser.DefaultJSONParser.parseObject java.base/java.util.HashMap.tableSizeFor java.base/java.util.HashMap...

OSV-2021-1084 Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36738 Crash type: Heap-buffer-overflow READ 4 Crash state: llvm::DataLayout::getIndexedOffsetInType InterpreterStackFrame::ResolveConstantValue InterpreterStackFrame::ResolveConstant...

OSV-2021-1068 Heap-buffer-overflow in ucl_object_free_internal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36572 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectfreeinternal uclobjectdtorunrefsingle uclobjectdtorunref...

OSV-2021-1027 Index-out-of-bounds in sd_read_byte

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36240 Crash type: Index-out-of-bounds Crash state: sdreadbyte sdbusreaddata sdhcireadblockfromcard...

OSV-2021-972 UNKNOWN READ in void mc_chroma<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36056 Crash type: UNKNOWN READ Crash state: void mcchroma generateinterpredictionsamples decodepredictionunit...

OSV-2021-962 Heap-use-after-free in Segment::write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36050 Crash type: Heap-use-after-free READ 1 Crash state: Segment::write Doublewrite::writepages Doublewrite::flushtodisk...

OSV-2021-930 Heap-use-after-free in dhcp6_no_relay

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35860 Crash type: Heap-use-after-free WRITE 1 Crash state: dhcp6norelay dhcp6mayberelay dhcp6reply...

OSV-2021-928 UNKNOWN WRITE in g_array_append_vals

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35890 Crash type: UNKNOWN WRITE Crash state: garrayappendvals gbytearrayappend fubytearrayappendbytes...

OSV-2021-926 Heap-use-after-free in zend_gc_addref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35876 Crash type: Heap-use-after-free READ 4 Crash state: zendgcaddref ZENDASSIGNOPSPECVARTMPVARHANDLER fuzzerexecuteex...

OSV-2021-914 UNKNOWN READ in mrb_vm_ci_env

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35718 Crash type: UNKNOWN READ Crash state: mrbvmcienv cipop mrbvmexec...

OSV-2021-907 Heap-buffer-overflow in decode_header_value_literal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35675 Crash type: Heap-buffer-overflow READ 1 Crash state: decodeheadervalueliteral decodeheader h2ohpackparserequest...

OSV-2021-903 UNKNOWN WRITE in QOutlineMapper::convertPath

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35566 Crash type: UNKNOWN WRITE Crash state: QOutlineMapper::convertPath QRasterPaintEngine::fill QPaintEngineEx::stroke...

OSV-2021-901 Stack-use-after-return in __readlink

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35565 Crash type: Stack-use-after-return WRITE 8 Crash state: readlink v9fscoreadlink v9fsreadlink...

OSV-2021-899 Heap-buffer-overflow in synth_name_to_path

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35548 Crash type: Heap-buffer-overflow READ 8 Crash state: synthnametopath v9fsconametopath v9fscompleterename...

OSV-2021-897 Heap-buffer-overflow in ZSTD_decompressMultiFrame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35537 Crash type: Heap-buffer-overflow READ Crash state: ZSTDdecompressMultiFrame ZSTDdecompressusingDDict bloscd...

OSV-2021-882 Uncaught exception

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35392 Crash type: Uncaught exception Crash state: NULL...

OSV-2021-870 Stack-use-after-return in v9fs_co_lgetxattr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35290 Crash type: Stack-use-after-return READ 8 Crash state: v9fscolgetxattr v9fsxattrwalk coroutinetrampoline...

OSV-2021-852 Heap-buffer-overflow in parseInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35153 Crash type: Heap-buffer-overflow READ 1 Crash state: parseInternal JavaExampleFuzzerNativeparse...