OSV-2020-1944 Use-of-uninitialized-value in RenderMVGContent

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26073 Crash type: Use-of-uninitialized-value Crash state: RenderMVGContent DrawCompositeMask RenderMVGContent...

OSV-2020-1864 Heap-use-after-free in grk::TileProcessor::~TileProcessor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26008 Crash type: Heap-use-after-free READ 8 Crash state: grk::TileProcessor::TileProcessor grk::CodeStream::decompresstiles grk::CodeStream::dodecompress...

OSV-2020-1855 Heap-buffer-overflow in WelsDec::UpdateP16x16MotionInfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25961 Crash type: Heap-buffer-overflow WRITE 4 Crash state: WelsDec::UpdateP16x16MotionInfo WelsDec::ParseInterPMotionInfoCabac WelsDec::WelsDecodeMbCabacPSliceBaseMode0...

OSV-2020-1839 UNKNOWN READ in flb_sds_cat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25904 Crash type: UNKNOWN READ Crash state: flbsdscat flbmsgpackgelfkey flbmsgpackgelfflatten...

OSV-2020-1830 Heap-use-after-free in grk::TileProcessor::~TileProcessor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25873 Crash type: Heap-use-after-free READ 8 Crash state: grk::TileProcessor::TileProcessor grk::CodeStream::decompresstiles grk::CodeStream::dodecompress...

OSV-2020-1827 Heap-buffer-overflow in http_process_user_agent

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25845 Crash type: Heap-buffer-overflow READ Crash state: httpprocessuseragent processchlo ndpisearchquic...

OSV-2020-1818 Use-of-uninitialized-value in grk::TileProcessor::prepare_sod_decoding

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25798 Crash type: Use-of-uninitialized-value Crash state: grk::TileProcessor::preparesoddecoding grk::CodeStream::parsemarkers grk::CodeStream::decompresstiles...

OSV-2020-1802 Heap-buffer-overflow in cli_codepage_to_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21960 Crash type: Heap-buffer-overflow READ Crash state: clicodepagetoutf8 clivbareaddirnew clivbascandirnew...

OSV-2020-1752 Heap-buffer-overflow in void mc_chroma<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25620 Crash type: Heap-buffer-overflow READ 2 Crash state: void mcchroma generateinterpredictionsamples decodepredictionunit...

OSV-2020-1742 Heap-use-after-free in grk::SOTMarker::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25602 Crash type: Heap-use-after-free READ 2 Crash state: grk::SOTMarker::read grk::j2kreadsot grk::CodeStream::processmarker...

OSV-2020-1739 Index-out-of-bounds in tsk_img_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25580 Crash type: Index-out-of-bounds Crash state: tskimgread tskvsreadblock macloadtable...

OSV-2020-1711 Use-of-uninitialized-value in void transform_idct_add<unsigned char>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25448 Crash type: Use-of-uninitialized-value Crash state: void transformidctadd transform4x4add8fallback void accelerationfunctions::transformadd...

OSV-2020-1679 Use-of-uninitialized-value in ClampPixel

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25298 Crash type: Use-of-uninitialized-value Crash state: ClampPixel CompositeOverImage CompositeImage...

OSV-2020-1659 Use-of-uninitialized-value in LibRaw::parse_sinar_ia

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25188 Crash type: Use-of-uninitialized-value Crash state: LibRaw::parsesinaria LibRaw::identify LibRaw::opendatastream...

OSV-2020-1647 UNKNOWN READ in aiTexture::~aiTexture

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25108 Crash type: UNKNOWN READ Crash state: aiTexture::aiTexture Assimp::MDLImporter::SkipSkinLump3DGSMDL7 Assimp::HMPImporter::ReadFirstSkin...

OSV-2020-1645 Use-of-uninitialized-value in std::__1::char_traits<char>::length

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25076 Crash type: Use-of-uninitialized-value Crash state: std::1::chartraits::length std::1::basicstring, std::1::allocatorch Magick::formatExceptionMessage...

OSV-2020-1644 Segv on unknown address in clang::Sema::PushDeclContext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25059 Crash type: Segv on unknown address Crash state: clang::Sema::PushDeclContext clang::Sema::ActOnStartDelayedMemberDeclarations clang::Parser::ParseLexedPragmas...

OSV-2020-1606 UNKNOWN READ in hb_set_digest_lowest_bits_t<unsigned long, 4u>::may_have

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24842 Crash type: UNKNOWN READ Crash state: hbsetdigestlowestbitst::mayhave hbsetdigestcombinert, hbset OT::hbotlayoutlookupacceleratort::mayhave...

OSV-2020-1599 Use-of-uninitialized-value in slide_hash

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24820 Crash type: Use-of-uninitialized-value Crash state: slidehash fillwindow deflatefast...

OSV-2020-1583 Segv on unknown address in clang::Preprocessor::LexHeaderName

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24668 Crash type: Segv on unknown address Crash state: clang::Preprocessor::LexHeaderName clang::Preprocessor::HandleIncludeDirective clang::Preprocessor::HandleDirective...