OSV-2022-330 Stack-use-after-return in std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<i

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46575 Crash type: Stack-use-after-return READ 1 Crash state: std::1::function::funcbool grk::WaveletReverse::decompresspartialtilei tf::Executor::invoke tf::Executor::consumetask...

OSV-2022-327 Stack-use-after-return in QSemaphore::release

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46525 The issue already existed before oss-fuzz could reproduce it. oss-fuzz found it after qdrawhelper routines were made multithreaded. There might be ways to trigger the issue before that. Crash type: Stack-use-after-return...

OSV-2022-325 Heap-buffer-overflow in ndpi_search_tinc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46499 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpisearchtinc checkndpidetectionfunc ndpicheckflowfunc...

OSV-2022-324 Heap-buffer-overflow in resize_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46474 Crash type: Heap-buffer-overflow WRITE Crash state: resizepacket FuzzResizePacket fuzzrfc1035.c...

OSV-2022-323 Heap-buffer-overflow in ConvertRGB24ToY_SSE41

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46436 Crash type: Heap-buffer-overflow READ 1 Crash state: ConvertRGB24ToYSSE41 ImportYUVAFromRGBA Import...

OSV-2022-322 Heap-buffer-overflow in frame_get_metalayers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46460 Crash type: Heap-buffer-overflow READ Crash state: framegetmetalayers frametoschunk blosc2schunkfrombuffer...

OSV-2022-321 Stack-use-after-scope in std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<g

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46468 Crash type: Stack-use-after-scope WRITE 1 Crash state: std::1::function::funcbool grk::WaveletReverse::decompresspartialtileg tf::Executor::invoke tf::Executor::consumetask...

OSV-2022-319 Heap-buffer-overflow in LoadPSD

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46437 Crash type: Heap-buffer-overflow WRITE 2 Crash state: LoadPSD PSDHandler::read kimgiofuzzer.cc...

OSV-2022-318 UNKNOWN READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46356 Crash type: UNKNOWN READ Crash state: NULL...

OSV-2022-317 Heap-use-after-free in save_marker

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46421 Crash type: Heap-use-after-free WRITE 1 Crash state: savemarker readmarkers consumemarkers...

OSV-2022-315 UNKNOWN READ in start_output_pass

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46396 Crash type: UNKNOWN READ Crash state: startoutputpass prepareforoutputpass outputpasssetup...

OSV-2022-314 UNKNOWN READ in [heap]

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46395 Crash type: UNKNOWN READ Crash state: heap...

OSV-2022-313 Heap-buffer-overflow in generic_unpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46432 Crash type: Heap-buffer-overflow READ 2 Crash state: genericunpack exrdecodingrun Imf31::checkCoreFile...

OSV-2022-311 Heap-use-after-free in decode_mcu

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46354 Crash type: Heap-use-after-free READ 4 Crash state: decodemcu decompressonepass processdatasimplemain...

OSV-2022-310 Heap-use-after-free in jpeg_fill_bit_buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46343 Crash type: Heap-use-after-free WRITE 4 Crash state: jpegfillbitbuffer jpeghuffdecode decodemcu...

OSV-2022-309 UNKNOWN READ in decompress_smooth_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46349 Crash type: UNKNOWN READ Crash state: decompresssmoothdata processdatasimplemain jpegreadscanlines...

OSV-2022-308 Null-dereference READ in ubsan_GetStackTrace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46341 Crash type: Null-dereference READ Crash state: ubsanGetStackTrace...

OSV-2022-303 Heap-use-after-free in start_pass_phuff_decoder

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46338 Crash type: Heap-use-after-free WRITE 4 Crash state: startpassphuffdecoder startinputpass jinitmasterdecompress...

OSV-2022-302 Heap-use-after-free in read_markers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46334 Crash type: Heap-use-after-free READ 4 Crash state: readmarkers consumemarkers jpegconsumeinput...

OSV-2022-296 Negative-size-param in jxl::N_SSE4::BlendingStage::ProcessPaddingRow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46243 Crash type: Negative-size-param Crash state: jxl::NSSE4::BlendingStage::ProcessPaddingRow jxl::LowMemoryRenderPipeline::RenderPadding jxl::LowMemoryRenderPipeline::ProcessBuffers...