OSV-2021-1663 Heap-buffer-overflow in ndlz4_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42131 Crash type: Heap-buffer-overflow WRITE Crash state: ndlz4decompress bloscd dojob...

OSV-2021-1658 Null-dereference READ in istio.io/istio/security/pkg/util.ExtractJwtAud

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42142 Crash type: Null-dereference READ Crash state: istio.io/istio/security/pkg/util.ExtractJwtAud...

OSV-2021-1646 Heap-buffer-overflow in uncompress_b44_impl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41625 Crash type: Heap-buffer-overflow READ Crash state: uncompressb44impl defaultdecompresschunk exrdecodingrun...

OSV-2021-1645 UNKNOWN READ in ndlz4_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41636 Crash type: UNKNOWN READ Crash state: ndlz4decompress bloscd dojob...

OSV-2020-2328 UNKNOWN READ in UA_Server_initNS0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23137 Crash type: UNKNOWN READ Crash state: UAServerinitNS0 UAServernewWithConfig UAServernew...

OSV-2021-1644 Container-overflow in void jxl::CopyImageTo<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41608 Crash type: Container-overflow READ 4 Crash state: void jxl::CopyImageTo jxl::ModularFrameDecoder::DecodeGroup jxl::FrameDecoder::ProcessACGroup...

OSV-2021-1641 Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41582 Crash type: Heap-buffer-overflow READ Crash state: std::1::basicstring, std::1::allocatorch void Assimp::Logger::warnchar const Assimp::NDOImporter::InternReadFile...

OSV-2021-1639 Heap-use-after-free in Segment::write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41553 Crash type: Heap-use-after-free READ 1 Crash state: Segment::write Doublewrite::writepages Doublewrite::flushtodisk...

OSV-2021-1636 Stack-buffer-overflow in MatchRule

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41504 Crash type: Stack-buffer-overflow READ 1 Crash state: MatchRule TranslateRules TranslateWord3...

OSV-2021-1634 Dynamic-stack-buffer-overflow in OutputJsonDNP3SetItem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41487 Crash type: Dynamic-stack-buffer-overflow READ 4 Crash state: OutputJsonDNP3SetItem JsonDNP3LogObjects JsonDNP3LogResponse...

OSV-2021-1633 Heap-buffer-overflow in mk_string_copy_substr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41448 Crash type: Heap-buffer-overflow READ Crash state: mkstringcopysubstr mkrconfread mkrconfopen...

OSV-2021-1631 Stack-buffer-overflow in TranslateNumber

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41437 Crash type: Stack-buffer-overflow READ 1 Crash state: TranslateNumber TranslateWord3 TranslateWord...

OSV-2021-1629 Heap-buffer-overflow in Curl_sasl_decode_mech

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41403 Crash type: Heap-buffer-overflow READ 10 Crash state: Curlsasldecodemech Curlsaslparseurlauthoption smtpparseurloptions...

OSV-2021-1628 Stack-buffer-overflow in sprint_realloc_hinted_integer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41372 Crash type: Stack-buffer-overflow WRITE 1 Crash state: sprintreallochintedinteger sprintreallocinteger snprintinteger...

OSV-2021-1625 Heap-buffer-overflow in junkscan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41390 Crash type: Heap-buffer-overflow READ 16 Crash state: junkscan seturl parseurl...

OpenEXR -- Heap-buffer-overflow in Imf_3_1::LineCompositeTask::execute

Cary Phillips reports: OpenEXR Version 3.1.4 is a patch release that ... addresses one public security vulnerability: CVE-2021-45942 Heap-buffer-overflow in Imf31::LineCompositeTask::execute and several specific OSS-fuzz issues...

OSV-2021-1615 Heap-buffer-overflow in jxl::ModularFrameDecoder::DecodeGroup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41283 Crash type: Heap-buffer-overflow READ Crash state: jxl::ModularFrameDecoder::DecodeGroup jxl::FrameDecoder::ProcessACGroup jxl::ThreadPool::RunCallStatejxl::FrameDecoder::ProcessSections...

OSV-2021-1610 Heap-buffer-overflow in mk_rconf_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41275 Crash type: Heap-buffer-overflow READ 1 Crash state: mkrconfread mkrconfreadglob mkrconfread...

OSV-2021-1607 Container-overflow in void jxl::CopyImageTo<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41235 Crash type: Container-overflow READ 4 Crash state: void jxl::CopyImageTo jxl::ModularFrameDecoder::DecodeGroup jxl::FrameDecoder::ProcessACGroup...

OSV-2021-1606 Segv on unknown address in jxl::N_AVX2::SingleFromSingle

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41233 Crash type: Segv on unknown address Crash state: jxl::NAVX2::SingleFromSingle jxl::ThreadPool::SequentialRunnerStatic jxl::ModularFrameDecoder::ModularImageToDecodedRect...