OSV-2021-1346 UNKNOWN READ in state_VLC_dec::load_bytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39046 Crash type: UNKNOWN READ Crash state: stateVLCdec::loadbytes stateVLCdec::stateVLCdec htj2kdecode...

OSV-2021-1344 Heap-buffer-overflow in openhtj2k::T1OpenHTJ2K::decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39021 Crash type: Heap-buffer-overflow WRITE 4 Crash state: openhtj2k::T1OpenHTJ2K::decompress std::1::packagedtaskfuncstd::1::bindgrk::T1DecompressScheduler::deco std::1::packagedtaskint...

OSV-2021-1343 Heap-buffer-overflow in get_next_owned_entity

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38994 Crash type: Heap-buffer-overflow READ 8 Crash state: getnextownedentity dwgwritedxfb llvmfuzz.c...

OSV-2021-1340 Heap-buffer-overflow in mrb_vm_exec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38989 Crash type: Heap-buffer-overflow READ 1 Crash state: mrbvmexec mrbvmrun mrbtoprun...

OSV-2021-1338 Uncaught exception in org.jsoup.parser.HtmlTreeBuilder.process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38982 Crash type: Uncaught exception Crash state: org.jsoup.parser.HtmlTreeBuilder.process org.jsoup.parser.HtmlTreeBuilderState$18.process org.jsoup.parser.HtmlTreeBuilder.process...

OSV-2021-1333 Heap-buffer-overflow in pe_get_section_full_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38952 Crash type: Heap-buffer-overflow READ 1 Crash state: pegetsectionfullname peload yrmodulesload...

OSV-2021-1326 Heap-buffer-overflow in my_ismbchar_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38923 Crash type: Heap-buffer-overflow READ 2 Crash state: myismbcharutf8 checkcolumnname getvariable...

OSV-2021-1316 Stack-buffer-overflow in Assimp::ZipArchiveIOSystem::Implement::MapArchive

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38870 Crash type: Stack-buffer-overflow READ Crash state: Assimp::ZipArchiveIOSystem::Implement::MapArchive Assimp::ZipArchiveIOSystem::getFileList Assimp::D3MF::D3MFOpcPackage::D3MFOpcPackage...

OSV-2021-1314 Use-of-uninitialized-value in LoadBinarySchema

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38817 Crash type: Use-of-uninitialized-value Crash state: LoadBinarySchema dotest flatbuffersmonsterfuzzer.cc...

OSV-2021-1312 Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38808 Crash type: Use-of-uninitialized-value Crash state: std::1::basicostream & std::1::putcha printjson fuzzdump.cpp...

OSV-2021-1311 Null-dereference READ in unzOpenCurrentFile3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38873 Crash type: Null-dereference READ Crash state: unzOpenCurrentFile3 unzOpenCurrentFile Assimp::ZipFileInfo::Extract...

OSV-2021-1310 Heap-use-after-free in hb_resolve_overflows

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38878 Crash type: Heap-use-after-free READ 4 Crash state: hbresolveoverflows repack hbsubsetorfail...

OSV-2021-1300 UNKNOWN READ in get_body

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38750 Crash type: UNKNOWN READ Crash state: getbody parsesdp fuzzparsemsg.c...

OSV-2021-1287 Use-of-uninitialized-value in piex::image_type_recognition::ContainsNikonSignatures

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38799 Crash type: Use-of-uninitialized-value Crash state: piex::imagetyperecognition::ContainsNikonSignatures piex::imagetyperecognition::NefTypeChecker::IsMyType piex::imagetyperecognition::RecognizeRawImageTypeLite...

OSV-2021-1269 Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38777 Crash type: Use-of-uninitialized-value Crash state: std::1::basicostream & std::1::putcha S2LaxPolylineShape::Init S2LaxPolylineShape::S2LaxPolylineShape...

OSV-2021-1266 UNKNOWN WRITE in void AK::BumpAllocator<true, 2097152ul>::for_each_chunk<AK::UniformBumpAllocator

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38701 Crash type: UNKNOWN WRITE Crash state: void AK::BumpAllocator::foreachchunk::BumpAllocatedLinkedList regex::Matcher::execute...

OSV-2021-1262 Heap-buffer-overflow in H5O__chunk_deserialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38686 Crash type: Heap-buffer-overflow READ 1 Crash state: H5Ochunkdeserialize H5Ocachechkdeserialize H5Cprotect...

OSV-2021-1261 UNKNOWN READ in kh_get_ucl_hash_node

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38660 Crash type: UNKNOWN READ Crash state: khgetuclhashnode uclhashsearch uclinherithandler...

OSV-2021-1258 Bad-cast to SplashPattern from invalid vptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38669 Crash type: Bad-cast Crash state: Bad-cast to SplashPattern from invalid vptr SplashState::SplashState Splash::restoreState...

OSV-2021-1257 Stack-buffer-overflow in GRIBDataset::Open

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38610 Crash type: Stack-buffer-overflow READ 1 Crash state: GRIBDataset::Open GDALOpenEx GDALOpen...