OSV-2021-1250 Segv on unknown address in ft_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38635 Crash type: Segv on unknown address Crash state: ftfree ftmemfree cffcmapunicodedone...

OSV-2021-1249 Heap-buffer-overflow in int flatbuffers::ReadScalar<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38578 Crash type: Heap-buffer-overflow READ 4 Crash state: int flatbuffers::ReadScalar flatbuffers::Table::GetVTable flatbuffers::Table::GetOptionalFieldOffset...

OSV-2021-1246 Heap-buffer-overflow in FSE_writeNCount_generic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38553 Crash type: Heap-buffer-overflow WRITE 1 Crash state: FSEwriteNCountgeneric FSEwriteNCount ZSTDbuildCTable...

OSV-2021-1245 Heap-buffer-overflow in ucl_object_dtor_unref_single

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38550 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectdtorunrefsingle uclobjectdtorunref uclhashdestroy...

OSV-2021-1239 Heap-buffer-overflow in stbi__load_and_postprocess_8bit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38394 Crash type: Heap-buffer-overflow READ 2 Crash state: stbiloadandpostprocess8bit stbimage.h...

OSV-2021-1238 UNKNOWN READ in cdf_read_property_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38393 Crash type: UNKNOWN READ Crash state: cdfreadpropertyinfo cdfunpacksummaryinfo cdfchecksummaryinfo...

OSV-2021-1236 UNKNOWN READ in icu_70::UCharsTrie::branchNext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38390 Crash type: UNKNOWN READ Crash state: icu70::UCharsTrie::branchNext icu70::UCharsTrie::firstForCodePoint icu70::CollationIterator::nextCE32FromContraction...

OSV-2021-1235 Heap-buffer-overflow in ih264d_fill_bs1_16x16mb_pslice

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38387 Crash type: Heap-buffer-overflow READ 4 Crash state: ih264dfillbs116x16mbpslice ih264dcomputebsnonmbaffthread ih264drecondeblkslice...

OSV-2021-1234 Heap-buffer-overflow in ndr_push_array_uint8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38480 Crash type: Heap-buffer-overflow READ 2 Crash state: ndrpusharrayuint8 ndrpushnbtrdatadata ndrpushnbtrdata...

OSV-2021-1230 UNKNOWN READ in helper_ret_stb_mmu_x86_64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38438 Crash type: UNKNOWN READ Crash state: helperretstbmmux8664 resumeallvcpusx8664 vmstartx8664...

OSV-2021-1227 Heap-buffer-overflow in blosclz_compress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38313 Crash type: Heap-buffer-overflow WRITE 1 Crash state: blosclzcompress bloscc dojob...

OSV-2021-1222 Invalid-free in swift_unexpectedError

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38323 Crash type: Invalid-free Crash state: swiftunexpectedError SwiftProtobuf.TextFormatEncodingVisitor.visitRepeatedMessageFieldA where A: Swi merged protocol witness for SwiftProtobuf.Visitor.visitRepeatedEnumFieldA where...

OSV-2021-1221 Heap-buffer-overflow in parse_via_param

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38307 Crash type: Heap-buffer-overflow READ 1 Crash state: parseviaparam parsevia gethdrfield...

OSV-2021-1218 Heap-buffer-overflow in value_move

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38298 Crash type: Heap-buffer-overflow READ 8 Crash state: valuemove mrbarysplice mrbaryaset...

OSV-2021-1217 Heap-use-after-free in ZEND_FETCH_OBJ_R_SPEC_CV_CONST_INLINE_HANDLER

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38297 Crash type: Heap-use-after-free READ 8 Crash state: ZENDFETCHOBJRSPECCVCONSTINLINEHANDLER ZENDFETCHOBJRSPECCVCONSTHANDLER fuzzerexecuteex...

OSV-2021-1216 Global-buffer-overflow in fr_is_base16_nstd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38283 Crash type: Global-buffer-overflow READ 1 Crash state: frisbase16nstd frbase16decodenstd frvalueboxfromstr...

OSV-2021-1215 Invalid-free in swift_unexpectedError

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38264 Crash type: Invalid-free Crash state: swiftunexpectedError function signature specialization Arg function signature specialization Arg...

OSV-2021-1213 UNKNOWN WRITE in mrb_vm_exec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38251 Crash type: UNKNOWN WRITE Crash state: mrbvmexec mrbvmrun mrbtoprun...

OSV-2021-1211 Heap-buffer-overflow in MqttDecode_Publish

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38237 Crash type: Heap-buffer-overflow WRITE 8 Crash state: MqttDecodePublish MqttClientDecodePacket MqttClientHandlePacket...

OSV-2021-1206 Stack-use-after-scope in uprv_stricmp_70

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38156 Crash type: Stack-use-after-scope READ 1 Crash state: uprvstricmp70 ulocimpgetLanguage70 canonicalize...