OSV-2021-1152 UNKNOWN READ in exif_mnote_data_apple_load

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37334 Crash type: UNKNOWN READ Crash state: exifmnotedataappleload exifmnotedataload interpretmakernote...

OSV-2021-1149 Heap-buffer-overflow in JS::Lexer::consume

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37294 Crash type: Heap-buffer-overflow READ 1 Crash state: JS::Lexer::consume JS::Lexer::next JS::Parser::consume...

OSV-2021-1142 Heap-buffer-overflow in exif_get_slong

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37231 Crash type: Heap-buffer-overflow READ 1 Crash state: exifgetslong mnoteappleentrygetvalue exifmnotedataapplegetvalue...

OSV-2021-1141 Heap-use-after-free in TranslateLetter

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37238 Crash type: Heap-use-after-free READ 4 Crash state: TranslateLetter TranslateWord3 TranslateWord...

OSV-2021-1138 Heap-buffer-overflow in exif_get_sshort

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37226 Crash type: Heap-buffer-overflow READ 1 Crash state: exifgetsshort exifgetshort exifmnotedataappleload...

OSV-2021-1137 Uncaught exception in com.alibaba.fastjson.parser.DefaultJSONParser.parseObject

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37237 Crash type: Uncaught exception Crash state: com.alibaba.fastjson.parser.DefaultJSONParser.parseObject java.base/java.util.HashMap.tableSizeFor java.base/java.util.HashMap...

OSV-2021-1134 Heap-buffer-overflow in exif_mnote_data_apple_load

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37222 Crash type: Heap-buffer-overflow READ Crash state: exifmnotedataappleload exifmnotedataload interpretmakernote...

OSV-2021-1127 Heap-use-after-free in zebra_nhg_hash_equal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37164 Crash type: Heap-use-after-free READ 4 Crash state: zebranhghashequal hashget hashlookup...

OSV-2021-1124 Segv on unknown address in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37116 Crash type: Segv on unknown address Crash state: helpeructracecode...

OSV-2021-1122 Heap-double-free in sudoers_gc_run

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37056 Crash type: Heap-double-free Crash state: sudoersgcrun fuzzpolicy.c resolveeditor...

OSV-2021-1121 UNKNOWN WRITE in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37025 This is the same issue as OSV-2021-1143 which replaced this one after it was closed wrongly. Crash type: UNKNOWN WRITE Crash state: QtPrivate::QCommonArrayOps::growAppend QPainterPath::addPath QPathClipper::intersect...

OSV-2021-1120 Heap-use-after-free in on_body

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37023 Crash type: Heap-use-after-free READ 1 Crash state: onbody reqbodysendcomplete runsocket...

OSV-2021-1117 Heap-buffer-overflow in json_object_new_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37017 Crash type: Heap-buffer-overflow READ Crash state: jsonobjectnewstring clijsonstr clihwp5header...

OSV-2021-1116 Use-after-poison in JS::PrimitiveString::string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36985 Crash type: Use-after-poison READ 1 Crash state: JS::PrimitiveString::string JS::abstractrelation JS::lessthan...

OSV-2021-1113 Stack-buffer-overflow in getoid

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36962 Crash type: Stack-buffer-overflow READ 8 Crash state: getoid parseobjectid parseasntype...

OSV-2021-1110 Stack-buffer-overflow in TranslateWord2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36932 Crash type: Stack-buffer-overflow WRITE 1 Crash state: TranslateWord2 TranslateClause SpeakNextClause...

OSV-2021-1108 Use-of-uninitialized-value in init_main_qtable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36913 Crash type: Use-of-uninitialized-value Crash state: initmainqtable LibRaw::fujidecodestrip LibRaw::fujidecodeloop...

OSV-2021-1105 Heap-buffer-overflow in read_config

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36908 Crash type: Heap-buffer-overflow READ 1 Crash state: readconfig snmpconfigfuzzer.c...

OSV-2021-1102 Heap-use-after-free in usbredirparser_serialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36861 Crash type: Heap-use-after-free WRITE 4 Crash state: usbredirparserserialize tryserialize usbredirparserfuzz.cc...

OSV-2021-1099 Stack-buffer-overflow in ot::StringFind

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36830 Crash type: Stack-buffer-overflow READ 1 Crash state: ot::StringFind ot::Coap::Message::AppendUriPathOptions otCoapMessageAppendUriPathOptions...