OSV-2021-779 Heap-buffer-overflow in _blosc_getitem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34458 Crash type: Heap-buffer-overflow READ 8 Crash state: bloscgetitem blosc2getitemctx blosc2getitem...

OSV-2021-777 Heap-use-after-free in xmlAddNextSibling

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34461 Crash type: Heap-use-after-free READ 4 Crash state: xmlAddNextSibling xmlXIncludeCopyRange xmlXIncludeCopyXPointer...

OSV-2021-776 UNKNOWN READ in std::__1::__tree<std::__1::__value_type<Json::Value::CZString, Json::Value>, std

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34443 Crash type: UNKNOWN READ Crash state: std::1::tree, std std::1::mapJson::Value::CZString, Json::Value, std::1::lessJson::Value::CZ Json::Value::begin...

OSV-2021-771 Heap-use-after-free in dwg_free_TABLEGEOMETRY_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34377 Crash type: Heap-use-after-free READ 8 Crash state: dwgfreeTABLEGEOMETRYprivate dwgfreeTABLEGEOMETRY dwgfreevariablenoclass...

OSV-2021-769 Stack-buffer-overflow in TranslateClause

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34332 Crash type: Stack-buffer-overflow READ 16 Crash state: TranslateClause SpeakNextClause Synthesize...

OSV-2021-767 Heap-buffer-overflow in string_decoder_getc_utf_8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34299 Crash type: Heap-buffer-overflow READ 1 Crash state: stringdecodergetcutf8 textdecodergetc GetC...

OSV-2021-766 Negative-size-param in frame_get_vlmetalayers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34259 Crash type: Negative-size-param Crash state: framegetvlmetalayers frametoschunk blosc2schunkfrombuffer...

OSV-2021-765 Heap-use-after-free in LookupDict2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34298 Crash type: Heap-use-after-free READ 4 Crash state: LookupDict2 LookupDictList Lookup...

OSV-2021-764 Stack-buffer-overflow in TranslateNumber_1

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34285 Crash type: Stack-buffer-overflow READ 1 Crash state: TranslateNumber1 TranslateNumber TranslateWord3...

OSV-2021-757 Use-of-uninitialized-value in nn_check_initialized

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34156 Crash type: Use-of-uninitialized-value Crash state: nncheckinitialized nnzero ecgdsasignraw...

OSV-2021-750 Heap-double-free in flb_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34116 Crash type: Heap-double-free Crash state: flbfree flbparserjsondo flbparserdo...

OSV-2021-745 Heap-buffer-overflow in skip_to_next_entry

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34110 Crash type: Heap-buffer-overflow READ 1 Crash state: skiptonextentry getexceptionhandler PyEvalEvalFrameDefault...

OSV-2021-739 Stack-buffer-overflow in flb_sds_cat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34025 Crash type: Stack-buffer-overflow READ Crash state: flbsdscat flbratranslate recordacfuzzer.c...

OSV-2021-736 Stack-use-after-return in zend_fiber_suspend_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34013 Crash type: Stack-use-after-return READ 4 Crash state: zendfibersuspendcontext zendfibersuspend zimFibersuspend...

OSV-2021-732 Heap-buffer-overflow in readstat_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33991 Crash type: Heap-buffer-overflow READ 1 Crash state: readstatconvert savprocessrow savreaduncompresseddata...

OSV-2021-731 Heap-use-after-free in cleanup_live_vars

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33947 Crash type: Heap-use-after-free READ 4 Crash state: cleanuplivevars zendcleanupunfinishedexecution zendgeneratorcleanupunfinishedexecution...

OSV-2021-729 Global-buffer-overflow in libfsext_inode_read_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33940 Crash type: Global-buffer-overflow READ Crash state: libfsextinodereaddata libfsextinodereadelementdata libfdatavectorgetelementvaluebyindex...

OSV-2021-728 UNKNOWN WRITE in _fini

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33944 Crash type: UNKNOWN WRITE Crash state: fini...

OSV-2021-727 UNKNOWN READ in MEM_read32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33956 Crash type: UNKNOWN READ Crash state: MEMread32 ZSTDcompressBlockgreedyextDictrow ZSTDldmblockCompress...

OSV-2021-725 UNKNOWN READ in libfsext_directory_entry_read_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33935 Crash type: UNKNOWN READ Crash state: libfsextdirectoryentryreaddata libfsextdirectoryreadinlinedata libfsextdirectoryreadfileiohandle...