OSV-2021-557 Heap-use-after-free in copy_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32375 Crash type: Heap-use-after-free READ 1 Crash state: copystring douncompressblock processblock...

OSV-2021-555 Uncaught exception in java.base/java.util.concurrent.ConcurrentHashMap.putVal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32395 Crash type: Uncaught exception Crash state: java.base/java.util.concurrent.ConcurrentHashMap.putVal java.base/java.util.concurrent.ConcurrentHashMap.put com.fasterxml.jackson.core.util.InternCache.intern...

OSV-2021-553 Heap-buffer-overflow in read_color_line

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32421 Crash type: Heap-buffer-overflow READ 1 Crash state: readcolorline readpaint ttfacegetpaint...

OSV-2021-552 Uncaught exception in java.base/java.lang.ClassLoader.defineClass0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32407 Crash type: Uncaught exception Crash state: java.base/java.lang.ClassLoader.defineClass0 java.base/java.lang.System$2.defineClass java.base/java.lang.invoke.MethodHandles$Lookup$ClassDefiner.defineClass...

OSV-2021-543 Heap-use-after-free in dxf_objects_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32275 Crash type: Heap-use-after-free READ 2 Crash state: dxfobjectsread dwgreaddxf llvmfuzz.c...

OSV-2021-542 Heap-buffer-overflow in luaG_getfuncline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32279 Crash type: Heap-buffer-overflow READ 1 Crash state: luaGgetfuncline luaGrunerror luaDgrowstack...

OSV-2021-540 Heap-buffer-overflow in g_array_append_vals

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32249 Crash type: Heap-buffer-overflow READ Crash state: garrayappendvals gbytearrayappend fuefifirmwarevolumewrite...

OSV-2021-536 Heap-use-after-free in cil_reset_classpermission

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32177 Crash type: Heap-use-after-free READ 8 Crash state: cilresetclasspermission cilresetclasspermsset cilresetclasspermslist...

OSV-2021-535 Heap-buffer-overflow in encode_3dsolid

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32165 Crash type: Heap-buffer-overflow READ 4 Crash state: encode3dsolid dwgencodeBODYprivate dwgencodeBODY...

OSV-2021-534 Container-overflow in tesseract::ExtractResults16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32142 Crash type: Container-overflow WRITE Crash state: tesseract::ExtractResults16 tesseract::PartialMatrixDotVector16 tesseract::matrixDotVector...

OSV-2021-530 UNKNOWN WRITE in g_array_append_vals

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32131 Crash type: UNKNOWN WRITE Crash state: garrayappendvals gbytearrayappend fuefifirmwarefilesystemwrite...

OSV-2021-526 Heap-use-after-free in ZSTD_freeDDict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32076 Crash type: Heap-use-after-free READ Crash state: ZSTDfreeDDict blosc2freectx blosc2schunkfree...

OSV-2021-520 Heap-buffer-overflow in flatbuffers::EscapeString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32008 Crash type: Heap-buffer-overflow READ 1 Crash state: flatbuffers::EscapeString flexbuffers::Reference::ToString void flexbuffers::AppendToString...

OSV-2021-514 UNKNOWN READ in _fini

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31953 Crash type: UNKNOWN READ Crash state: fini...

OSV-2021-512 Heap-buffer-overflow in luaG_getfuncline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31892 Crash type: Heap-buffer-overflow READ 1 Crash state: luaGgetfuncline luaGrunerror luaDgrowstack...

OSV-2021-510 Heap-use-after-free in grk_object_unref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31874 Crash type: Heap-use-after-free READ 8 Crash state: grkobjectunref grk::GrkObjectImpl::release grk::GrkObject::unref...

OSV-2021-509 Heap-buffer-overflow in _estrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31922 Crash type: Heap-buffer-overflow READ Crash state: estrdup exifprocessusercomment exifprocessIFDTAGimpl...

OSV-2021-504 Heap-buffer-overflow in ih264d_mark_err_slice_skip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31757 Crash type: Heap-buffer-overflow WRITE 8 Crash state: ih264dmarkerrsliceskip ih264dvideodecode ih264dapifunction...

OSV-2021-503 Use-after-poison in std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::Expression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31765 Crash type: Use-after-poison READ 8 Crash state: std::1::uniqueptrSkSL::Expression, std::1::defaultdeleteSkSL::Expression SkSL::DefinitionMap::getKnownDefinition SkSL::VariableReference::constantPropagate...

OSV-2021-498 Invalid-free in frame_get_lazychunk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31705 Crash type: Invalid-free Crash state: framegetlazychunk framedecompresschunk blosc2schunkdecompresschunk...