OSV-2021-495 Heap-double-free in bit_chain_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31724 Crash type: Heap-double-free Crash state: bitchainfree dwgencodeMTEXT dwgencodeaddobject...

OSV-2021-487 UNKNOWN READ in blosc_run_decompression_with_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31611 Crash type: UNKNOWN READ Crash state: bloscrundecompressionwithcontext blosc2decompressctx framedecompresschunk...

OSV-2021-481 Heap-buffer-overflow in ZSTD_createDDict_advanced

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31586 Crash type: Heap-buffer-overflow READ Crash state: ZSTDcreateDDictadvanced ZSTDcreateDDict bloscrundecompressionwithcontext...

OSV-2021-480 UNKNOWN READ in std::__Fuzzer::basic_filebuf<char, std::__Fuzzer::char_traits<char> >::setbuf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31578 Crash type: UNKNOWN READ Crash state: std::Fuzzer::basicfilebuf ::setbuf std::Fuzzer::basicfilebuf ::basicfil...

OSV-2021-476 Heap-buffer-overflow in blosc_d

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31556 Crash type: Heap-buffer-overflow READ 4 Crash state: bloscd dojob bloscrundecompressionwithcontext...

OSV-2021-464 Heap-buffer-overflow in blosc_read_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31535 Crash type: Heap-buffer-overflow READ 16 Crash state: bloscreadheader blosc2cbuffersizes framegetlazychunk...

OSV-2021-461 Heap-buffer-overflow in ProcessReply

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31527 Crash type: Heap-buffer-overflow READ 1 Crash state: ProcessReply wolfSSLconnect client.c...

OSV-2021-460 Heap-buffer-overflow in Op_to_sdr_planes::convert_colorspace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31495 Crash type: Heap-buffer-overflow READ 2 Crash state: Optosdrplanes::convertcolorspace heif::ColorConversionPipeline::convertimage heif::convertcolorspace...

OSV-2021-459 Segv on unknown address in slice_segment_header::operator=

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31492 Crash type: Segv on unknown address Crash state: slicesegmentheader::operator= slicesegmentheader::read decodercontext::readsliceNAL...

OSV-2021-457 Heap-buffer-overflow in unescape_tag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31491 Crash type: Heap-buffer-overflow READ 1 Crash state: unescapetag ircparsemessagetags ircservereventtags...

OSV-2021-455 Heap-use-after-free in zend_hash_iterator_pos_ex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31423 Crash type: Heap-use-after-free READ 1 Crash state: zendhashiteratorposex ZENDFEFETCHRWSPECVARHANDLER fuzzerexecuteex...

OSV-2021-454 Heap-buffer-overflow in irc_parse_message_tags

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31443 Crash type: Heap-buffer-overflow READ 8 Crash state: ircparsemessagetags ircservereventtags signalemitreal...

OSV-2021-453 UNKNOWN WRITE in std::__1::pair<unsigned int, void*> uWS::HttpParser::fenceAndConsumePostPadded<0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31457 Crash type: UNKNOWN WRITE Crash state: std::1::pair uWS::HttpParser::fenceAndConsumePostPadded0 uWS::HttpParser::consumePostPadded std::1::function::funcLLVMFuzzerTestOneInput::$0, std::1::allocatorLL...

OSV-2021-450 Global-buffer-overflow in coap_pdu_parse_opt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31479 Crash type: Global-buffer-overflow WRITE 1 Crash state: coappduparseopt coappduparse...

OSV-2021-448 Use-of-uninitialized-value in std::__1::__packaged_task_func<std::__1::__bind<grk::mct::decompress_irrev

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31365 Crash type: Use-of-uninitialized-value Crash state: std::1::packagedtaskfuncstd::1::bindgrk::mct::decompressirrev std::1::packagedtaskint ThreadPool::ThreadPool...

OSV-2021-447 Heap-buffer-overflow in luaG_runerror

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31331 Crash type: Heap-buffer-overflow READ 8 Crash state: luaGrunerror luaDpretailcall luaVexecute...

OSV-2020-2309 UNKNOWN WRITE in flb_utils_proxy_url_split

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31306 Crash type: UNKNOWN WRITE Crash state: flbutilsproxyurlsplit utilsfuzzer.c...

OSV-2021-446 Global-buffer-overflow in AK::StringView::operator==

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31351 Crash type: Global-buffer-overflow READ 1 Crash state: AK::StringView::operator== Markdown::CodeBlock::parse bool Markdown::helper...

OSV-2021-441 UNKNOWN WRITE in sudoers_lookup_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31250 Crash type: UNKNOWN WRITE Crash state: sudoerslookupcheck sudoerslookup fuzzsudoers.c...

OSV-2021-440 Heap-buffer-overflow in H5MM_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31265 Crash type: Heap-buffer-overflow WRITE 4 Crash state: H5MMmemcpy H5MMmalloc H5Cloadentry...