OSV-2021-437 Heap-use-after-free in ofats::any_detail::handler_traits<void>::handler_base<ofats::any_detail::handler

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31209 Crash type: Heap-use-after-free WRITE 8 Crash state: ofats::anydetail::handlertraits::handlerbaseofats::anydetail::handler uWS::Loop::wakeupCb usinternaldispatchreadypoll...

OSV-2021-435 Stack-buffer-overflow in ot::Cli::Interpreter::OutputFormatV

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31232 Crash type: Stack-buffer-overflow READ Crash state: ot::Cli::Interpreter::OutputFormatV ot::Cli::Interpreter::OutputLine ot::Cli::Interpreter::HandleDnsServiceResponse...

OSV-2021-430 Stack-buffer-overflow in tvb_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31198 Crash type: Stack-buffer-overflow WRITE Crash state: tvbmemcpy compositememcpy tvbgetnstringz...

OSV-2021-427 Heap-buffer-overflow in LibRaw::kodak_c330_load_raw

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31181 Crash type: Heap-buffer-overflow READ 1 Crash state: LibRaw::kodakc330loadraw LibRaw::unpack librawfuzzer.cc...

OSV-2021-421 Heap-use-after-free in __cil_verify_classperms

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31124 Crash type: Heap-use-after-free READ 8 Crash state: cilverifyclassperms verifymappermclassperms hashtabmap...

OSV-2021-417 Heap-use-after-free in __cil_verify_classperms

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31065 Crash type: Heap-use-after-free READ 8 Crash state: cilverifyclassperms cilverifyclasspermission cilpreverifyhelper...

OSV-2021-414 Heap-use-after-free in us_socket_close

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31047 Crash type: Heap-use-after-free READ 8 Crash state: ussocketclose wrapepollwait uslooprun...

OSV-2021-413 UNKNOWN WRITE in sudo_user_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31042 Crash type: UNKNOWN WRITE Crash state: sudouserfree sudoerspolicyclose fuzzpolicy.c...

OSV-2021-411 UNKNOWN READ in ot::Cli::Interpreter::OutputFormatV

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31002 Crash type: UNKNOWN READ Crash state: ot::Cli::Interpreter::OutputFormatV ot::Cli::Interpreter::OutputLine ot::Cli::SrpServer::ProcessDomain...

OSV-2021-404 Segv on unknown address in blosc_read_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30974 Crash type: Segv on unknown address Crash state: bloscreadheader blosc2getitemctx bloscgetitem...

OSV-2021-401 Segv on unknown address in us_internal_dispatch_ready_poll

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30951 Crash type: Segv on unknown address Crash state: usinternaldispatchreadypoll uslooprun test...

OSV - Open Source Vulnerability DB And Triage Service

OSV is a vulnerability database and triage infrastructure for open source projects aimed at helping both open source maintainers and consumers of open source. For open source maintainers, OSV's automation helps reduce the burden of triage. Each vulnerability undergoes automated bisection and impa...

OSV-2021-399 Heap-buffer-overflow in void AK::__format_value<unsigned char>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30914 Crash type: Heap-buffer-overflow READ 1 Crash state: void AK::formatvalue AK::vformatimpl AK::vformatimpl...

OSV-2021-395 Heap-buffer-overflow in Crypto::der_decode_integer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30907 Crash type: Heap-buffer-overflow READ 1 Crash state: Crypto::derdecodeinteger Crypto::derdecodesequence Crypto::derdecodesequencemany::operator bool...

OSV-2021-389 Bad-cast to tt_cmap_t' (aka 'struct _tt_cmap')_cairo_truetype_index_to_ucs4

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30823 Crash type: Bad-cast Crash state: Bad-cast to ttcmapt' aka 'struct ttcmap'cairotruetypeindextoucs4 cairosubfontglyphlookupunicode cairosubfontmapglyph...

OSV-2021-386 Stack-buffer-overflow in ot::Coap::Message::AppendUintOption

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30831 Crash type: Stack-buffer-overflow READ 1 Crash state: ot::Coap::Message::AppendUintOption ot::Coap::Message::AppendBlockOption otCoapMessageAppendBlock2Option...

OSV-2021-385 Heap-buffer-overflow in grk::BitIO::bytein

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30863 Crash type: Heap-buffer-overflow READ 1 Crash state: grk::BitIO::bytein grk::BitIO::read grk::T2Decompress::readpacketheader...

OSV-2021-374 Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30817 Crash type: Heap-buffer-overflow READ 2 Crash state: BEInt::operator unsigned short OT::IntType::operator unsigned int OT::AnchorMatrix::subset...

OSV-2021-369 Segv on unknown address in blosc_read_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30761 Crash type: Segv on unknown address Crash state: bloscreadheader blosc2getitemctx bloscgetitem...

OSV-2021-367 Heap-buffer-overflow in H5MM_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30749 Crash type: Heap-buffer-overflow READ Crash state: H5MMmemcpy H5VMmemcpyvv H5Dcompactreadvv...