OSV-2021-366 Negative-size-param in frame_get_metalayers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30748 Crash type: Negative-size-param Crash state: framegetmetalayers frametoschunk blosc2schunkfrombuffer...

OSV-2021-365 Global-buffer-overflow in llvm_ks::StringRef::find_last_not_of

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30790 Crash type: Global-buffer-overflow READ 1 Crash state: llvmks::StringRef::findlastnotof llvmks::StringRef::rtrim llvmks::StringRef::trim...

OSV-2021-363 Heap-buffer-overflow in H5HG_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30743 Crash type: Heap-buffer-overflow READ 8 Crash state: H5HGread H5VLnativeblobget H5VLblobget...

OSV-2021-349 Heap-buffer-overflow in flatbuffers::vector_downward::fill

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30684 Crash type: Heap-buffer-overflow WRITE 1 Crash state: flatbuffers::vectordownward::fill flatbuffers::FlatBufferBuilder::PreAlign flatbuffers::FlatBufferBuilder::ForceVectorAlignment...

OSV-2021-347 Heap-buffer-overflow in flatbuffers::Table* flatbuffers::GetMutableRoot<flatbuffers::Table>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30682 Crash type: Heap-buffer-overflow READ 4 Crash state: flatbuffers::Table flatbuffers::GetMutableRoot flatbuffers::Table const flatbuffers::GetRoot flatbuffers::JsonPrinter::GenFieldOffset...

OSV-2021-333 Heap-buffer-overflow in int flatbuffers::ReadScalar<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30699 Crash type: Heap-buffer-overflow READ 4 Crash state: int flatbuffers::ReadScalar flatbuffers::Table::GetVTable flatbuffers::Table::GetOptionalFieldOffset...

OSV-2021-315 Global-buffer-overflow in Gfx::decode_frame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30507 Crash type: Global-buffer-overflow READ 4 Crash state: Gfx::decodeframe Gfx::GIFImageDecoderPlugin::frame Gfx::GIFImageDecoderPlugin::bitmap...

OSV-2021-312 Heap-use-after-free in sampled_data_continue

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30487 Crash type: Heap-use-after-free WRITE 4 Crash state: sampleddatacontinue gsinterpret gsmainrunstringwithlength...

OSV-2021-308 Heap-buffer-overflow in flatbuffers::JsonPrinter::GenFieldOffset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30468 Crash type: Heap-buffer-overflow READ 4 Crash state: flatbuffers::JsonPrinter::GenFieldOffset flatbuffers::JsonPrinter::GenStruct flatbuffers::GenerateText...

OSV-2021-307 UNKNOWN READ in cpu_arm_exec_armeb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30444 Crash type: UNKNOWN READ Crash state: cpuarmexecarmeb resumeallvcpusarmeb vmstartarmeb...

OSV-2020-2305 UNKNOWN WRITE in tb_flush_armeb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30391 Crash type: UNKNOWN WRITE Crash state: tbflusharmeb cpuarmexecarmeb tcgcpuexecarmeb...

OSV-2021-298 Heap-buffer-overflow in http_process_user_agent

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30389 Crash type: Heap-buffer-overflow READ Crash state: httpprocessuseragent processchlo ndpisearchquic...

OSV-2021-288 UNKNOWN READ in wabt::ReadBinary

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30373 Crash type: UNKNOWN READ Crash state: wabt::ReadBinary wabt::ReadBinaryIr wasm2watfuzzer.cc...

OSV-2021-285 Use-of-uninitialized-value in grk::FileFormat::apply_palette_clr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30273 Crash type: Use-of-uninitialized-value Crash state: grk::FileFormat::applypaletteclr grk::FileFormat::decompress grkdecompress...

OSV-2021-282 Heap-buffer-overflow in LibRaw_buffer_datastream::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30324 Crash type: Heap-buffer-overflow WRITE Crash state: LibRawbufferdatastream::read LibRaw::uncompressedfpdngloadraw LibRaw::unpack...

OSV-2021-281 Heap-buffer-overflow in flatbuffers::Table* flatbuffers::GetMutableRoot<flatbuffers::Table>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30289 Crash type: Heap-buffer-overflow READ 4 Crash state: flatbuffers::Table flatbuffers::GetMutableRoot flatbuffers::Table const flatbuffers::GetRoot flatbuffers::JsonPrinter::GenFieldOffset...

OSV-2021-278 Heap-buffer-overflow in H5MM_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30250 Crash type: Heap-buffer-overflow READ Crash state: H5MMmemcpy H5VMmemcpyvv H5Dcompactreadvv...

OSV-2021-276 Global-buffer-overflow in mode_sense_page

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30219 Crash type: Global-buffer-overflow READ 4 Crash state: modesensepage scsidiskcheckmodeselect modeselectpages...

OSV-2021-273 Heap-use-after-free in sctp_sorecvmsg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30215 Crash type: Heap-use-after-free WRITE 4 Crash state: sctpsorecvmsg usrsctprecvv handleupcall...

OSV-2021-269 Stack-use-after-return in sta_prop_equal_fn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30192 Crash type: Stack-use-after-return READ 6 Crash state: stapropequalfn wmemmapinsert dissectieeeNUMBERcommon...