OSV-2018-459 Use-of-uninitialized-value in lex_white

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5632 Crash type: Use-of-uninitialized-value Crash state: lexwhite pdflex pdfprocessstream...

OSV-2017-154 Heap-buffer-overflow in TetrahedralInterpFloat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=852 Crash type: Heap-buffer-overflow READ 4 Crash state: TetrahedralInterpFloat LUTeval16 CachedXFORM...

OSV-2018-451 Use-of-uninitialized-value in jbig2_huffman_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9682 Crash type: Use-of-uninitialized-value Crash state: jbig2huffmanget jbig2decodesymboldict jbig2symboldictionary...

OSV-2018-448 Use-of-uninitialized-value in CachedXFORM4to3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5623 Crash type: Use-of-uninitialized-value Crash state: CachedXFORM4to3 cmsDoTransform fzlcmstransformpixmap...

OSV-2018-446 Use-of-uninitialized-value in fz_drop_key_storable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5879 Crash type: Use-of-uninitialized-value Crash state: fzdropkeystorable fzdropcolorspacecontext fzdropcontext...

OSV-2018-441 Stack-buffer-underflow in ps_index

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9970 Crash type: Stack-buffer-underflow READ 8 Crash state: psindex psrun evalpostscriptfunc...

OSV-2018-422 Use-of-uninitialized-value in cf2_glyphpath_pushPrevElem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5659 Crash type: Use-of-uninitialized-value Crash state: cf2glyphpathpushPrevElem cf2glyphpathcurveTo cf2interpT2CharString...

OSV-2018-413 Use-of-uninitialized-value in fz_adjust_ft_glyph_width

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5596 Crash type: Use-of-uninitialized-value Crash state: fzadjustftglyphwidth doftrenderglyph fzrenderftglyph...

OSV-2018-417 UNKNOWN READ in boost::sub_match<std::__1::__wrap_iter<char const*> >::sub_match

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9539 Crash type: UNKNOWN READ Crash state: boost::submatch ::submatch ZNSt316vectorIN5boost9submatchINS11wrapiterIPKcEEEENS9allocatorIS7EEE1 boost::matchresults, std::1::allocatorboo...

OSV-2018-408 Use-of-uninitialized-value in fz_is_empty_irect

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5865 Crash type: Use-of-uninitialized-value Crash state: fzisemptyirect fzintersectirect fzdrawclippath...

OSV-2018-388 Use-of-uninitialized-value in MatShaperEval16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5748 Crash type: Use-of-uninitialized-value Crash state: MatShaperEval16 PrecalculatedXFORM cmsDoTransform...

OSV-2018-389 UNKNOWN READ in boost::re_detail_NUMBER::basic_regex_creator<char, boost::regex_traits<char, boo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6708 Crash type: UNKNOWN READ Crash state: boost::redetailNUMBER::basicregexcreatorchar, boost::regextraitschar, boo boost::redetailNUMBER::basicregexcreatorchar, boost::regextraitschar, boo...

OSV-2018-384 Use-of-uninitialized-value in template_affine_N_lerp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5616 Crash type: Use-of-uninitialized-value Crash state: templateaffineNlerp paintaffinelerpdasa0 fzpaintimageimp...

OSV-2018-367 Use-of-uninitialized-value in cf2_glyphpath_lineTo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8323 Crash type: Use-of-uninitialized-value Crash state: cf2glyphpathlineTo cf2glyphpathcloseOpenPath cf2glyphpathmoveTo...

OSV-2018-368 Use-of-uninitialized-value in evict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5666 Crash type: Use-of-uninitialized-value Crash state: evict fzemptystore fzdropstorecontext...

OSV-2018-369 Negative-size-param in get_urls_css

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8032 Crash type: Negative-size-param Crash state: geturlscss wgetcssfuzzer.c...

OSV-2018-347 Heap-use-after-free in fz_drop_key_storable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5521 Crash type: Heap-use-after-free READ 4 Crash state: fzdropkeystorable fzdropdefaultcolorspaces fzdrawdropdevice...

OSV-2018-335 Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10888 Crash type: Null-dereference READ Crash state: NULL...

OSV-2018-332 UNKNOWN READ in template_affine_color_N_lerp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6522 Crash type: UNKNOWN READ Crash state: templateaffinecolorNlerp paintaffinecolorlerpN fzpaintimageimp...

OSV-2017-138 Heap-use-after-free in gnutls_x509_crl_deinit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1304 Crash type: Heap-use-after-free READ 8 Crash state: gnutlsx509crldeinit gnutlspkcs12simpleparse start...