OSV-2018-301 Use-of-uninitialized-value in fz_paint_triangle

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5641 Crash type: Use-of-uninitialized-value Crash state: fzpainttriangle dopainttri fzprocessshadetype4...

OSV-2018-300 Use-of-uninitialized-value in fz_unpack_tile

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8326 Crash type: Use-of-uninitialized-value Crash state: fzunpacktile fzdecompimagefromstream compressedimagegetpixmap...

OSV-2018-291 Use-of-uninitialized-value in pdf_lex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5610 Crash type: Use-of-uninitialized-value Crash state: pdflex pdfloadcmap pdfloadembeddedcmap...

OSV-2017-134 Heap-buffer-overflow in cdf_file_property_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1064 Crash type: Heap-buffer-overflow READ 1 Crash state: cdffilepropertyinfo cdffilesummaryinfo cdfchecksummaryinfo...

OSV-2018-293 Use-of-uninitialized-value in pdf_load_version

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5496 Crash type: Use-of-uninitialized-value Crash state: pdfloadversion pdfinitdocument pdfopendocumentwithstream...

OSV-2018-280 Heap-buffer-overflow in xstrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7931 Crash type: Heap-buffer-overflow READ Crash state: xstrdup ftpparsewinntls wgetftplsfuzzer.c...

OSV-2018-273 Heap-buffer-overflow in ftp_parse_winnt_ls

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7930 Crash type: Heap-buffer-overflow READ 1 Crash state: ftpparsewinntls wgetftplsfuzzer.c...

OSV-2021-184 Heap-buffer-overflow in H5HL__fl_deserialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29580 Crash type: Heap-buffer-overflow READ 1 Crash state: H5HLfldeserialize H5HLcachedatablockdeserialize H5Cloadentry...

OSV-2018-255 Heap-use-after-free in add_range

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5492 Crash type: Heap-use-after-free READ 4 Crash state: addrange pdfmaprangetorange pdfparsebfrange...

OSV-2018-252 Heap-use-after-free in fz_fin_cached_color_converter

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5604 Crash type: Heap-use-after-free READ 8 Crash state: fzfincachedcolorconverter fzpaintshade fzdrawfillshade...

OSV-2017-126 Bad-cast to const std::__1::__less<unsigned long, unsigned long> *_start

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=606 Crash type: Bad-cast Crash state: Bad-cast to const std::1::less start...

OSV-2017-121 Global-buffer-overflow in vte_write_debug

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8923 Crash type: Global-buffer-overflow READ 1 Crash state: vtewritedebug dotrans tsmvteinput...

OSV-2017-120 Global-buffer-overflow in csnStreamDissector

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1571 Crash type: Global-buffer-overflow READ 2 Crash state: csnStreamDissector csnStreamDissector csnStreamDissector...

OSV-2017-117 Use-of-uninitialized-value in CharToWide

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4290 Crash type: Use-of-uninitialized-value Crash state: CharToWide Archive::GetComment Archive::ViewComment...

OSV-2017-114 Use-of-uninitialized-value in __gxx_personality_v0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4310 Crash type: Use-of-uninitialized-value Crash state: gxxpersonalityv0 UnwindRaiseException ErrorHandler::Throw...

OSV-2017-109 Use-of-uninitialized-value in Unpack::MakeDecodeTables

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4298 Crash type: Use-of-uninitialized-value Crash state: Unpack::MakeDecodeTables Unpack::ReadTables20 Unpack::Unpack20...

OSV-2017-113 Use-of-uninitialized-value in CommandData::IsProcessFile

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4411 Crash type: Use-of-uninitialized-value Crash state: CommandData::IsProcessFile CmdExtract::ExtractCurrentFile CmdExtract::ExtractArchive...

OSV-2017-108 Heap-use-after-free in nl::wpantund::SpinelNCPInstance::should_filter_address

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4459 Crash type: Heap-use-after-free READ 6 Crash state: nl::wpantund::SpinelNCPInstance::shouldfilteraddress nl::wpantund::SpinelNCPInstance::handlencpspinelvalueinserted nl::wpantund::SpinelNCPInstance::handlencpspinelcallba...

OSV-2021-169 Heap-buffer-overflow in H5O__cont_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29549 Crash type: Heap-buffer-overflow READ 1 Crash state: H5Ocontdecode H5Ochunkdeserialize H5Ocachedeserialize...

OSV-2017-106 Use-of-uninitialized-value in getrn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2601 Crash type: Use-of-uninitialized-value Crash state: getrn lhretrieve intthreadgetitem...