OSV-2017-58 Heap-use-after-free in UA_Array_copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4300 Crash type: Heap-use-after-free READ Crash state: UAArraycopy copynoInit NodeIdcopy...

OSV-2017-55 Heap-double-free in ExtensionObject_deleteMembers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4296 Crash type: Heap-double-free Crash state: ExtensionObjectdeleteMembers UAArraydelete ArraydecodeBinary...

OSV-2021-145 Heap-buffer-overflow in H5O_dtype_decode_helper

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29536 Crash type: Heap-buffer-overflow READ 1 Crash state: H5Odtypedecodehelper H5Odtypedecode H5Odtypeshareddecode...

OSV-2017-54 Use-of-uninitialized-value in macho_parse_file_32_be

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4375 Crash type: Use-of-uninitialized-value Crash state: machoparsefile32be machoload yrmodulesload...

OSV-2021-141 Use-of-uninitialized-value in H5G__traverse_real

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29546 Crash type: Use-of-uninitialized-value Crash state: H5Gtraversereal H5Gtraverse H5Glocinfo...

OSV-2017-41 Heap-buffer-overflow in OSS_FUZZ_png_combine_row

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3606 Crash type: Heap-buffer-overflow WRITE 4 Crash state: OSSFUZZpngcombinerow OSSFUZZpngreadrow start...

OSV-2017-42 Heap-use-after-free in UA_Array_copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4346 Crash type: Heap-use-after-free READ 2 Crash state: UAArraycopy copynoInit NodeIdcopy...

OSV-2017-39 Use-of-uninitialized-value in IsRelativeSymlinkSafe

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4308 Crash type: Use-of-uninitialized-value Crash state: IsRelativeSymlinkSafe ExtractUnixLink30 ExtractSymlink...

OSV-2017-33 Use-of-uninitialized-value in __cxxabiv1::scan_eh_tab

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4307 Crash type: Use-of-uninitialized-value Crash state: cxxabiv1::scanehtab gxxpersonalityv0 UnwindRaiseException...

OSV-2018-231 Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5843 Crash type: Use-of-uninitialized-value Crash state: rawspeed::RawImageData::checkMemIsInitialized rawspeed::RawDecoder::decodeRaw rawspeed::alignedMalloc...

OSV-2018-230 Heap-buffer-overflow in rtsp_rtp_readwrite

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7105 Crash type: Heap-buffer-overflow READ 1 Crash state: rtsprtpreadwrite readwritedata Curlreadwrite...

OSV-2018-227 Heap-buffer-overflow in rawspeed::TableLookUp::setTable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5256 Crash type: Heap-buffer-overflow WRITE 2 Crash state: rawspeed::TableLookUp::setTable rawspeed::RawImageData::setTable rawspeed::DngDecoder::handleMetadata...

OSV-2018-228 Heap-buffer-overflow in g_variant_serialiser_is_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9828 Crash type: Heap-buffer-overflow READ 1 Crash state: gvariantserialiserisstring gvariantserialiserisobjectpath gvariantserialisedisnormal...

OSV-2017-29 Heap-use-after-free in UInt32_encodeBinary

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4764 Crash type: Heap-use-after-free WRITE 4 Crash state: UInt32encodeBinary UAencodeBinaryInternal UAencodeBinary...

OSV-2018-226 Heap-buffer-overflow in pcf_get_encodings

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9561 Crash type: Heap-buffer-overflow READ 1 Crash state: pcfgetencodings pcfloadfont PCFFaceInit...

OSV-2018-224 UNKNOWN READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8353 Crash type: UNKNOWN READ Crash state: NULL...

OSV-2021-120 Heap-use-after-free in UA_SecureChannel_deleteMembersCleanup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5652 Crash type: Heap-use-after-free READ 8 Crash state: UASecureChanneldeleteMembersCleanup UASecureChannelManagerdeleteMembers UAServerdelete...

OSV-2018-219 UNKNOWN READ in pcf_get_encodings

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9527 Crash type: UNKNOWN READ Crash state: pcfgetencodings pcfloadfont PCFFaceInit...

OSV-2018-213 Use-of-uninitialized-value in gvs_tuple_is_normal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9840 Crash type: Use-of-uninitialized-value Crash state: gvstupleisnormal gvariantserialisedisnormal gvsvariantisnormal...

OSV-2018-212 Heap-buffer-overflow in token_stream_prepare

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9805 Crash type: Heap-buffer-overflow READ 1 Crash state: tokenstreamprepare parse typedeclparse...