OSV-2018-68 Heap-buffer-overflow in read_bits_16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12817 Crash type: Heap-buffer-overflow READ 1 Crash state: readbits16 decodenumber parsetables...

OSV-2018-62 Heap-buffer-overflow in parse_odp_key_mask_attr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11170 Crash type: Heap-buffer-overflow READ 1 Crash state: parseodpkeymaskattr parseodpaction odpactionsfromstring...

OSV-2018-64 Heap-buffer-overflow in BEInt<unsigned int, 4>::operator unsigned int

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11522 Crash type: Heap-buffer-overflow READ 1 Crash state: BEInt::operator unsigned int void hbsanitizecontextt::setobject::sanitize...

OSV-2018-61 Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12312 Crash type: Heap-buffer-overflow READ 2 Crash state: BEInt::operator unsigned short OT::IntType::operator unsigned int OT::OffsetTo...

OSV-2018-59 Heap-use-after-free in read_uncompressed_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10200 Crash type: Heap-use-after-free WRITE 2 Crash state: readuncompressedheader av1decodeframeheadersandsetup aomdecodeframefromobus...

OSV-2018-58 Heap-buffer-overflow in tag_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10999 Crash type: Heap-buffer-overflow READ 2 Crash state: tagparse gittagparseraw gitobjectfromraw...

OSV-2018-56 UNKNOWN READ in OT::propagate_attachment_offsets

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11013 Crash type: UNKNOWN READ Crash state: OT::propagateattachmentoffsets OT::propagateattachmentoffsets OT::GPOS::positionfinishoffsets...

OSV-2018-55 Heap-buffer-overflow in ot::MeshForwarder::GetFramePriority

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11376 Crash type: Heap-buffer-overflow READ 8 Crash state: ot::MeshForwarder::GetFramePriority ot::MeshForwarder::HandleFragment ot::MeshForwarder::HandleReceivedFrame...

OSV-2018-54 UNKNOWN READ in BEInt<short, 2>::operator short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11305 Crash type: UNKNOWN READ Crash state: BEInt::operator short AAT::KerxSubTableFormat1::drivercontextt::transition void AAT::StateTableDriver::EntryDat...

OSV-2017-14 Use-of-uninitialized-value in Archive::ConvertFileHeader

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4614 Crash type: Use-of-uninitialized-value Crash state: Archive::ConvertFileHeader Archive::ReadHeader15 Archive::ReadHeader...

OSV-2018-50 Heap-use-after-free in UA_Session_deleteMembersCleanup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5577 Crash type: Heap-use-after-free WRITE 8 Crash state: UASessiondeleteMembersCleanup removeSessionCallback UAServerrunshutdown...

OSV-2021-69 Uncaught exception in fuzz_loader.pkg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29519 Crash type: Uncaught exception Crash state: fuzzloader.pkg fuzzloader.pkg fuzzloader.pkg...

OSV-2017-13 Heap-buffer-overflow in File::Write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4293 Crash type: Heap-buffer-overflow READ Crash state: File::Write ComprDataIO::UnpWrite CmdExtract::UnstoreFile...

OSV-2018-46 Heap-buffer-overflow in GDAL_LercNS::RLE::readCount

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9282 Crash type: Heap-buffer-overflow READ 2 Crash state: GDALLercNS::RLE::readCount GDALLercNS::RLE::decompress GDALLercNS::Lerc2::ReadMask...

OSV-2018-40 UNKNOWN READ in ftp_disconnect

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12173 Crash type: UNKNOWN READ Crash state: ftpdisconnect Curldisconnect ConnectionExists...

OSV-2017-10 Heap-use-after-free in UA_Subscription_answerPublishRequestsNoSubscription

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4097 Crash type: Heap-use-after-free READ 8 Crash state: UASubscriptionanswerPublishRequestsNoSubscription UAServerrunshutdown start...

OSV-2018-36 UNKNOWN READ in ebml_parse_chunk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7887 Crash type: UNKNOWN READ Crash state: ebmlparsechunk matroskatypefind gsttypefindfactorycallfunction...

OSV-2017-9 Use-of-uninitialized-value in QuickOpen::Read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4507 Crash type: Use-of-uninitialized-value Crash state: QuickOpen::Read Archive::Read RawRead::Read...

OSV-2018-31 Heap-buffer-overflow in emu_edge_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11389 Crash type: Heap-buffer-overflow READ 2 Crash state: emuedgec warpaffine dav1dreconbinter8bpc...

OSV-2018-29 Heap-buffer-overflow in r_bin_mdmp_get_mem_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10222 Crash type: Heap-buffer-overflow READ 8 Crash state: rbinmdmpgetmeminfo rbinmdmpgetsrwx sections...