OSV-2018-26 UNKNOWN READ in BEInt<unsigned char, 1>::operator unsigned char

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11351 Crash type: UNKNOWN READ Crash state: BEInt::operator unsigned char OT::DeviceRecord::serialize OT::hdmx::serialize...

OSV-2018-22 Heap-buffer-overflow in gvs_read_unaligned_le

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9807 Crash type: Heap-buffer-overflow READ 1 Crash state: gvsreadunalignedle gvstupleisnormal gvariantserialisedisnormal...

OSV-2018-24 Heap-buffer-overflow in pcf_get_encodings

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9608 Crash type: Heap-buffer-overflow READ 1 Crash state: pcfgetencodings pcfloadfont PCFFaceInit...

OSV-2017-8 Heap-buffer-overflow in setcharset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4161 Crash type: Heap-buffer-overflow READ 1 Crash state: setcharset loop loop...

OSV-2018-19 Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6796 Crash type: Use-of-uninitialized-value Crash state: rawspeed::RawImageData::checkMemIsInitialized rawspeed::RawDecoder::decodeRaw rawspeed::alignedMalloc...

OSV-2020-2300 Heap-buffer-overflow in H5MM_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29493 Crash type: Heap-buffer-overflow READ Crash state: H5MMstrdup H5Oattrshareddecode H5Omsgiteratereal...

OSV-2018-15 Heap-buffer-overflow in json_parse_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9922 Crash type: Heap-buffer-overflow READ 1 Crash state: jsonparsestring jsonparse jsonparsearray...

OSV-2018-17 Use-of-uninitialized-value in FT_Set_Transform

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8811 Crash type: Use-of-uninitialized-value Crash state: FTSetTransform SplashFTFont::makeGlyph SplashFont::getGlyph...

OSV-2018-10 UNKNOWN READ in __msan_memcpy.part.51

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9801 Crash type: UNKNOWN READ Crash state: msanmemcpy.part.51 gvsreadunalignedle gvsvariablesizedarrayisnormal...

OSV-2021-52 Stack-buffer-overflow in ot::KeyManager::SetMasterKey

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7766 Crash type: Stack-buffer-overflow READ 16 Crash state: ot::KeyManager::SetMasterKey ot::MeshCoP::Dataset::ApplyConfiguration ot::MeshCoP::DatasetManager::Set...

OSV-2017-3 Use-of-uninitialized-value in Archive::GetComment

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4610 Crash type: Use-of-uninitialized-value Crash state: Archive::GetComment Archive::ViewComment CmdExtract::ExtractArchive...

OSV-2018-6 Use-of-uninitialized-value in DosSlashToUnix

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9307 Crash type: Use-of-uninitialized-value Crash state: DosSlashToUnix ExtractUnixLink50 ExtractSymlink...

OSV-2017-1 Index-out-of-bounds in fuzz_send_next_response

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3956 Crash type: Index-out-of-bounds Crash state: fuzzsendnextresponse fuzzhandletransfer start...

OSV-2018-2 Heap-buffer-overflow in git_buf_vprintf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11004 Crash type: Heap-buffer-overflow READ 13 Crash state: gitbufvprintf giterrset gitstrntol32...

OSV-2018-1 Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10897 Crash type: Heap-buffer-overflow READ 1 Crash state: BEInt::operator unsigned short AAT::StateTable ::sanitize AAT::KerxSubTableFormat1::sanitize...

OSV-2021-41 Heap-buffer-overflow in BaseMemStream<char const>::getChar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29460 Crash type: Heap-buffer-overflow READ 1 Crash state: BaseMemStream::getChar Object::streamGetChar Lexer::getChar...

OSV-2021-40 Heap-buffer-overflow in rijndaelDecrypt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29454 Crash type: Heap-buffer-overflow READ 1 Crash state: rijndaelDecrypt aes256cbcdecrypt checkuserpassword...

OSV-2021-39 Heap-buffer-overflow in dotnet_parse_tilde_2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29419 Crash type: Heap-buffer-overflow READ 2 Crash state: dotnetparsetilde2 dotnetparsetilde dotnetparsecom...

OSV-2021-38 Heap-buffer-overflow in my_casedn_str_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29433 Crash type: Heap-buffer-overflow READ 2 Crash state: mycasednstrutf8 LEXUSER::init MYSQLparse...

OSV-2021-37 Heap-buffer-overflow in WelsDec::CopyRectBlock4Cols

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29431 Crash type: Heap-buffer-overflow READ 16 Crash state: WelsDec::CopyRectBlock4Cols WelsDec::GetColocatedMb WelsDec::PredMvBDirectSpatial...