OSV-2021-36 Use-of-uninitialized-value in grk::mct::decompress_irrev

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29413 Crash type: Use-of-uninitialized-value Crash state: grk::mct::decompressirrev grk::TileProcessor::mctdecompress grk::TileProcessor::decompresstilet1...

OSV-2021-32 Heap-use-after-free in igraph_vector_ptr_size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29408 Crash type: Heap-use-after-free READ 8 Crash state: igraphvectorptrsize igraphgmltreedestroy igraphigmlparsedatadestroy...

OSV-2021-31 Heap-buffer-overflow in TTF::be_u16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29338 Crash type: Heap-buffer-overflow READ 1 Crash state: TTF::beu16 TTF::Font::loadfromoffset TTF::Font::loadfrommemory...

OSV-2021-27 Heap-buffer-overflow in ZSTD_createDDict_advanced

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29369 Crash type: Heap-buffer-overflow READ Crash state: ZSTDcreateDDictadvanced ZSTDcreateDDict bloscrundecompressionwithcontext...

OSV-2021-25 Heap-use-after-free in igraph_read_graph_gml

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29377 Crash type: Heap-use-after-free READ 8 Crash state: igraphreadgraphgml readgmlfuzzer.c igraphigmldestroyattrs...

OSV-2021-23 UNKNOWN READ in blosc_getitem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29287 Crash type: UNKNOWN READ Crash state: bloscgetitem getcoffset framegetlazychunk...

OSV-2021-22 UNKNOWN READ in frame_get_metalayers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29280 Crash type: UNKNOWN READ Crash state: framegetmetalayers blosc2frametoschunk blosc2schunkopensframe...

OSV-2021-16 Stack-buffer-overflow in JS::Heap::gather_conservative_roots

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29266 Crash type: Stack-buffer-overflow READ 8 Crash state: JS::Heap::gatherconservativeroots JS::Heap::gatherroots JS::Heap::collectgarbage...

OSV-2021-10 Heap-buffer-overflow in sp_tohex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29185 Crash type: Heap-buffer-overflow WRITE 1 Crash state: sptohex sptoradix cryptofuzz::module::wolfCryptbignum::Bignum::baseConversion...

OSV-2021-8 Heap-buffer-overflow in ldl_he_p

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29181 Crash type: Heap-buffer-overflow READ 4 Crash state: ldlhep ldnhep flatviewwritecontinue...

OSV-2021-2 Heap-buffer-overflow in Imf_2_5::FastHufDecoder::decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29106 Crash type: Heap-buffer-overflow READ 2 Crash state: Imf25::FastHufDecoder::decode Imf25::hufUncompress Imf25::PizCompressor::uncompress...

OSV-2020-2298 UNKNOWN READ in ndpi_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29081 Crash type: UNKNOWN READ Crash state: ndpifree ndpifreeflow fuzzprocesspacket.c...

OSV-2020-2297 Heap-double-free in WelsCommon::WelsFree

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29073 Crash type: Heap-double-free Crash state: WelsCommon::WelsFree WelsCommon::CMemoryAlign::WelsFree WelsDec::FreePicture...

OSV-2020-2291 Heap-buffer-overflow in dotnet_parse_tilde_2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28981 Crash type: Heap-buffer-overflow READ 2 Crash state: dotnetparsetilde2 dotnetparsetilde dotnetparsecom...

OSV-2020-2285 Bad-cast to pcpp::Layer from invalid vptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28945 Crash type: Bad-cast Crash state: Bad-cast to pcpp::Layer from invalid vptr pcpp::IDnsResource::getRawData pcpp::DnsResource::getDataLength...

OSV-2020-2274 Heap-buffer-overflow in McCopyWidthEq4_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28769 Crash type: Heap-buffer-overflow READ 4 Crash state: McCopyWidthEq4c McCopysse2 McChromassse3...

OSV-2020-2273 Stack-buffer-overflow in perfetto::trace_processor::MemoryTrackerSnapshotParser::EmitRows

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28766 Crash type: Stack-buffer-overflow READ 4 Crash state: perfetto::traceprocessor::MemoryTrackerSnapshotParser::EmitRows perfetto::traceprocessor::MemoryTrackerSnapshotParser::GenerateGraphFromRawNode...

OSV-2020-2264 Stack-buffer-overflow in ot::IsValidUtf8String

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28682 Crash type: Stack-buffer-overflow READ 1 Crash state: ot::IsValidUtf8String ot::MeshCoP::NetworkNameTlv::IsValid ot::MeshCoP::Tlv::IsValid...

OSV-2020-2263 Heap-buffer-overflow in McChromaWithFragMv_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28639 Crash type: Heap-buffer-overflow READ 1 Crash state: McChromaWithFragMvc McChromassse3 WelsDec::BaseMC...

OSV-2020-2259 Stack-buffer-overflow in ot::MeshCoP::ChannelMaskEntry::GetMask

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28556 Crash type: Stack-buffer-overflow READ 4 Crash state: ot::MeshCoP::ChannelMaskEntry::GetMask ot::MeshCoP::ChannelMaskTlv::GetChannelMask ot::MeshCoP::Dataset::ConvertTo...