OSV-2020-2124 UNKNOWN READ in jsoncharutils.h

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26859 Crash type: UNKNOWN READ Crash state: jsoncharutils.h...

OSV-2020-2122 Heap-buffer-overflow in void parquet::internal::DefRepLevelsToListInfo<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26829 Crash type: Heap-buffer-overflow WRITE 1 Crash state: void parquet::internal::DefRepLevelsToListInfo parquet::internal::DefRepLevelsToBitmap parquet::arrow::StructReader::BuildArray...

OSV-2020-2121 Use-of-uninitialized-value in WelsDec::BaseMC

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26861 Crash type: Use-of-uninitialized-value Crash state: WelsDec::BaseMC WelsDec::GetInterBPred WelsDec::WelsMbInterPrediction...

OSV-2020-2119 UNKNOWN READ in numberparsing.h

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26858 Crash type: UNKNOWN READ Crash state: numberparsing.h...

OSV-2020-2117 Heap-buffer-overflow in flb_msgpack_gelf_value_ext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26851 Crash type: Heap-buffer-overflow READ 1 Crash state: flbmsgpackgelfvalueext flbmsgpacktogelf flbmsgpackrawtogelf...

simdjson:fuzz_ondemand: Crash in jsoncharutils.h

Project: https://github.com/simdjson/simdjson.git https://github.com/lemire/simdjson.git Detailed Report: https://oss-fuzz.com/testcase?key=6259259773550592 Project: simdjson Fuzzing Engine: libFuzzer Fuzz Target: fuzzondemand Job Type: libfuzzerubsansimdjson Platform Id: linux Crash Type: UNKNOW...

OSV-2020-2115 Use-of-uninitialized-value in DeblockChromaLt42_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26758 Crash type: Use-of-uninitialized-value Crash state: DeblockChromaLt42c DeblockChromaLt4V2c WelsDec::FilteringEdgeChromaH...

skia:sksl2spirv: Segv on unknown address in std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::Expression

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=6198631948091392 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: sksl2spirv Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

OSV-2020-2108 Stack-buffer-overflow in simdjson::internal::decimal_right_shift

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26773 Crash type: Stack-buffer-overflow READ 1 Crash state: simdjson::internal::decimalrightshift simdjson::internal::adjustedmantissa simdjson::internal::computefloatsimdjson simdjson::internal::adjustedmantissa...

skia:skruntimeeffect: Segv on unknown address in SkSL::Expression::kind

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5118234535395328 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: skruntimeeffect Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

OSV-2020-2107 Heap-buffer-overflow in WelsDec::ParseIntra4x4Mode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26723 Crash type: Heap-buffer-overflow WRITE 1 Crash state: WelsDec::ParseIntra4x4Mode WelsDec::WelsActualDecodeMbCavlcISlice WelsDec::WelsDecodeMbCavlcISlice...

OSV-2020-2106 UNKNOWN READ in grk::SparseBuffer<6u, 6u>::read_or_write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26702 Crash type: UNKNOWN READ Crash state: grk::SparseBuffer::readorwrite grk::SparseBuffer::read bool grk::decompresspartialtile...

llvm:clang-fuzzer: Global-buffer-overflow in ProcessCharEscape

Detailed Report: https://oss-fuzz.com/testcase?key=5730186039132160 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x00000ccfc3dc Crash State: ProcessCharEscape...

cras:rclient_message: Heap-buffer-overflow in ccr_handle_message_from_client

Detailed Report: https://oss-fuzz.com/testcase?key=5711735765598208 Project: cras Fuzzing Engine: libFuzzer Fuzz Target: rclientmessage Job Type: libfuzzerasancras Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x629000004208 Crash State: ccrhandlemessagefromclient...

llvm:clang-objc-fuzzer: Global-buffer-overflow in clang::Lexer::tryReadUCN

Detailed Report: https://oss-fuzz.com/testcase?key=5120846479491072 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x00000ccf823c Crash State: clang::Lexer::tryReadUCN...

OSV-2020-2103 Use-of-uninitialized-value in tinfl_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26682 Crash type: Use-of-uninitialized-value Crash state: tinfldecompress mzinflate mzuncompress2...

OSV-2020-2101 Heap-buffer-overflow in lduw_he_p

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26691 Crash type: Heap-buffer-overflow READ 2 Crash state: lduwhep ldnhep flatviewwritecontinue...

libreoffice:htmlfuzzer: Heap-use-after-free in SfxItemSet::Count

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5699610401832960 Project: libreoffice Fuzzing Engine: honggfuzz Fuzz Target: htmlfuzzer Job Type: honggfuzzasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash...

grok:grk_decompress_fuzzer: Crash in grk::SparseBuffer<6u, 6u>::read_or_write

Detailed Report: https://oss-fuzz.com/testcase?key=6267600499376128 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000003c2c Crash State: grk::SparseBuffer::readorwrite grk::SparseBuffer::rea...

skia:sksl2metal: Use-of-uninitialized-value in std::__1::default_delete<SkSL::Symbol const>::operator

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5139847045709824 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: sksl2metal Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...