OSV-2020-2067 Heap-buffer-overflow in WelsDec::DecodeCurrentAccessUnit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26302 Crash type: Heap-buffer-overflow WRITE Crash state: WelsDec::DecodeCurrentAccessUnit WelsDec::ConstructAccessUnit WelsDecodeBs...

OSV-2020-2065 Use-of-uninitialized-value in WelsDec::NeedErrorCon

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26291 Crash type: Use-of-uninitialized-value Crash state: WelsDec::NeedErrorCon WelsDec::CheckAndFinishLastPic WelsDecodeBs...

OSV-2020-2064 Heap-buffer-overflow in WelsDec::DoErrorConSliceCopy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26285 Crash type: Heap-buffer-overflow WRITE 8 Crash state: WelsDec::DoErrorConSliceCopy WelsDec::ImplementErrorCon WelsDec::CheckAndFinishLastPic...

OSV-2020-2062 Heap-buffer-overflow in WelsDec::WelsDecodeMbCabacISliceBaseMode0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26303 Crash type: Heap-buffer-overflow WRITE 4 Crash state: WelsDec::WelsDecodeMbCabacISliceBaseMode0 WelsDec::WelsDecodeMbCabacISlice WelsDec::WelsDecodeSlice...

OSV-2020-2060 Heap-buffer-overflow in fp_to_unsigned_bin_at_pos

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26295 Crash type: Heap-buffer-overflow WRITE 1 Crash state: fptounsignedbinatpos fptounsignedbin mptounsignedbin...

fluent-bit:flb-it-fuzz-parser_fuzzer_OSSFUZZ: Heap-buffer-overflow in _conv_num

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5976803149348864 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-parserfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow RE...

fluent-bit:flb-it-fuzz-parser_fuzzer_OSSFUZZ: Heap-buffer-overflow in flb_log_print

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5758082711552000 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-parserfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow RE...

fluent-bit:flb-it-fuzz-msgpack_parse_fuzzer_OSSFUZZ: Heap-buffer-overflow in encoded_to_buf

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5714223612821504 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-msgpackparsefuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type:...

wolfssl:fuzzer-wolfssl-server-randomize: Heap-buffer-overflow in fp_to_unsigned_bin_at_pos

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5123165615030272 Project: wolfssl Fuzzing Engine: afl Fuzz Target: fuzzer-wolfssl-server-randomize Job Type: aflasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

OSV-2020-2056 Heap-use-after-free in destroy_op_array

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24567 Crash type: Heap-use-after-free READ 4 Crash state: destroyoparray fuzzerdorequest fuzzerdorequestfrombuffer...

OSV-2020-2045 Use-of-uninitialized-value in WelsDec::GetColocatedMb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26272 Crash type: Use-of-uninitialized-value Crash state: WelsDec::GetColocatedMb WelsDec::PredBDirectTemporal WelsDec::WelsDecodeMbCavlcBSlice...

OSV-2020-2024 Heap-buffer-overflow in pixFindHorizontalRuns

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26268 Crash type: Heap-buffer-overflow WRITE 4 Crash state: pixFindHorizontalRuns pixFillPolygon graphicsfuzzer.cc...

OSV-2020-2018 Heap-use-after-free in fpixChangeRefcount

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26260 Crash type: Heap-use-after-free READ 4 Crash state: fpixChangeRefcount fpixDestroy fpix2fuzzer.cc...

OSV-2020-2017 Heap-buffer-overflow in flb_msgpack_to_json

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26248 Crash type: Heap-buffer-overflow WRITE 1 Crash state: flbmsgpacktojson flbmsgpackrawtojsonsds msgpackparsefuzzer.c...

leptonica:graphics_fuzzer: Heap-buffer-overflow in pixFindHorizontalRuns

Project: https://github.com/DanBloomberg/leptonica.git Detailed Report: https://oss-fuzz.com/testcase?key=5084149326807040 Project: leptonica Fuzzing Engine: afl Fuzz Target: graphicsfuzzer Job Type: aflasanleptonica Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

poppler:pdf_fuzzer: Use-of-uninitialized-value in rc4InitKey

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=5986356943388672 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

leptonica:fpix2_fuzzer: Heap-use-after-free in fpixChangeRefcount

Project: https://github.com/DanBloomberg/leptonica.git Detailed Report: https://oss-fuzz.com/testcase?key=5921278055415808 Project: leptonica Fuzzing Engine: libFuzzer Fuzz Target: fpix2fuzzer Job Type: libfuzzerasanleptonica Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address...

OSV-2020-2014 Stack-buffer-overflow in flb_sds_cat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26237 Crash type: Stack-buffer-overflow READ Crash state: flbsdscat flbmsgpackgelfvalue flbmsgpacktogelf...

fluent-bit:flb-it-fuzz-msgpack_parse_fuzzer_OSSFUZZ: Heap-buffer-overflow in flb_msgpack_to_json

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4813183069716480 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-msgpackparsefuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type:...

ffmpeg:ffmpeg_AV_CODEC_ID_CRI_fuzzer: Heap-buffer-overflow in unpack_10bit

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5161495882891264 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDCRIfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x7f513aa7828...