OSV-2020-2011 Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26215 Crash type: Null-dereference READ Crash state: NULL...

OSV-2020-2008 UNKNOWN WRITE in wolfCrypt_custom_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26214 Crash type: UNKNOWN WRITE Crash state: wolfCryptcustomfree wolfSSLFree GetDhPublicKey...

OSV-2020-2007 Heap-buffer-overflow in WelsDec::WelsCheckAndRecoverForFutureDecoding

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26220 Crash type: Heap-buffer-overflow WRITE Crash state: WelsDec::WelsCheckAndRecoverForFutureDecoding WelsDec::WelsInitBSliceRefList WelsDec::InitRefPicList...

OSV-2020-2005 UNKNOWN READ in grk::param_qcd::set_irrev_quant

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26207 Crash type: UNKNOWN READ Crash state: grk::paramqcd::setirrevquant grk::j2kreadSPCodSPCoc grk::j2kreadcod...

OSV-2020-2002 Heap-buffer-overflow in McChromaWithFragMv_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26198 Crash type: Heap-buffer-overflow READ 1 Crash state: McChromaWithFragMvc McChromassse3 WelsDec::BaseMC...

wolfssl:fuzzer-wolfssl-server: Crash in wolfCrypt_custom_free

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5171589131534336 Project: wolfssl Fuzzing Engine: afl Fuzz Target: fuzzer-wolfssl-server Job Type: aflasanwolfssl Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000000788e50 Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_SMVJPEG_fuzzer: Global-buffer-overflow in build_vlc

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5198809526960128 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSMVJPEGfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash...

c-blosc2:decompress_fuzzer: Heap-buffer-overflow in tinfl_decompress

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=6033831129513984 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressfuzzer Job Type: libfuzzerasani386c-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address...

libyal:libbde_volume_fuzzer: Heap-buffer-overflow in libbde_metadata_read_full_volume_encryption_key

Detailed Report: https://oss-fuzz.com/testcase?key=5127487434260480 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libbdevolumefuzzer Job Type: libfuzzerasani386libyal Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0xf5100fb4 Crash State:...

openh264:decoder_fuzzer: Heap-buffer-overflow in McChromaWithFragMv_c

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=5401862628704256 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzerasanopenh264 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

OSV-2020-1993 Heap-buffer-overflow in ojph::local::rev_fetch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26166 Crash type: Heap-buffer-overflow READ 4 Crash state: ojph::local::revfetch ojph::local::ojphdecodecodeblock grk::t1ht::T1HT::decompress...

OSV-2020-1992 Use-of-uninitialized-value in LibRaw::ljpeg_diff

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26184 Crash type: Use-of-uninitialized-value Crash state: LibRaw::ljpegdiff LibRaw::pentaxloadraw LibRaw::unpack...

pcapplusplus:FuzzTarget: Bad-cast to pcpp::IDnsResource from invalid vptr in pcpp::DnsLayer::parseResources

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4695026405474304 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerubsanpcapplusplus Platform Id: linux Crash Type: Bad-cast Crash Address: 0x00000190260...

grpc-gateway:fuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5700081334091776 Project: grpc-gateway Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasangrpc-gateway Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000027f62e71 Crash State: NULL Sanitizer: address ASAN Recommended...

grok:grk_decompress_fuzzer: Heap-buffer-overflow in ojph::local::rev_fetch

Detailed Report: https://oss-fuzz.com/testcase?key=4862900302512128 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x62900510e1fc Crash State: ojph::local::revfetch...

OSV-2020-1991 Use-of-uninitialized-value in RenderMVGContent

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26148 Crash type: Use-of-uninitialized-value Crash state: RenderMVGContent DrawImage ReadMVGImage...

wolfssl:fuzzer-wolfssl-rsa: Index-out-of-bounds in fp_read_radix_16

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=4899197473783808 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssl-rsa Job Type: libfuzzerubsanwolfssl Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

libreoffice:docxfuzzer: Heap-buffer-overflow in AES_decrypt

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5641196309053440 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: docxfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash...

libreoffice:sftfuzzer: Index-out-of-bounds in ParseCMAP

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5718992994697216 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: sftfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in sc_oberthur_parse_privateinfo

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5096082311479296 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...