OSV-2020-1976 Use-of-uninitialized-value in FLAC::Decoder::FuzzerStream::write_callback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16503 Crash type: Use-of-uninitialized-value Crash state: FLAC::Decoder::FuzzerStream::writecallback writeaudioframetoclient readframe...

OSV-2020-1965 UNKNOWN READ in asn1_item_print_ctx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13920 Crash type: UNKNOWN READ Crash state: asn1itemprintctx asn1templateprintctx asn1itemprintctx...

opensc:fuzz_pkcs15_reader: Stack-buffer-overflow in fuzz_reader_transmit

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5085716578828288 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

qcms:fuzz: Heap-buffer-overflow in qcms::chain::qcms_modular_transform_create_lut::h1a73851109fbc700

Detailed Report: https://oss-fuzz.com/testcase?key=5081913385287680 Project: qcms Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasanqcms Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6020000000b8 Crash State:...

ffmpeg:ffmpeg_AV_CODEC_ID_MOBICLIP_fuzzer: Heap-buffer-overflow in predict_motion

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5688995402743808 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDMOBICLIPfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Addres...

envoy:health_check_fuzz_test: Crash in std::__1::vector<std::__1::unique_ptr<Envoy::Upstream::HttpHealthCheckerImplTest

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5662540920782848 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: healthcheckfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000001990 Cra...

envoy:health_check_fuzz_test: Crash in Envoy::Upstream::TcpHealthCheckFuzz::raiseEvent

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5704831886688256 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: healthcheckfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000019a0 Cra...

OSV-2020-1945 UNKNOWN READ in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20038 Crash type: UNKNOWN READ Crash state: helpeructracecode...

OSV-2020-1944 Use-of-uninitialized-value in RenderMVGContent

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26073 Crash type: Use-of-uninitialized-value Crash state: RenderMVGContent DrawCompositeMask RenderMVGContent...

OSV-2020-1928 UNKNOWN READ in net_field_length_size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19830 Crash type: UNKNOWN READ Crash state: netfieldlengthsize netfieldlengthllsafe readokex...

OSV-2020-1923 Heap-buffer-overflow in do_print_ex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13914 Crash type: Heap-buffer-overflow READ 1 Crash state: doprintex asn1itemprintctx ASN1itemprint...

OSV-2020-1899 Heap-buffer-overflow in DeblockChromaLt42_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26068 Crash type: Heap-buffer-overflow READ 1 Crash state: DeblockChromaLt42c DeblockChromaLt4H2c WelsDec::FilteringEdgeChromaHV...

OSV-2020-1898 Heap-buffer-overflow in WelsDec::UpdateP16x16RefIdx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26078 Crash type: Heap-buffer-overflow WRITE 2 Crash state: WelsDec::UpdateP16x16RefIdx WelsDec::PredBDirectTemporal WelsDec::ParseInterBInfo...

OSV-2020-1897 Heap-buffer-overflow in stbi__tga_load

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22651 Crash type: Heap-buffer-overflow READ 3 Crash state: stbitgaload stbiloadmain stbiloadandpostprocess8bit...

glib:fuzz_uri_escape: Crash in g_string_insert_len

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed Report: https://oss-fuzz.com/testcase?key=6320624772055040 Project: glib Fuzzing Engine: libFuzzer Fuzz Target: fuzzuriescape Job Type: libfuzzermsanglib Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x728000010000 Crash State...

suricata:fuzz_siginit: Use-of-uninitialized-value in DetectDatarepParse

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=5762961148477440 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsiginit Job Type: libfuzzermsansuricata Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_MOBICLIP_fuzzer: Heap-buffer-overflow in predict_motion

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5758146355920896 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDMOBICLIPfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

openh264:decoder_fuzzer: Heap-buffer-overflow in DeblockChromaLt42_c

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=5460887169925120 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzerasani386openh264 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

arrow:parquet-arrow-fuzz: Negative-size-param in CopyUncompressedBlockToOutput

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=4914963406389248 Project: arrow Fuzzing Engine: honggfuzz Fuzz Target: parquet-arrow-fuzz Job Type: honggfuzzasanarrow Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in parquet::SerializedPageReader::DecompressIfNeeded

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5086499571499008 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...