OSV-2020-1887 Heap-buffer-overflow in zmq::tcp_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26042 Crash type: Heap-buffer-overflow WRITE Crash state: zmq::tcpread zmq::streamenginebaset::read zmq::streamenginebaset::ineventinternal...

OSV-2020-1886 Use-of-uninitialized-value in gs_scan_token

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21622 Crash type: Use-of-uninitialized-value Crash state: gsscantoken interp gscallinterp...

OSV-2020-1885 Heap-use-after-free in xmlStaticCopyNode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26022 Crash type: Heap-use-after-free READ 4 Crash state: xmlStaticCopyNode xmlCopyNode xmlXIncludeLoadTxt...

OSV-2020-1883 Use-of-uninitialized-value in s_exD_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22225 Crash type: Use-of-uninitialized-value Crash state: sexDprocess sreadbuf sprocessreadbuf...

OSV-2020-1884 Segv on unknown address in process_ndpi_collected_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26015 Crash type: Segv on unknown address Crash state: processndpicollectedinfo packetprocessing ndpiworkflowprocesspacket...

OSV-2020-1882 Use-of-uninitialized-value in gx_dc_ht_colored_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21617 Crash type: Use-of-uninitialized-value Crash state: gxdchtcoloredread clistplaybackband clistplaybackfilebands...

OSV-2020-1880 Use-of-uninitialized-value in c_pdf14trans_clist_read_update

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21640 Crash type: Use-of-uninitialized-value Crash state: cpdf14transclistreadupdate applycreatecompositor executecompositorqueue...

OSV-2020-1878 Use-of-uninitialized-value in s_A85D_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21616 Crash type: Use-of-uninitialized-value Crash state: sA85Dprocess gsscantoken interp...

OSV-2020-1877 Use-of-uninitialized-value in FAPI_FF_get_glyph

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23115 Crash type: Use-of-uninitialized-value Crash state: FAPIFFgetglyph getfapiglyphdata loadtruetypeglyph...

OSV-2020-1876 UNKNOWN READ in mem_mapped4_fill_rectangle

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22007 Crash type: UNKNOWN READ Crash state: memmapped4fillrectangle gxdcpurefillrectangle gxdefaultfillpage...

OSV-2020-1875 Heap-use-after-free in dict_find_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20652 Crash type: Heap-use-after-free READ 8 Crash state: dictfindstring gsmaintempnames gsmainfinit...

OSV-2020-1874 Use-of-uninitialized-value in load_truetype_glyph

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22182 Crash type: Use-of-uninitialized-value Crash state: loadtruetypeglyph TTLoadGlyph ttglyphload...

OSV-2020-1872 Use-of-uninitialized-value in s_exD_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21643 Crash type: Use-of-uninitialized-value Crash state: sexDprocess sreadbuf sgets...

OSV-2020-1873 Use-of-uninitialized-value in zcheck_r6_password

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23440 Crash type: Use-of-uninitialized-value Crash state: zcheckr6password interp gscallinterp...

OSV-2020-1870 Use-of-uninitialized-value in get_fapi_glyph_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22752 Crash type: Use-of-uninitialized-value Crash state: getfapiglyphdata loadtruetypeglyph TTLoadGlyph...

OSV-2020-1864 Heap-use-after-free in grk::TileProcessor::~TileProcessor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26008 Crash type: Heap-use-after-free READ 8 Crash state: grk::TileProcessor::TileProcessor grk::CodeStream::decompresstiles grk::CodeStream::dodecompress...

OSV-2020-1863 Bad-cast to pcpp::Layer from invalid vptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26013 Crash type: Bad-cast Crash state: Bad-cast to pcpp::Layer from invalid vptr pcpp::IDnsResource::getRawData pcpp::DnsResource::getDataLength...

OSV-2020-1860 Stack-buffer-overflow in sc_get_response

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25998 Crash type: Stack-buffer-overflow WRITE Crash state: scgetresponse sctransmit sctransmitapdu...

libxml2:xml: Heap-use-after-free in xmlStaticCopyNode

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=6039216293937152 Project: libxml2 Fuzzing Engine: honggfuzz Fuzz Target: xml Job Type: honggfuzzasanlibxml2 Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x60c00000220...

pcapplusplus:FuzzTarget: Bad-cast to pcpp::Layer from invalid vptr in pcpp::IDnsResource::getRawData

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5207250026889216 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerubsanpcapplusplus Platform Id: linux Crash Type: Bad-cast Crash Address: 0x00000179002...