OSV-2020-1527 Use-of-uninitialized-value in ConstantString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21159 Crash type: Use-of-uninitialized-value Crash state: ConstantString SetImageProperty TIFFGetProperties...

php:php-fuzz-parser: Heap-use-after-free in destroy_op_array

Detailed Report: https://oss-fuzz.com/testcase?key=5668642998714368 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-parser Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x606000013760 Crash State: destroyoparray fuzzerdorequest...

OSV-2020-1520 Use-of-uninitialized-value in transform_4x4_luma_add_8_fallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23288 Crash type: Use-of-uninitialized-value Crash state: transform4x4lumaadd8fallback void accelerationfunctions::transform4x4dstadd void transformcoefficients...

OSV-2020-1523 UNKNOWN READ in Mat_H5ReadFieldNames

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23456 Crash type: UNKNOWN READ Crash state: MatH5ReadFieldNames MatH5ReadGroupInfo MatVarReadNextInfoIterate...

OSV-2020-1519 Index-out-of-bounds in DHT::hide_hots

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23837 Crash type: Index-out-of-bounds Crash state: DHT::hidehots LibRaw::dhtinterpolate LibRaw::dcrawprocess...

OSV-2020-1522 Segv on unknown address in clang::Sema::EnterDeclaratorContext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20232 Crash type: Segv on unknown address Crash state: clang::Sema::EnterDeclaratorContext clang::Sema::ActOnCXXEnterDeclaratorScope clang::Parser::ParseDirectDeclarator...

OSV-2020-1516 Use-of-uninitialized-value in ScaleQuantumToChar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22583 Crash type: Use-of-uninitialized-value Crash state: ScaleQuantumToChar LosslessReduceDepthOK ReadOneMNGImage...

OSV-2020-1512 Segv on unknown address in clang::Sema::SetCtorInitializers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22828 Crash type: Segv on unknown address Crash state: clang::Sema::SetCtorInitializers clang::Sema::ActOnDefaultCtorInitializers clang::Parser::ParseLexedMethodDef...

OSV-2020-1507 Index-out-of-bounds in MemoryRemoveTrailingZeros

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23127 Crash type: Index-out-of-bounds Crash state: MemoryRemoveTrailingZeros CheckPWAuthSession CheckAuthSession...

OSV-2020-1505 Heap-buffer-overflow in yr_object_set_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Heap-buffer-overflow READ 16 Crash state: yrobjectsetstring dexparse dexload...

OSV-2020-1506 Invalid-free in llvm_ks::SmallVectorImpl<llvm_ks::MCFixup>::~SmallVectorImpl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22371 Crash type: Invalid-free Crash state: llvmks::SmallVectorImpl::SmallVectorImpl llvmks::MCEncodedFragmentWithFixups::MCEncodedFragmentWithFixups llvmks::MCFragment::destroy...

OSV-2020-1503 Use-of-uninitialized-value in clip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22181 Crash type: Use-of-uninitialized-value Crash state: clip OpYCbCr420toRGB8bit::convertcolorspace heif::ColorConversionPipeline::convertimage...

OSV-2020-1504 Segv on unknown address in clang::Sema::ActOnMethodDeclaration

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19620 Crash type: Segv on unknown address Crash state: clang::Sema::ActOnMethodDeclaration clang::Parser::ParseObjCMethodDecl clang::Parser::ParseObjCMethodDefinition...

OSV-2020-1502 Use-of-uninitialized-value in void add_residual_fallback<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22810 Crash type: Use-of-uninitialized-value Crash state: void addresidualfallback void accelerationfunctions::addresidual void scalecoefficientsinternal...

OSV-2020-1498 Segv on unknown address in llvm::llvm_unreachable_internal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21075 Crash type: Segv on unknown address Crash state: llvm::llvmunreachableinternal clang::Sema::CheckAbsoluteValueFunction clang::Sema::CheckFunctionCall...

OSV-2020-1500 Heap-buffer-overflow in dotnet_parse_com

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8901 Crash type: Heap-buffer-overflow READ Crash state: dotnetparsecom dotnetload yrmodulesload...

OSV-2020-1495 Segv on unknown address in clang::ObjCMethodDecl::getOverriddenMethods

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19086 Crash type: Segv on unknown address Crash state: clang::ObjCMethodDecl::getOverriddenMethods clang::ObjCMethodDecl::findPropertyDecl clang::Sema::DiagnoseUseOfDecl...

OSV-2020-1491 Use-of-uninitialized-value in UA_Array_copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22250 Crash type: Use-of-uninitialized-value Crash state: UAArraycopy Stringcopy LocalizedTextcopy...

OSV-2020-1494 Segv on unknown address in FindDeclaringClass

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20893 Crash type: Segv on unknown address Crash state: FindDeclaringClass diagnoseBadDirectAccess CheckEffectiveAccess...

OSV-2020-1493 Heap-buffer-overflow in yr_object_set_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Heap-buffer-overflow READ 7 Crash state: yrobjectsetstring dexparse dexload...