OSV-2020-1394 Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23605 Crash type: Index-out-of-bounds Crash state: LibRaw::ahdinterpolaterandbinrgbandconverttocielab LibRaw::ahdinterpolaterandbandconverttocielab LibRaw::ahdinterpolate...

OSV-2020-1396 Segv on unknown address in llvm::llvm_unreachable_internal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23571 Crash type: Segv on unknown address Crash state: llvm::llvmunreachableinternal clang::Expr::HasSideEffects clang::Expr::HasSideEffects...

OSV-2020-1395 Heap-buffer-overflow in zmq::tcp_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23281 Crash type: Heap-buffer-overflow WRITE Crash state: zmq::tcpread zmq::streamenginebaset::read zmq::streamenginebaset::ineventinternal...

OSV-2020-1387 Heap-buffer-overflow in yr_object_set_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Heap-buffer-overflow READ 8 Crash state: yrobjectsetstring dexparse dexload...

OSV-2020-1386 Heap-buffer-overflow in parse_relocation_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24400 Crash type: Heap-buffer-overflow READ 4 Crash state: parserelocationinfo getrelocs64 relocs...

OSV-2020-1384 Segv on unknown address in llvm::llvm_unreachable_internal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19652 Crash type: Segv on unknown address Crash state: llvm::llvmunreachableinternal clang::operator clang::Sema::SetMemberAccessSpecifier...

OSV-2020-1385 Segv on unknown address in clang::Parser::TryAnnotateCXXScopeToken

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21077 Crash type: Segv on unknown address Crash state: clang::Parser::TryAnnotateCXXScopeToken clang::Parser::TryParsePtrOperatorSeq clang::Parser::TryParseDeclarator...

OSV-2020-1382 Use-of-uninitialized-value in nl_attr_is_valid

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19890 Crash type: Use-of-uninitialized-value Crash state: nlattrisvalid formatodptunattr formatodpkeyattr...

OSV-2020-1379 Heap-buffer-overflow in dotnet_parse_com

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8901 Crash type: Heap-buffer-overflow READ 16 Crash state: dotnetparsecom dotnetload yrmodulesload...

OSV-2020-1378 Segv on unknown address in clang::Expr::EvaluateKnownConstInt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20256 Crash type: Segv on unknown address Crash state: clang::Expr::EvaluateKnownConstInt clang::FieldDecl::getBitWidthValue clang::FieldDecl::isZeroLengthBitField...

OSV-2020-1377 Segv on unknown address in slice_segment_header::operator=

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22924 Crash type: Segv on unknown address Crash state: slicesegmentheader::operator= slicesegmentheader::read decodercontext::readsliceNAL...

OSV-2020-1375 Use-of-uninitialized-value in WriteBlob

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12473 Crash type: Use-of-uninitialized-value Crash state: WriteBlob WriteEPTImage WriteImage...

OSV-2020-1372 Index-out-of-bounds in stbi__build_huffman

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22584 Crash type: Index-out-of-bounds Crash state: stbibuildhuffman stbiprocessmarker stbidecodejpegheader...

OSV-2020-1367 Use-of-uninitialized-value in void intra_prediction_angular<unsigned char>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23615 Crash type: Use-of-uninitialized-value Crash state: void intrapredictionangular void decodeintrapredictioninternal decodeintraprediction...

OSV-2020-1369 Segv on unknown address in clang::Expr::skipRValueSubobjectAdjustments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23669 Crash type: Segv on unknown address Crash state: clang::Expr::skipRValueSubobjectAdjustments visitLocalsRetainedByInitializer clang::Sema::checkInitializerLifetime...

OSV-2020-1368 Segv on unknown address in clang::LookupResult::sanity

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19683 Crash type: Segv on unknown address Crash state: clang::LookupResult::sanity clang::Sema::HandleDeclarator clang::Sema::ActOnDeclarator...

OSV-2020-1366 Heap-use-after-free in RDKit::SubstanceGroup::addParentAtomWithBookmark

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24406 Crash type: Heap-use-after-free READ 4 Crash state: RDKit::SubstanceGroup::addParentAtomWithBookmark RDKit::SGroupParsing::ParseSGroupV2000VectorDataLine RDKit::ParseMolBlockProperties...

OSV-2020-1365 UNKNOWN READ in cli_vba_readdir_new

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24354 Crash type: UNKNOWN READ Crash state: clivbareaddirnew clivbascandirnew cliscanole2...

grok:grk_decompress_fuzzer: Container-overflow in grk::T2Decode::read_packet_header

Detailed Report: https://oss-fuzz.com/testcase?key=5136412048097280 Project: grok Fuzzing Engine: honggfuzz Fuzz Target: grkdecompressfuzzer Job Type: honggfuzzasangrok Platform Id: linux Crash Type: Container-overflow READ 8 Crash Address: 0x61500007a760 Crash State:...

ots:ots-fuzzer: Use-of-uninitialized-value in ots::OpenTypeGVAR::Parse

Project: https://github.com/khaledhosny/ots.git Detailed Report: https://oss-fuzz.com/testcase?key=5742168799707136 Project: ots Fuzzing Engine: libFuzzer Fuzz Target: ots-fuzzer Job Type: libfuzzermsanots Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...