OSV-2020-1212 Heap-buffer-overflow in helper_ret_stb_mmu_mips

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13489 Crash type: Heap-buffer-overflow READ 4 Crash state: helperretstbmmumips...

OSV-2020-1220 Heap-use-after-free in WelsDec::WelsReorderRefList

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12728 Crash type: Heap-use-after-free READ 4 Crash state: WelsDec::WelsReorderRefList WelsDec::DecodeCurrentAccessUnit WelsDec::ConstructAccessUnit...

OSV-2020-1211 Heap-buffer-overflow in ihevcd_parse_slice_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16805 Crash type: Heap-buffer-overflow READ 4 Crash state: ihevcdparseslicedata ihevcdnalunit ihevcddecode...

OSV-2020-1203 Heap-use-after-free in WelsDec::WelsReorderRefList

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20491 Crash type: Heap-use-after-free READ 4 Crash state: WelsDec::WelsReorderRefList WelsDec::InitRefPicList WelsDec::DecodeCurrentAccessUnit...

OSV-2020-1206 Use-of-uninitialized-value in Sass::Prelexer::quoted_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15890 Crash type: Use-of-uninitialized-value Crash state: Sass::Prelexer::quotedstring char const Sass::Prelexer::nongreedy& Sass::Parser::lookaheadforvalue...

OSV-2020-1204 Heap-buffer-overflow in pcpp::IPv4Layer::getSrcIpAddress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22427 Crash type: Heap-buffer-overflow READ 4 Crash state: pcpp::IPv4Layer::getSrcIpAddress FuzzTarget.cpp...

OSV-2020-1194 Heap-buffer-overflow in ndpi_search_mail_smtp_tcp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20563 Crash type: Heap-buffer-overflow READ 4 Crash state: ndpisearchmailsmtptcp checkndpitcpflowfunc ndpidetectionprocesspacket...

OSV-2020-1192 Index-out-of-bounds in decoder_context::has_sps

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13591 Crash type: Index-out-of-bounds Crash state: decodercontext::hassps picparameterset::read decodercontext::readppsNAL...

OSV-2020-1200 UNKNOWN WRITE in DumpModeDecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14071 Crash type: UNKNOWN WRITE Crash state: DumpModeDecode TIFFReadEncodedStrip cv::TiffDecoder::readData32FC3...

OSV-2020-1193 Heap-buffer-overflow in cdf_read_property_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16634 Crash type: Heap-buffer-overflow WRITE 4 Crash state: cdfreadpropertyinfo cdfunpacksummaryinfo cdffilesummaryinfo...

OSV-2020-1186 Index-out-of-bounds in WelsDec::DecodeCurrentAccessUnit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12668 Crash type: Index-out-of-bounds Crash state: WelsDec::DecodeCurrentAccessUnit WelsDec::ConstructAccessUnit WelsDecodeBs...

OSV-2020-1187 Heap-buffer-overflow in ndpi_int_check_stun

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18737 Crash type: Heap-buffer-overflow READ 16 Crash state: ndpiintcheckstun ndpisearchstun checkndpiudpflowfunc...

OSV-2020-1180 UNKNOWN WRITE in ideint_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18993 Crash type: UNKNOWN WRITE Crash state: ideintprocess impeg2ddeinterlace impeg2ddecpicdatathread...

OSV-2020-1188 Heap-buffer-overflow in pcpp::IPv6Extension::getExtensionLen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22105 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::IPv6Extension::getExtensionLen pcpp::IPv6Layer::parseExtensions pcpp::IPv6Layer::IPv6Layer...

OSV-2020-1171 Heap-use-after-free in JS_ReadObjectRec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21532 Crash type: Heap-use-after-free READ 4 Crash state: JSReadObjectRec JSReadObject fuzzcompile.c...

OSV-2020-1172 Global-buffer-overflow in WelsDec::ParseInterBInfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12652 Crash type: Global-buffer-overflow READ 1 Crash state: WelsDec::ParseInterBInfo WelsDec::WelsActualDecodeMbCavlcBSlice WelsDec::WelsDecodeMbCavlcBSlice...

OSV-2020-1175 Use-of-uninitialized-value in readline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21638 Crash type: Use-of-uninitialized-value Crash state: readline psscan documentload...

OSV-2020-1168 Use-of-uninitialized-value in gbNUMBER_mbc_enc_len

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21944 Crash type: Use-of-uninitialized-value Crash state: gbNUMBERmbcenclen onigencmb4codetombc parseexp...

OSV-2020-1161 Heap-buffer-overflow in impeg2_fmt_conv_yuv420p_to_yuv420sp_uv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16604 Crash type: Heap-buffer-overflow WRITE 1 Crash state: impeg2fmtconvyuv420ptoyuv420spuv impeg2dformatconvert impeg2ddecpicdatathread...

OSV-2020-1159 Segv on unknown address in arrow::ipc::ReadMessage

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20124 Crash type: Segv on unknown address Crash state: arrow::ipc::ReadMessage arrow::ipc::RecordBatchFileReader::RecordBatchFileReaderImpl::ReadMessageFromBlo...