OSV-2020-1161 Heap-buffer-overflow in impeg2_fmt_conv_yuv420p_to_yuv420sp_uv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16604 Crash type: Heap-buffer-overflow WRITE 1 Crash state: impeg2fmtconvyuv420ptoyuv420spuv impeg2dformatconvert impeg2ddecpicdatathread...

OSV-2020-1167 Heap-buffer-overflow in tiffReadCallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14773 Crash type: Heap-buffer-overflow READ Crash state: tiffReadCallback OJPEGReadHeaderInfoSecTablesQTable OJPEGReadHeaderInfoSec...

OSV-2020-1153 Heap-buffer-overflow in ih264d_cavlc_4x4res_block_totalcoeff_11to16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16514 Crash type: Heap-buffer-overflow READ 4 Crash state: ih264dcavlc4x4resblocktotalcoeff11to16 ih264dcavlcparse4x4coeffn0to7 ih264dcavlcparse8x8blockbothavailable...

OSV-2020-1152 Heap-buffer-overflow in pcpp::tbp_my_own_strnlen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22483 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::tbpmyownstrnlen pcpp::HeaderField::HeaderField pcpp::TextBasedProtocolMessage::parseFields...

OSV-2020-1151 Heap-buffer-overflow in sas_read2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12774 Crash type: Heap-buffer-overflow READ 2 Crash state: sasread2 sas7bdatparsecolumnnamesubheader sas7bdatparsepagepass2...

OSV-2020-1156 Heap-buffer-overflow in mu::Parser::Sum

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22927 Crash type: Heap-buffer-overflow READ 8 Crash state: mu::Parser::Sum mu::ParserBase::ParseCmdCodeBulk mu::ParserBase::ParseString...

OSV-2020-1148 Heap-buffer-overflow in asn1_item_ex_d2i

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14217 Crash type: Heap-buffer-overflow READ 1 Crash state: asn1itemexd2i ASN1itemd2i d2iPrivateKey...

OSV-2020-1146 Heap-buffer-overflow in dex_parse_debug_item

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14021 Crash type: Heap-buffer-overflow READ 1 Crash state: dexparsedebugitem parsedexclassmethod parseclass...

OSV-2020-1142 UNKNOWN WRITE in ideint_weave_blk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16606 Crash type: UNKNOWN WRITE Crash state: ideintweaveblk ideintprocess impeg2ddeinterlace...

OSV-2020-1138 Heap-buffer-overflow in void apply_sao_internal<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14184 Crash type: Heap-buffer-overflow READ 1 Crash state: void applysaointernal void applysao threadtasksao::work...

OSV-2020-1143 UNKNOWN WRITE in mips_release_mips

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13852 Crash type: UNKNOWN WRITE Crash state: mipsreleasemips ucclose fuzzemumips32be.c...

OSV-2020-1145 Heap-buffer-overflow in ihevcd_sao_shift_ctb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16817 Crash type: Heap-buffer-overflow WRITE 1 Crash state: ihevcdsaoshiftctb ihevcdprocess ihevcdparseslicedata...

OSV-2020-1135 Heap-buffer-overflow in sas_read4

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12584 Crash type: Heap-buffer-overflow READ 4 Crash state: sasread4 sas7bcatparseblock readstatparsesas7bcat...

OSV-2020-1130 Heap-buffer-overflow in xsltFormatNumberConversion

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17171 Crash type: Heap-buffer-overflow READ 1 Crash state: xsltFormatNumberConversion xsltFormatNumberFunction xmlXPathCompOpEval...

OSV-2020-1137 Heap-use-after-free in ihevcd_jobq_lock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16884 Crash type: Heap-use-after-free READ 8 Crash state: ihevcdjobqlock ihevcdjobqyield ihevcdjobqdequeue...

OSV-2020-1136 Global-buffer-overflow in ssl_sigalg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13797 Crash type: Global-buffer-overflow READ 2 Crash state: sslsigalg tls1processsigalgs tlsextsigalgsserverparse...

OSV-2020-1131 Heap-buffer-overflow in ndpi_search_oscar_tcp_connect

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21000 Crash type: Heap-buffer-overflow READ 4 Crash state: ndpisearchoscartcpconnect checkndpitcpflowfunc ndpidetectionprocesspacket...

OSV-2020-1127 Use-of-uninitialized-value in WelsDec::CWelsDecoder::ReorderPicturesInDisplay

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12647 Crash type: Use-of-uninitialized-value Crash state: WelsDec::CWelsDecoder::ReorderPicturesInDisplay WelsDec::CWelsDecoder::DecodeFrame2 WelsDec::CWelsDecoder::DecodeFrameNoDelay...

OSV-2020-1133 Heap-buffer-overflow in ndpi_search_h323

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21289 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpisearchh323 checkndpitcpflowfunc ndpidetectionprocesspacket...

OSV-2020-1117 Heap-buffer-overflow in arrow::internal::CountSetBits

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20575 Crash type: Heap-buffer-overflow READ 8 Crash state: arrow::internal::CountSetBits arrow::Array::nullcount arrow::internal::ValidateArray...