OSV-2020-1117 Heap-buffer-overflow in arrow::internal::CountSetBits

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20575 Crash type: Heap-buffer-overflow READ 8 Crash state: arrow::internal::CountSetBits arrow::Array::nullcount arrow::internal::ValidateArray...

OSV-2020-1113 Heap-use-after-free in node_min_byte_len

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21998 Crash type: Heap-use-after-free READ 4 Crash state: nodeminbytelen tunequant tunetree...

OSV-2020-1121 UNKNOWN READ in vcf_format

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18196 Crash type: UNKNOWN READ Crash state: vcfformat vcfwrite bcfwrite...

OSV-2020-1114 Heap-buffer-overflow in ndpi_int_check_stun

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19332 Crash type: Heap-buffer-overflow READ 2 Crash state: ndpiintcheckstun ndpisearchstun checkndpiudpflowfunc...

OSV-2020-1098 Heap-use-after-free in WelsDec::MapColToList0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14060 Crash type: Heap-use-after-free READ 4 Crash state: WelsDec::MapColToList0 WelsDec::PredBDirectTemporal WelsDec::ParseInterBInfo...

OSV-2020-1108 Heap-buffer-overflow in Sass::Prelexer::quoted_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15890 Crash type: Heap-buffer-overflow READ 1 Crash state: Sass::Prelexer::quotedstring char const Sass::Prelexer::alternatives& Sass::Prelexer::cssvariabletoplevelvalue...

OSV-2020-1101 Heap-buffer-overflow in Sass::Prelexer::quoted_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15890 Crash type: Heap-buffer-overflow READ 1 Crash state: Sass::Prelexer::quotedstring char const Sass::Parser::lex& Sass::Parser::parsevalue...

OSV-2020-1093 Heap-buffer-overflow in mu::ParserBase::ParseCmdCodeBulk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23330 Crash type: Heap-buffer-overflow READ 8 Crash state: mu::ParserBase::ParseCmdCodeBulk mu::ParserBase::ParseString mu::ParserBase::Eval...

OSV-2020-1092 Use-of-uninitialized-value in time_update_datetime

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14744 Crash type: Use-of-uninitialized-value Crash state: timeupdatedatetime currentmrbtime mrbtimenow...

OSV-2020-1078 Heap-buffer-overflow in xmlXPathCompileExpr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18385 Crash type: Heap-buffer-overflow READ 4 Crash state: xmlXPathCompileExpr xmlXPathCtxtCompile xsltFuzzXPath...

OSV-2020-1075 Use-of-uninitialized-value in processClientServerHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21349 Crash type: Use-of-uninitialized-value Crash state: processClientServerHello processTLSBlock ndpisearchtlstcp...

OSV-2020-1081 UNKNOWN WRITE in ideint_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17077 Crash type: UNKNOWN WRITE Crash state: ideintprocess impeg2ddeinterlace impeg2ddecpicdatathread...

OSV-2020-1074 Heap-buffer-overflow in SHA1Transform

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18742 Crash type: Heap-buffer-overflow READ 4 Crash state: SHA1Transform SHA1Update getSSCertificateFingerprint...

OSV-2020-1082 Use-of-uninitialized-value in processClientServerHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21296 Crash type: Use-of-uninitialized-value Crash state: processClientServerHello processTLSBlock ndpisearchtlstcp...

OSV-2020-1076 Stack-buffer-overflow in string_scan_range

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15467 Crash type: Stack-buffer-overflow WRITE 1 Crash state: stringscanrange getstringsrange rbinfilegetstrings...

OSV-2020-1083 Heap-use-after-free in rpl_glob

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20176 Crash type: Heap-use-after-free READ Crash state: rplglob readconfigexpand readconfigexpand...

OSV-2020-1065 Use-of-uninitialized-value in xsltNumberFormatInsertNumbers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14471 Crash type: Use-of-uninitialized-value Crash state: xsltNumberFormatInsertNumbers xsltNumberFormat xsltNumber...

OSV-2020-1060 Use-of-uninitialized-value in ZSTD_createDDict_advanced

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23732 Crash type: Use-of-uninitialized-value Crash state: ZSTDcreateDDictadvanced ZSTDcreateDDict bloscrundecompressionwithcontext...

OSV-2020-1066 Heap-buffer-overflow in dav1dFeedData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21947 Crash type: Heap-buffer-overflow READ Crash state: dav1dFeedData dav1dCodecGetNextImage avifDecoderNextImage...

OSV-2020-1069 Use-of-uninitialized-value in inflate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13289 Crash type: Use-of-uninitialized-value Crash state: inflate ZIPDecode TIFFReadEncodedTileAndAllocBuffer...