OSV-2020-948 Heap-buffer-overflow in surround51_to_stereo_downmix_mtx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22402 Crash type: Heap-buffer-overflow WRITE 4 Crash state: surround51tostereodownmixmtx crasfmtconvcreate configformatconverter...

OSV-2020-945 Heap-buffer-overflow in pcpp::SSLExtension::getLength

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22529 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::SSLExtension::getLength pcpp::SSLExtension::getTotalLength pcpp::SSLServerHelloMessage::SSLServerHelloMessage...

OSV-2020-943 Heap-buffer-overflow in pcpp::HeaderField::HeaderField

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22528 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::HeaderField::HeaderField pcpp::TextBasedProtocolMessage::parseFields pcpp::SipResponseLayer::SipResponseLayer...

OSV-2020-941 Heap-buffer-overflow in gc_mark_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19780 Crash type: Heap-buffer-overflow READ 4 Crash state: gcmarkstring gctrace gsgcreclaim...

OSV-2020-940 Heap-use-after-free in surround51_to_stereo_downmix_mtx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21113 Crash type: Heap-use-after-free WRITE 4 Crash state: surround51tostereodownmixmtx crasfmtconvcreate configformatconverter...

OSV-2020-930 Use-of-uninitialized-value in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22087 Crash type: Use-of-uninitialized-value Crash state: std::1::basicstring, std::1::allocatorch pcpp::IDnsResource::IDnsResource pcpp::DnsQuery::DnsQuery...

OSV-2020-929 Use-of-uninitialized-value in Sass::Prelexer::quoted_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15890 Crash type: Use-of-uninitialized-value Crash state: Sass::Prelexer::quotedstring char const Sass::Parser::lex& Sass::Parser::parsevalue...

OSV-2020-927 Heap-buffer-overflow in LogLuv24toXYZ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14011 Crash type: Heap-buffer-overflow WRITE 4 Crash state: LogLuv24toXYZ Luv24toXYZ LogLuvDecode24...

OSV-2020-922 Heap-buffer-overflow in ndpi_search_h323

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22342 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpisearchh323 checkndpiudpflowfunc ndpidetectionprocesspacket...

OSV-2020-919 Use-of-uninitialized-value in ndpi_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21363 Crash type: Use-of-uninitialized-value Crash state: ndpistrdup processClientServerHello processTLSBlock...

OSV-2020-918 Heap-buffer-overflow in ndpi_search_oracle

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21780 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpisearchoracle checkndpitcpflowfunc ndpidetectionprocesspacket...

OSV-2020-912 Use-of-uninitialized-value in ndpi_fill_protocol_category

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21356 Crash type: Use-of-uninitialized-value Crash state: ndpifillprotocolcategory ndpidetectionprocesspacket fuzzprocesspacket.c...

matio:matio_fuzzer: Use-of-uninitialized-value in ReadRankDims

Project: git://git.code.sf.net/p/matio/matio Detailed Report: https://oss-fuzz.com/testcase?key=5729017844727808 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzermsanmatio Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

yara:rules_fuzzer: Use-of-uninitialized-value in yr_hash

Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=5656559112421376 Project: yara Fuzzing Engine: libFuzzer Fuzz Target: rulesfuzzer Job Type: libfuzzermsanyara Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

libvips:smartcrop_fuzzer: Segv on unknown address in vips_XYZ2Lab_line

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=4829562723368960 Project: libvips Fuzzing Engine: honggfuzz Fuzz Target: smartcropfuzzer Job Type: honggfuzzasanlibvips Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...

OSV-2020-910 Use-of-uninitialized-value in zmq::stream_engine_base_t::out_event

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24200 Crash type: Use-of-uninitialized-value Crash state: zmq::streamenginebaset::outevent zmq::epollt::loop zmq::workerpollerbaset::workerroutine...

OSV-2020-911 Heap-buffer-overflow in arrow::Status arrow::ConcatenateOffsets<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23916 Crash type: Heap-buffer-overflow READ 4 Crash state: arrow::Status arrow::ConcatenateOffsets arrow::ConcatenateImpl::Visit arrow::Status arrow::VisitTypeInline...

OSV-2020-908 Heap-use-after-free in xmlParserPrintFileContextInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24055 Crash type: Heap-use-after-free READ 1 Crash state: xmlParserPrintFileContextInternal xmlReportError xmlRaiseError...

OSV-2020-906 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24076 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

OSV-2020-907 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22512 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...