OSV-2020-902 Index-out-of-bounds in QUnicodeTables::qGetProp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24266 Crash type: Index-out-of-bounds Crash state: QUnicodeTables::qGetProp QString QUnicodeTables::convertCase QString::toLowerhelper...

OSV-2020-900 Heap-buffer-overflow in sarrayAddString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23747 Crash type: Heap-buffer-overflow WRITE 8 Crash state: sarrayAddString gplotAddPlot numaQuantizeCrossingsByWidth...

OSV-2020-898 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23866 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

OSV-2020-895 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24030 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

OSV-2020-894 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23761 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

OSV-2020-892 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23909 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

OSV-2020-893 Heap-buffer-overflow in hermes::parser::JSLexer::consumeBracedCodePoint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23725 Crash type: Heap-buffer-overflow READ 1 Crash state: hermes::parser::JSLexer::consumeBracedCodePoint hermes::parser::JSLexer::consumeUnicodeEscape hermes::parser::JSLexer::advance...

OSV-2020-891 Heap-buffer-overflow in ccr_handle_message_from_client

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23965 Crash type: Heap-buffer-overflow READ 4 Crash state: ccrhandlemessagefromclient crasrclientbufferfromclient rclientmessage.cc...

OSV-2020-890 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23289 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

immer:flex-vector-gc: Crash in immer::detail::rbts::node<int, immer::memory_policy<immer::heap_policy<immer::gc

Project: https://github.com/arximboldi/immer.git Detailed Report: https://oss-fuzz.com/testcase?key=5660697665732608 Project: immer Fuzzing Engine: libFuzzer Fuzz Target: flex-vector-gc Job Type: libfuzzerasanimmer Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7083eb04e907 Crash...

immer:flex-vector-gc: Crash in decltype

Project: https://github.com/arximboldi/immer.git Detailed Report: https://oss-fuzz.com/testcase?key=6017886557306880 Project: immer Fuzzing Engine: libFuzzer Fuzz Target: flex-vector-gc Job Type: libfuzzerasanimmer Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00018055f9f9 Crash...

rnp:fuzz_dump: Global-buffer-overflow in armor_parse_header

Project: https://github.com/rnpgp/rnp.git Detailed Report: https://oss-fuzz.com/testcase?key=5787309660962816 Project: rnp Fuzzing Engine: libFuzzer Fuzz Target: fuzzdump Job Type: libfuzzerasanrnp Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x7fcc9747e7a5 Crash...

qt:qtbase_gui_text_qtextdocument_sethtml: Index-out-of-bounds in QUnicodeTables::qGetProp

Detailed Report: https://oss-fuzz.com/testcase?key=5673564766994432 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtbaseguitextqtextdocumentsethtml Job Type: libfuzzerubsanqt Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: QUnicodeTables::qGetProp QString...

skia:image_filter_deserialize: Heap-buffer-overflow in SkVertices::Builder::init

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5443473612996608 Project: skia Fuzzing Engine: afl Fuzz Target: imagefilterdeserialize Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 9 Crash Address: 0x60e0000001c0...

ots:ots-fuzzer: Use-of-uninitialized-value in ots::ParseVariationData

Project: https://github.com/khaledhosny/ots.git Detailed Report: https://oss-fuzz.com/testcase?key=6277842237915136 Project: ots Fuzzing Engine: libFuzzer Fuzz Target: ots-fuzzer Job Type: libfuzzermsanots Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

php:php-fuzz-parser: Crash in _fini

Detailed Report: https://oss-fuzz.com/testcase?key=5630056790228992 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-parser Job Type: honggfuzzasanphp Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0000012fabd4 Crash State: fini Sanitizer: address ASAN Recommended...

yara:rules_fuzzer: Use-of-uninitialized-value in yr_hash

Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=5641498071400448 Project: yara Fuzzing Engine: libFuzzer Fuzz Target: rulesfuzzer Job Type: libfuzzermsanyara Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

immer:set-gc: Crash in auto LLVMFuzzerTestOneInput::$_1::operator

Project: https://github.com/arximboldi/immer.git Detailed Report: https://oss-fuzz.com/testcase?key=5128215832821760 Project: immer Fuzzing Engine: libFuzzer Fuzz Target: set-gc Job Type: libfuzzerasanimmer Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x001cb02fb030 Crash State: aut...

stb:stb_png_read_fuzzer: Use-of-uninitialized-value in stbi__compute_transparency16

Detailed Report: https://oss-fuzz.com/testcase?key=6193806570684416 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbpngreadfuzzer Job Type: libfuzzermsanstb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: stbicomputetransparency16 stbiparsepngfile...

OSV-2020-889 Use-of-uninitialized-value in RGBTOHLS

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22740 Crash type: Use-of-uninitialized-value Crash state: RGBTOHLS XCFImageFormat::mergeRGBToRGB XCFImageFormat::mergeLayerIntoImage...