immer:flex-vector-gc: Segv on unknown address in immer::detail::rbts::relaxed_pos<immer::detail::rbts::node<int, immer::memory_po

Project: https://github.com/arximboldi/immer.git Detailed Report: https://oss-fuzz.com/testcase?key=4872518268354560 Project: immer Fuzzing Engine: libFuzzer Fuzz Target: flex-vector-gc Job Type: libfuzzerasanimmer Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

muparser:set_eval_fuzzer: Heap-buffer-overflow in mu::ParserBase::ParseCmdCodeBulk

Project: https://github.com/beltoforion/muparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5944585399042048 Project: muparser Fuzzing Engine: libFuzzer Fuzz Target: setevalfuzzer Job Type: libfuzzerasanmuparser Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

ots:ots-fuzzer: Use-of-uninitialized-value in ots::ParseConditionTable

Project: https://github.com/khaledhosny/ots.git Detailed Report: https://oss-fuzz.com/testcase?key=5640715984699392 Project: ots Fuzzing Engine: libFuzzer Fuzz Target: ots-fuzzer Job Type: libfuzzermsanots Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

leptonica:dewarp_fuzzer: Heap-buffer-overflow in rasteropGeneralLow

Project: https://github.com/DanBloomberg/leptonica.git Detailed Report: https://oss-fuzz.com/testcase?key=5696549393530880 Project: leptonica Fuzzing Engine: afl Fuzz Target: dewarpfuzzer Job Type: aflasanleptonica Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

c-blosc2:decompress_fuzzer: Heap-use-after-free in ZSTD_DDict_dictContent

Detailed Report: https://oss-fuzz.com/testcase?key=6101295449767936 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressfuzzer Job Type: libfuzzerasanc-blosc2 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x62b00000e208 Crash State: ZSTDDDictdictContent...

OSV-2020-885 Stack-use-after-scope in coolkey_apdu_io

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23979 Crash type: Stack-use-after-scope READ 8 Crash state: coolkeyapduio coolkeyrsaop coolkeycomputecrypt...

OSV-2020-880 Heap-buffer-overflow in smtp_command_parse_line

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23514 Crash type: Heap-buffer-overflow READ 1 Crash state: smtpcommandparseline smtpcommandparse smtpcommandparsenext...

OSV-2020-881 Heap-buffer-overflow in read_uleb128

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18549 Crash type: Heap-buffer-overflow READ 1 Crash state: readuleb128 walkexports getsymbols...

OSV-2020-879 Use-of-uninitialized-value in jumpOverRec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20112 Crash type: Use-of-uninitialized-value Crash state: jumpOverRec jumpOverRec jumpOverRec...

OSV-2020-876 Use-of-uninitialized-value in XCFImageFormat::mergeRGBToRGB

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21783 Crash type: Use-of-uninitialized-value Crash state: XCFImageFormat::mergeRGBToRGB XCFImageFormat::mergeLayerIntoImage XCFImageFormat::loadLayer...

OSV-2020-875 Use-of-uninitialized-value in ndpi_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22475 Crash type: Use-of-uninitialized-value Crash state: ndpistrdup processClientServerHello processTLSBlock...

OSV-2020-868 Use-of-uninitialized-value in fetchARGB32ToRGBA64PM_avx2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21808 Crash type: Use-of-uninitialized-value Crash state: fetchARGB32ToRGBA64PMavx2 blenduntransformedgenericrgb64 fillRectnormalized...

OSV-2020-863 Use-of-uninitialized-value in QPDFTokenizer::isSpace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20391 Crash type: Use-of-uninitialized-value Crash state: QPDFTokenizer::isSpace QPDFTokenizer::presentCharacter QPDFTokenizer::readToken...

OSV-2020-862 Use-of-uninitialized-value in std::__1::vector<std::__1::vector<Sass::Extension, std::__1::allocator<Sass::Ext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21223 Crash type: Use-of-uninitialized-value Crash state: std::1::vectorstd::1::vectorSass::Extension, std::1::allocatorSass::Ext Sass::Extender::extendCompound Sass::Extender::extendComplex...

OSV-2020-859 UNKNOWN READ in H5O_sdspace_shared_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19220 Crash type: UNKNOWN READ Crash state: H5Osdspaceshareddecode H5Oattrshareddecode H5Omsgiteratereal...

OSV-2020-858 Heap-buffer-overflow in H5O_fill_new_shared_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18810 Crash type: Heap-buffer-overflow READ Crash state: H5Ofillnewshareddecode H5Omsgreadoh H5Omsgread...

OSV-2020-856 Use-of-uninitialized-value in deflate_slow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18745 Crash type: Use-of-uninitialized-value Crash state: deflateslow deflate PlFlate::handleData...

OSV-2020-855 Use-of-uninitialized-value in read_uleb128

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Use-of-uninitialized-value Crash state: readuleb128 dexparse dexload...

OSV-2020-853 Use-of-uninitialized-value in llvm_ks::MCAssembler::computeFragmentSize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22482 Crash type: Use-of-uninitialized-value Crash state: llvmks::MCAssembler::computeFragmentSize llvmks::MCAsmLayout::layoutFragment llvmks::MCAsmLayout::ensureValid...

OSV-2020-854 UNKNOWN READ in std::__1::__hash_node_base<std::__1::__hash_node<std::__1::__hash_value_type<std

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20959 Crash type: UNKNOWN READ Crash state: std::1::hashnodebasestd::1::hashnodestd::1::hashvaluetypestd std::1::hashtablestd::1::hashvaluetypestd::1::basicstringchar,...