OSV-2021-1780 Heap-use-after-free in zend_jit_fetch_dim_r_helper

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43055 Crash type: Heap-use-after-free READ 4 Crash state: zendjitfetchdimrhelper zero zendexecute...

OSV-2021-1779 Heap-use-after-free in Segment::write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42996 Crash type: Heap-use-after-free READ 1 Crash state: Segment::write Doublewrite::writepages Doublewrite::flushtodisk...

OSV-2021-1776 Stack-buffer-underflow in InterpretPhoneme

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43037 Crash type: Stack-buffer-underflow READ 8 Crash state: InterpretPhoneme InterpretPhoneme2 CalcLengths...

OSV-2021-1775 Heap-buffer-overflow in hfs_dir_open_meta_cb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43040 Crash type: Heap-buffer-overflow READ 1 Crash state: hfsdiropenmetacb hfscattraverse hfsdiropenmeta...

php:php-fuzz-function-jit: Heap-use-after-free in zend_jit_fetch_dim_r_helper

Detailed Report: https://oss-fuzz.com/testcase?key=5513940338081792 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-function-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x606000011c68 Crash State: zendjitfetchdimrhelper zero...

libreoffice:ww6fuzzer: Heap-use-after-free in WW8TabDesc::MergeCells

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=4666932756873216 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: ww6fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

OSV-2021-1772 UNKNOWN READ in chunk_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42998 Crash type: UNKNOWN READ Crash state: chunkfreeobject gsfontdirfinalize chunkfreeobject...

OSV-2021-1771 Stack-buffer-overflow in fn_ElIn_evaluate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43012 Crash type: Stack-buffer-overflow WRITE 4 Crash state: fnElInevaluate pdfitfusingfunction gsbegintransparencymask...

OSV-2021-1770 UNKNOWN READ in pdfi_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42980 Crash type: UNKNOWN READ Crash state: pdfifreeobject pdficlearcontext pdfifreecontext...

OSV-2021-1767 Global-buffer-overflow in pdfi_dict_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42957 Crash type: Global-buffer-overflow READ 8 Crash state: pdfidictget pdfidictgetint pdfireadbareobject...

php:php-fuzz-exif: Heap-buffer-overflow in _estrdup

Detailed Report: https://oss-fuzz.com/testcase?key=6027986250366976 Project: php Fuzzing Engine: afl Fuzz Target: php-fuzz-exif Job Type: aflasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x60900005c1be Crash State: estrdup exifprocessusercomment...

ghostscript:gstoraster_fuzzer: Crash in pdfi_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=6723025876156416 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00009fff8006 Crash State: pdfifreeobject pdficlearcontex...

OSV-2021-1764 UNKNOWN READ in read_xref_stream_entries

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42927 Crash type: UNKNOWN READ Crash state: readxrefstreamentries pdfiprocessxrefstream pdfireadxrefstreamdict...

OSV-2021-1763 Stack-buffer-overflow in pdfi_oc_is_ocg_visible

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42908 Crash type: Stack-buffer-overflow WRITE Crash state: pdfiocisocgvisible pdfiopBDC pdfiinterpretstreamoperator...

OSV-2021-1762 Heap-buffer-overflow in TTF::be_u16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42934 Crash type: Heap-buffer-overflow READ 1 Crash state: TTF::beu16 TTF::Cmap::subtable TTF::Font::tryloadfromoffset...

OSV-2021-1760 Heap-buffer-overflow in grk::GrkImage::sycc420_to_rgb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42931 Crash type: Heap-buffer-overflow WRITE 4 Crash state: grk::GrkImage::sycc420torgb grk::GrkImage::colorsycctorgb grk::GrkImage::colorConvert...

mysql-server:fuzz_initfile: Heap-use-after-free in my_malloc

Detailed Report: https://oss-fuzz.com/testcase?key=4531669137227776 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzinitfile Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6080000135a8 Crash State: mymalloc...

OSV-2021-1759 Heap-use-after-free in zend_hash_reverse_apply

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42894 Crash type: Heap-use-after-free READ 4 Crash state: zendhashreverseapply shutdowndestructors zendcalldestructors...

OSV-2021-1756 Heap-buffer-overflow in Curl_sasl_decode_mech

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42901 Crash type: Heap-buffer-overflow READ 10 Crash state: Curlsasldecodemech Curlsaslparseurlauthoption pop3parseurloptions...

OSV-2021-1755 Heap-buffer-overflow in ndlz4_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42924 Crash type: Heap-buffer-overflow READ 4 Crash state: ndlz4decompress ndlzdecompress bloscd...