OSV-2021-1753 UNKNOWN READ in names_string_ref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42907 Crash type: UNKNOWN READ Crash state: namesstringref zfontglyphname pdfifapigetglyphnameorcid...

OSV-2021-1752 Heap-buffer-overflow in s_hex_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42896 Crash type: Heap-buffer-overflow READ 1 Crash state: shexprocess sexDprocess sreadbuf...

grok:grk_decompress_fuzzer: Heap-buffer-overflow in grk::GrkImage::sycc420_to_rgb

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=4673451544150016 Project: grok Fuzzing Engine: honggfuzz Fuzz Target: grkdecompressfuzzer Job Type: honggfuzzasangrok Platform Id...

c-blosc2:decompress_chunk_fuzzer: Heap-buffer-overflow in ndlz4_decompress

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=6024783781822464 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompresschunkfuzzer Job Type: libfuzzerasani386c-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

OSV-2021-1748 Heap-buffer-overflow in jxl::N_AVX2::FloatToRGBA8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42839 Crash type: Heap-buffer-overflow WRITE 1 Crash state: jxl::NAVX2::FloatToRGBA8 jxl::FinalizeImageRect jxl::ThreadPool::RunCallStatejxl::FinalizeFrameDecoding...

ghostscript:gstoraster_fuzzer: Heap-buffer-overflow in s_hex_process

Detailed Report: https://oss-fuzz.com/testcase?key=4998447122481152 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x631000088850 Crash State: shexprocess...

json-patch:fuzz_create_merge: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4586393932791808 Project: json-patch Fuzzing Engine: libFuzzer Fuzz Target: fuzzcreatemerge Job Type: libfuzzerasanjson-patch Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000201328 Crash State: NULL Sanitizer: address ASAN...

freetype2:type42-render: Use-of-uninitialized-value in af_glyph_hints_reload

Detailed Report: https://oss-fuzz.com/testcase?key=6119320575410176 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: type42-render Job Type: libfuzzermsanfreetype2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: afglyphhintsreload afcjkhintsapply...

OSV-2021-1743 Stack-buffer-overflow in strncat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42736 Crash type: Stack-buffer-overflow WRITE Crash state: strncat pdfcmapopenfile pdfireadcmap...

OSV-2021-1740 Stack-buffer-overflow in pdfi_annot_draw_LE_one

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42783 Crash type: Stack-buffer-overflow WRITE Crash state: pdfiannotdrawLEone pdfiannotdrawLE pdfiannotdrawLine...

mysql-server:fuzz_initfile: Heap-use-after-free in std::__1::pair<std::__1::__tree_iterator<std::__1::basic_string<char, std::__1::

Detailed Report: https://oss-fuzz.com/testcase?key=5187132082225152 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzinitfile Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6080000135a8 Crash State:...

OSV-2021-1736 Segv on unknown address in symhash

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42741 Crash type: Segv on unknown address Crash state: symhash hashtabsearch mlssemanticlevelexpand...

OSV-2021-1733 UNKNOWN READ in mls_semantic_level_expand

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42729 Crash type: UNKNOWN READ Crash state: mlssemanticlevelexpand policydbusercache hashtabmap...

freetype2:cidtype1-render-ftengine: Use-of-uninitialized-value in tt_face_load_font_dir

Detailed Report: https://oss-fuzz.com/testcase?key=6669422067056640 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: cidtype1-render-ftengine Job Type: libfuzzermsanfreetype2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ttfaceloadfontdir...

ghostscript:gstoraster_fuzzer: Stack-buffer-overflow in strncat

Detailed Report: https://oss-fuzz.com/testcase?key=5727155433111552 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7f8b486f5840 Crash State: strncat...

OSV-2021-1730 Heap-buffer-overflow in seturl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42708 Crash type: Heap-buffer-overflow READ Crash state: seturl parseurl curlurlset...

OSV-2021-1728 UNKNOWN READ in pdfi_dict_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42687 Crash type: UNKNOWN READ Crash state: pdfidictget pdfidictgetint pdfireadbareobject...

OSV-2021-1727 UNKNOWN WRITE in void uWS::WebSocketProtocol<true, Impl>::UnrolledXor<4>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42672 Crash type: UNKNOWN WRITE Crash state: void uWS::WebSocketProtocol::UnrolledXor void uWS::WebSocketProtocol::UnrolledXor void uWS::WebSocketProtocol::UnrolledXor...

apache-httpd:fuzz_utils: Heap-buffer-overflow in ap_is_chunked

Detailed Report: https://oss-fuzz.com/testcase?key=6641609469460480 Project: apache-httpd Fuzzing Engine: afl Fuzz Target: fuzzutils Job Type: aflasanapache-httpd Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60900011e77f Crash State: apischunked fuzzutils.c Sanitize...

mysql-server:fuzz_initfile: Heap-use-after-free in Segment::write

Detailed Report: https://oss-fuzz.com/testcase?key=5636588464373760 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzinitfile Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x60e000025e08 Crash State: Segment::write...