OSV-2020-670 Memcpy-param-overlap in ot::Cli::CoapSecure::Process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12679 Crash type: Memcpy-param-overlap Crash state: ot::Cli::CoapSecure::Process ot::Cli::Interpreter::ProcessCoapSecure ot::Cli::Interpreter::ProcessLine...

OSV-2020-674 Heap-buffer-overflow in ihevcd_mv_merge

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17196 Crash type: Heap-buffer-overflow READ 4 Crash state: ihevcdmvmerge ihevcdgetmvctb ihevcdparseslicedata...

OSV-2020-668 Heap-buffer-overflow in post_process_template

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19013 Crash type: Heap-buffer-overflow READ 4 Crash state: postprocesstemplate parsershutdown parsestring...

OSV-2020-673 UNKNOWN WRITE in htp_connp_res_buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19323 Crash type: UNKNOWN WRITE Crash state: htpconnpresbuffer htpconnpRESLINE htpconnpresdata...

OSV-2020-662 UNKNOWN READ in wmem_strdup_printf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13725 Crash type: UNKNOWN READ Crash state: wmemstrdupprintf dissectparametersequence dissectrtpssubmessagev2...

OSV-2020-669 Use-of-uninitialized-value in g_date_time_get_week_number

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17648 Crash type: Use-of-uninitialized-value Crash state: gdatetimegetweeknumber gdatetimenewweek parseisoNUMBERdate...

OSV-2020-672 Stack-buffer-overflow in ot::NetworkData::NetworkData::PrefixMatch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13333 Crash type: Stack-buffer-overflow READ 1 Crash state: ot::NetworkData::NetworkData::PrefixMatch ot::NetworkData::LeaderBase::GetContext ot::Mle::MleRouter::GetNeighbor...

OSV-2020-643 UNKNOWN READ in ot::Ip6::UdpSocket::GetNext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13405 Crash type: UNKNOWN READ Crash state: ot::Ip6::UdpSocket::GetNext ot::Ip6::Udp::AddSocket ot::Ip6::UdpSocket::Open...

OSV-2020-654 Heap-buffer-overflow in ZSTD_copy16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17451 Crash type: Heap-buffer-overflow READ 16 Crash state: ZSTDcopy16 ZSTDdecompressSequencesbmi2 ZSTDdecompressBlockinternal...

OSV-2020-642 Stack-use-after-return in sdb_itoa

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12751 Crash type: Stack-use-after-return WRITE 1 Crash state: sdbitoa parseresourcedirectory parseresourcedirectory...

OSV-2020-658 Heap-buffer-overflow in inflate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15495 Crash type: Heap-buffer-overflow READ 1 Crash state: inflate perfetto::traceprocessor::GzipTraceParser::Parse perfetto::traceprocessor::TraceProcessorImpl::Parse...

OSV-2020-651 Stack-buffer-overflow in tvb_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15936 Crash type: Stack-buffer-overflow WRITE Crash state: tvbmemcpy quicextractheader dissectquic...

OSV-2020-657 UNKNOWN READ in perfetto::trace_processor::ProtoTraceParser::ParseTypedFtraceToRaw

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13724 Crash type: UNKNOWN READ Crash state: perfetto::traceprocessor::ProtoTraceParser::ParseTypedFtraceToRaw perfetto::traceprocessor::ProtoTraceParser::ParseFtracePacket...

OSV-2020-649 Heap-use-after-free in sctp_fill_hmac_digest_m

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18080 Crash type: Heap-use-after-free WRITE Crash state: sctpfillhmacdigestm sctplowlevelchunkoutput sctpmedchunkoutput...

OSV-2020-653 Heap-buffer-overflow in perfetto::base::Hash::Update

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14753 Crash type: Heap-buffer-overflow READ 1 Crash state: perfetto::base::Hash::Update perfetto::base::StringView::Hash perfetto::traceprocessor::StringPool::InternString...

OSV-2020-633 Global-buffer-overflow in ne_find_element

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15056 Crash type: Global-buffer-overflow READ 8 Crash state: nefindelement neparse nestegginit...

OSV-2020-630 Use-of-uninitialized-value in ares__parse_into_addrinfo2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15379 Crash type: Use-of-uninitialized-value Crash state: aresparseintoaddrinfo2 aresparseaaaareply ares-test-fuzz.c...

OSV-2020-626 UNKNOWN READ in ot::Buffer::GetNextBuffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13412 Crash type: UNKNOWN READ Crash state: ot::Buffer::GetNextBuffer ot::MessagePool::FreeBuffers ot::Coap::ResponsesQueue::DequeueAllResponses...

OSV-2020-639 UNKNOWN READ in ot::Dhcp6::Dhcp6Client::UpdateAddresses

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13332 Crash type: UNKNOWN READ Crash state: ot::Dhcp6::Dhcp6Client::UpdateAddresses ot::Mle::Mle::HandleStateChanged ot::Notifier::HandleStateChanged...

OSV-2020-624 Heap-buffer-overflow in LZ4_write32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15941 Crash type: Heap-buffer-overflow WRITE 4 Crash state: LZ4write32 LZ4compressfastextState LZ4compressfast...