OSV-2020-299 Bad-free in sig_destroyed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17160 Crash type: Bad-free Crash state: sigdestroyed signalemitreal signalemit...

OSV-2020-288 Heap-use-after-free in pixReadMemBmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19723 Crash type: Heap-use-after-free READ Crash state: pixReadMemBmp pixReadMem pixrotateshearfuzzer.cc...

OSV-2020-289 Stack-buffer-overflow in ot::Message::Write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17147 Crash type: Stack-buffer-overflow READ Crash state: ot::Message::Write ot::Message::Append ot::Mle::Mle::AppendNetworkData...

OSV-2020-287 Heap-use-after-free in condition_free_list_type

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13882 Crash type: Heap-use-after-free READ 8 Crash state: conditionfreelisttype configparsenetcondition nextassignment...

OSV-2020-280 Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15458 Crash type: Null-dereference READ Crash state: NULL...

OSV-2020-273 Heap-use-after-free in copy_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19509 Crash type: Heap-use-after-free READ 1 Crash state: copystring douncompressblock processblock...

OSV-2020-261 Use-of-uninitialized-value in WelsDec::CWelsDecoder::ReleaseBufferedReadyPicture

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18744 Crash type: Use-of-uninitialized-value Crash state: WelsDec::CWelsDecoder::ReleaseBufferedReadyPicture WelsDec::CWelsDecoder::ReorderPicturesInDisplay WelsDec::CWelsDecoder::DecodeFrame2WithCtx...

OSV-2020-263 Heap-use-after-free in dotnet_parse_tilde_2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19179 Crash type: Heap-use-after-free READ 2 Crash state: dotnetparsetilde2 dotnetparsetilde dotnetparsecom...

OSV-2020-257 Heap-use-after-free in ihevcd_jobq_lock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17553 Crash type: Heap-use-after-free READ 4 Crash state: ihevcdjobqlock ihevcdjobqyield ihevcdjobqdequeue...

c-blosc:compress_fuzzer: Heap-buffer-overflow in blosclz_compress

Project: https://github.com/Blosc/c-blosc.git Detailed Report: https://oss-fuzz.com/testcase?key=5869677174849536 Project: c-blosc Fuzzing Engine: libFuzzer Fuzz Target: compressfuzzer Job Type: libfuzzerasanc-blosc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

opensc:fuzz_pkcs15_reader: Memcpy-param-overlap in authentic_set_current_files

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5161383229652992 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address:...

llvm:clang-objc-fuzzer: Segv on unknown address in clang::Parser::parseObjCTypeArgsAndProtocolQualifiers

Detailed Report: https://oss-fuzz.com/testcase?key=5708079416213504 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

augeas:augeas_api_fuzzer: Crash in eval_expr

Detailed Report: https://oss-fuzz.com/testcase?key=5971328632094720 Project: augeas Fuzzing Engine: libFuzzer Fuzz Target: augeasapifuzzer Job Type: libfuzzerasanaugeas Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x60340000aa1c Crash State: evalexpr evalbinary evalexpr Sanitizer:...

imagemagick:ping_dng_fuzzer: Global-buffer-overflow in LibRaw::parseCanonMakernotes

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5655361509130240 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingdngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Cra...

imagemagick:encoder_dng_fuzzer: Global-buffer-overflow in LibRaw::parseSigmaMakernote

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5693021307011072 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderdngfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Global-buffer-overflow READ 4...

libxml2:html: Heap-use-after-free in xmlParserPrintFileContextInternal

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=4858748979118080 Project: libxml2 Fuzzing Engine: honggfuzz Fuzz Target: html Job Type: honggfuzzasanlibxml2 Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6210000079...

hoextdown:hoedown_fuzzer: Heap-buffer-overflow in is_codefence

Project: https://github.com/kjdev/hoextdown.git Detailed Report: https://oss-fuzz.com/testcase?key=4826354641272832 Project: hoextdown Fuzzing Engine: afl Fuzz Target: hoedownfuzzer Job Type: aflasanhoextdown Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6060000003c0...

jbig2dec:jbig2_fuzzer: Use-of-uninitialized-value in jbig2_arith_decode

Detailed Report: https://oss-fuzz.com/testcase?key=5970349664763904 Project: jbig2dec Fuzzing Engine: libFuzzer Fuzz Target: jbig2fuzzer Job Type: libfuzzermsanjbig2dec Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: jbig2arithdecode jbig2decoderefinementTPGR...

leptonica:dewarp_fuzzer: Heap-buffer-overflow in rasteropGeneralLow

Detailed Report: https://oss-fuzz.com/testcase?key=5081162166042624 Project: leptonica Fuzzing Engine: afl Fuzz Target: dewarpfuzzer Job Type: aflasanleptonica Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6020000002c0 Crash State: rasteropGeneralLow rasteropLow...

imagemagick:ping_mvg_fuzzer: Heap-buffer-overflow in DrawPrimitive

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5681725698211840 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...