OSV-2020-2119 UNKNOWN READ in numberparsing.h

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26858 Crash type: UNKNOWN READ Crash state: numberparsing.h...

OSV-2020-2117 Heap-buffer-overflow in flb_msgpack_gelf_value_ext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26851 Crash type: Heap-buffer-overflow READ 1 Crash state: flbmsgpackgelfvalueext flbmsgpacktogelf flbmsgpackrawtogelf...

simdjson:fuzz_ondemand: Crash in jsoncharutils.h

Project: https://github.com/simdjson/simdjson.git https://github.com/lemire/simdjson.git Detailed Report: https://oss-fuzz.com/testcase?key=6259259773550592 Project: simdjson Fuzzing Engine: libFuzzer Fuzz Target: fuzzondemand Job Type: libfuzzerubsansimdjson Platform Id: linux Crash Type: UNKNOW...

c-blosc2:decompress_fuzzer: Crash in std::__Fuzzer::pair<std::__Fuzzer::__hash_iterator<std::__Fuzzer::__hash_node<st

Detailed Report: https://oss-fuzz.com/testcase?key=6514938623033344 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressfuzzer Job Type: libfuzzerubsanc-blosc2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fcc00066720 Crash State:...

OSV-2020-2115 Use-of-uninitialized-value in DeblockChromaLt42_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26758 Crash type: Use-of-uninitialized-value Crash state: DeblockChromaLt42c DeblockChromaLt4V2c WelsDec::FilteringEdgeChromaH...

skia:sksl2spirv: Segv on unknown address in std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::Expression

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=6198631948091392 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: sksl2spirv Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

OSV-2020-2108 Stack-buffer-overflow in simdjson::internal::decimal_right_shift

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26773 Crash type: Stack-buffer-overflow READ 1 Crash state: simdjson::internal::decimalrightshift simdjson::internal::adjustedmantissa simdjson::internal::computefloatsimdjson simdjson::internal::adjustedmantissa...

skia:skruntimeeffect: Segv on unknown address in SkSL::Expression::kind

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5118234535395328 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: skruntimeeffect Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

OSV-2020-2107 Heap-buffer-overflow in WelsDec::ParseIntra4x4Mode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26723 Crash type: Heap-buffer-overflow WRITE 1 Crash state: WelsDec::ParseIntra4x4Mode WelsDec::WelsActualDecodeMbCavlcISlice WelsDec::WelsDecodeMbCavlcISlice...

OSV-2020-2106 UNKNOWN READ in grk::SparseBuffer<6u, 6u>::read_or_write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26702 Crash type: UNKNOWN READ Crash state: grk::SparseBuffer::readorwrite grk::SparseBuffer::read bool grk::decompresspartialtile...

llvm:clang-fuzzer: Global-buffer-overflow in ProcessCharEscape

Detailed Report: https://oss-fuzz.com/testcase?key=5730186039132160 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x00000ccfc3dc Crash State: ProcessCharEscape...

exprtk:exprtk_fuzzer: Stack-buffer-overflow in exprtk::parser<double>::expression_generator<double>::synthesize_csocs_expressio

Project: https://github.com/ArashPartow/exprtk.git Detailed Report: https://oss-fuzz.com/testcase?key=5975620905074688 Project: exprtk Fuzzing Engine: libFuzzer Fuzz Target: exprtkfuzzer Job Type: libfuzzerasanexprtk Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

cras:rclient_message: Heap-buffer-overflow in ccr_handle_message_from_client

Detailed Report: https://oss-fuzz.com/testcase?key=5711735765598208 Project: cras Fuzzing Engine: libFuzzer Fuzz Target: rclientmessage Job Type: libfuzzerasancras Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x629000004208 Crash State: ccrhandlemessagefromclient...

llvm:clang-objc-fuzzer: Global-buffer-overflow in clang::Lexer::tryReadUCN

Detailed Report: https://oss-fuzz.com/testcase?key=5120846479491072 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x00000ccf823c Crash State: clang::Lexer::tryReadUCN...

exprtk:exprtk_fuzzer: Stack-buffer-overflow in exprtk::lexer::generator::scan_string

Project: https://github.com/ArashPartow/exprtk.git Detailed Report: https://oss-fuzz.com/testcase?key=5190826931781632 Project: exprtk Fuzzing Engine: libFuzzer Fuzz Target: exprtkfuzzer Job Type: libfuzzerasanexprtk Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

gdal:gdal_translate_fuzzer: Heap-buffer-overflow in GDALReplicateWord

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5688959554027520 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdaltranslatefuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

OSV-2020-2103 Use-of-uninitialized-value in tinfl_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26682 Crash type: Use-of-uninitialized-value Crash state: tinfldecompress mzinflate mzuncompress2...

OSV-2020-2101 Heap-buffer-overflow in lduw_he_p

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26691 Crash type: Heap-buffer-overflow READ 2 Crash state: lduwhep ldnhep flatviewwritecontinue...

libsndfile:sndfile_fuzzer: Use-of-uninitialized-value in exif_subchunk_parse

Project: https://github.com/libsndfile/libsndfile.git Detailed Report: https://oss-fuzz.com/testcase?key=5720629837561856 Project: libsndfile Fuzzing Engine: libFuzzer Fuzz Target: sndfilefuzzer Job Type: libfuzzermsanlibsndfile Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

libreoffice:htmlfuzzer: Heap-use-after-free in SfxItemSet::Count

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5699610401832960 Project: libreoffice Fuzzing Engine: honggfuzz Fuzz Target: htmlfuzzer Job Type: honggfuzzasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash...