OSV-2020-1368 Segv on unknown address in clang::LookupResult::sanity

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19683 Crash type: Segv on unknown address Crash state: clang::LookupResult::sanity clang::Sema::HandleDeclarator clang::Sema::ActOnDeclarator...

OSV-2020-1366 Heap-use-after-free in RDKit::SubstanceGroup::addParentAtomWithBookmark

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24406 Crash type: Heap-use-after-free READ 4 Crash state: RDKit::SubstanceGroup::addParentAtomWithBookmark RDKit::SGroupParsing::ParseSGroupV2000VectorDataLine RDKit::ParseMolBlockProperties...

OSV-2020-1365 UNKNOWN READ in cli_vba_readdir_new

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24354 Crash type: UNKNOWN READ Crash state: clivbareaddirnew clivbascandirnew cliscanole2...

Encode OSS Uvicorn Injection Vulnerability

Encode OSS Uvicorn is a British Encode OSS company based on uvloop and httptools build ASGI Web Server Gateway Interface server. An injection vulnerability exists in Encode OSS Uvicorn versions prior to 0.11.7, which stems from the program's failure to escape CRLF sequences in HTTP headers, and c...

grok:grk_decompress_fuzzer: Container-overflow in grk::T2Decode::read_packet_header

Detailed Report: https://oss-fuzz.com/testcase?key=5136412048097280 Project: grok Fuzzing Engine: honggfuzz Fuzz Target: grkdecompressfuzzer Job Type: honggfuzzasangrok Platform Id: linux Crash Type: Container-overflow READ 8 Crash Address: 0x61500007a760 Crash State:...

ots:ots-fuzzer: Use-of-uninitialized-value in ots::OpenTypeGVAR::Parse

Project: https://github.com/khaledhosny/ots.git Detailed Report: https://oss-fuzz.com/testcase?key=5742168799707136 Project: ots Fuzzing Engine: libFuzzer Fuzz Target: ots-fuzzer Job Type: libfuzzermsanots Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

rdkit:mol_data_stream_to_mol_fuzzer: Heap-use-after-free in RDKit::SubstanceGroup::addParentAtomWithBookmark

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4847273910206464 Project: rdkit Fuzzing Engine: afl Fuzz Target: moldatastreamtomolfuzzer Job Type: aflasanrdkit Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x607000002044...

radare2:ia_fuzz: Heap-buffer-overflow in parse_relocation_info

Project: https://github.com/radare/radare2.git https://github.com/radareorg/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=5169642948263936 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type:...

rnp:fuzz_dump: Global-buffer-overflow in armor_read_crc

Project: https://github.com/rnpgp/rnp.git Detailed Report: https://oss-fuzz.com/testcase?key=5954592547012608 Project: rnp Fuzzing Engine: libFuzzer Fuzz Target: fuzzdump Job Type: libfuzzerasanrnp Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x7fe71017cd8d Crash...

envoy:xds_fuzz_test: Heap-use-after-free in std::__1::__list_iterator<std::__1::unique_ptr<Envoy::Server::ListenerImpl, std:

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5715241737125888 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: xdsfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x603000f1b6...

muparser:set_eval_fuzzer: Heap-buffer-overflow in mu::ParserBase::ParseCmdCodeBulk

Project: https://github.com/beltoforion/muparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5774597245632512 Project: muparser Fuzzing Engine: libFuzzer Fuzz Target: setevalfuzzer Job Type: libfuzzerasanmuparser Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

clamav:clamav_scanfile_fuzzer: Crash in cli_vba_readdir_new

Detailed Report: https://oss-fuzz.com/testcase?key=4836521560244224 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavscanfilefuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61908ec5cbd2 Crash State: clivbareaddirnew clivbascandirnew cliscanole2...

rdkit:mol_data_stream_to_mol_fuzzer: Crash in RDKit::labelRecursivePatterns

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5694552007245824 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fff14000000...

rdkit:smiles_string_to_mol_fuzzer: Heap-buffer-overflow in RDKit::Chirality::iterateCIPRanks

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5204811577556992 Project: rdkit Fuzzing Engine: afl Fuzz Target: smilesstringtomolfuzzer Job Type: aflasanrdkit Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x602000008274...

OSV-2020-1351 Heap-use-after-free in sc_pkcs15_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17170 Crash type: Heap-use-after-free READ 4 Crash state: scpkcs15freeobject fuzzpkcs15decode.c fuzzpkcs15decode.c...

OSV-2020-1331 Heap-buffer-overflow in pcpp::GtpV1Layer::GtpExtension::getNextExtensionHeaderType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23183 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::GtpV1Layer::GtpExtension::getNextExtensionHeaderType pcpp::GtpV1Layer::GtpExtension::getNextExtension pcpp::GtpV1Layer::getHeaderLen...

OSV-2020-1332 Index-out-of-bounds in xsltSetAttrVTsegment

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14273 Crash type: Index-out-of-bounds Crash state: xsltSetAttrVTsegment xsltCompileAttr xsltParseTemplateContent...

OSV-2020-1340 Use-of-uninitialized-value in Gfx::fillPatch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15395 Crash type: Use-of-uninitialized-value Crash state: Gfx::fillPatch Gfx::doPatchMeshShFill Gfx::doShadingPatternFill...

OSV-2020-1330 Heap-buffer-overflow in mu::ParserBase::ParseCmdCodeBulk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24164 Crash type: Heap-buffer-overflow READ 8 Crash state: mu::ParserBase::ParseCmdCodeBulk mu::ParserBase::ParseString setevalfuzzer.cc...

OSV-2020-1325 Global-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21769 Crash type: Global-buffer-overflow READ 2 Crash state: BEInt::operator unsigned short OT::IntType::operator unsigned int CFF::Charset0::getglyph...