OSV-2020-1022 Heap-buffer-overflow in ptls_set_negotiated_protocol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13682 Crash type: Heap-buffer-overflow READ Crash state: ptlssetnegotiatedprotocol clienthandleencryptedextensions handlehandshakerecord...

OSV-2020-1018 Heap-use-after-free in draco::Metadata::AddSubMetadata

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23342 Crash type: Heap-use-after-free READ 8 Crash state: draco::Metadata::AddSubMetadata draco::MetadataDecoder::DecodeMetadata draco::MetadataDecoder::DecodeGeometryMetadata...

OSV-2020-1023 Use-of-uninitialized-value in njs_vsprintf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23061 Crash type: Use-of-uninitialized-value Crash state: njsvsprintf njserrorfmtnew njsregexpmatchtracehandler...

OSV-2020-1010 Stack-use-after-return in ihevcd_process_thread

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16912 Crash type: Stack-use-after-return READ 8 Crash state: ihevcdprocessthread startthread...

OSV-2020-999 UNKNOWN WRITE in vcf_parse_format

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21139 Crash type: UNKNOWN WRITE Crash state: vcfparseformat vcfparse viewvcf...

OSV-2020-998 Heap-buffer-overflow in hts_md5_update

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20694 Crash type: Heap-buffer-overflow READ Crash state: htsmd5update cramdecodeslice cramnextslice...

OSV-2020-1006 Use-of-uninitialized-value in decimate_dsd_run

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19928 Crash type: Use-of-uninitialized-value Crash state: decimatedsdrun WavpackUnpackSamples WavpackSeekSample64...

OSV-2020-1011 Heap-buffer-overflow in ndpi_search_mail_smtp_tcp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18731 Crash type: Heap-buffer-overflow READ 4 Crash state: ndpisearchmailsmtptcp checkndpitcpflowfunc ndpidetectionprocesspacket...

OSV-2020-992 Heap-buffer-overflow in ndpi_search_oscar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20540 Crash type: Heap-buffer-overflow READ 4 Crash state: ndpisearchoscar checkndpitcpflowfunc ndpidetectionprocesspacket...

OSV-2020-987 UNKNOWN in TIFFReadRGBATileExt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13277 Crash type: UNKNOWN Crash state: TIFFReadRGBATileExt cv::TiffDecoder::readData cv::imread...

OSV-2020-994 Heap-buffer-overflow in getTLScertificate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19466 Crash type: Heap-buffer-overflow READ 6 Crash state: getTLScertificate tlsDetectProtocolFromCertificate ndpisearchtlstcpudp...

OSV-2020-990 UNKNOWN READ in FLAC__crc16_update_words32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16457 Crash type: UNKNOWN READ Crash state: FLACcrc16updatewords32 crc16updateblock bitreaderreadfromclient...

OSV-2020-993 Stack-buffer-overflow in write_png_comment

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16154 Crash type: Stack-buffer-overflow WRITE Crash state: writepngcomment vipsslistmap2 vipsimagemap...

OSV-2020-976 Heap-buffer-overflow in Json::OurReader::readComment

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18140 Crash type: Heap-buffer-overflow READ 1 Crash state: Json::OurReader::readComment Json::OurReader::readToken Json::OurReader::parse...

OSV-2020-981 Heap-buffer-overflow in surround51_to_stereo_downmix_mtx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20163 Crash type: Heap-buffer-overflow WRITE 4 Crash state: surround51tostereodownmixmtx crasfmtconvcreate configformatconverter...

OSV-2020-983 Heap-buffer-overflow in Sass::Prelexer::quoted_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15890 Crash type: Heap-buffer-overflow READ 1 Crash state: Sass::Prelexer::quotedstring char const Sass::Prelexer::alternatives& Sass::Parser::parsefactor...

OSV-2020-972 Heap-buffer-overflow in ndpi_search_irc_tcp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21346 Crash type: Heap-buffer-overflow READ 7 Crash state: ndpisearchirctcp checkndpitcpflowfunc ndpidetectionprocesspacket...

libyal:libfwnt_lzx_fuzzer: Use-of-uninitialized-value in libfwnt_huffman_tree_build

Detailed Report: https://oss-fuzz.com/testcase?key=5700197540429824 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libfwntlzxfuzzer Job Type: libfuzzermsanlibyal Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: libfwnthuffmantreebuild...

grok:grk_decompress_fuzzer: Heap-use-after-free in grk::TileProcessor::~TileProcessor

Detailed Report: https://oss-fuzz.com/testcase?key=5137547093868544 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x610000012890 Crash State: grk::TileProcessor::TileProcessor...

libreoffice:pptxfuzzer: Heap-buffer-overflow in AES_decrypt

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5117643946983424 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: pptxfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash...