OSV-2020-372 Heap-buffer-overflow in circular_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13435 Crash type: Heap-buffer-overflow READ Crash state: circularmemcpy rune8e9filter runfilter...

OSV-2020-365 UNKNOWN READ in fuzzshark_ip_proto-udp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16442 Crash type: UNKNOWN READ Crash state: fuzzsharkipproto-udp ghashtablelookup dissecttls...

OSV-2020-366 UNKNOWN READ in bebytes2ushort

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19039 Crash type: UNKNOWN READ Crash state: bebytes2ushort coolkeyv0getattributelen coolkeyv0getattributerecordlen...

OSV-2020-364 Stack-use-after-return in ihevcd_process_thread

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17601 Crash type: Stack-use-after-return READ 4 Crash state: ihevcdprocessthread clone...

OSV-2020-370 Heap-use-after-free in ih264_inter_pred_luma_horz_hpel_vert_qpel_ssse3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18595 Crash type: Heap-use-after-free READ 16 Crash state: ih264interpredlumahorzhpelvertqpelssse3 ih264dmotioncompensatemp ih264ddecoderecontfrnmb...

OSV-2020-347 Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14825 Crash type: Heap-buffer-overflow READ 2 Crash state: BEInt::operator unsigned short OT::IntType::operator unsigned int OT::AxisValue::sanitize...

OSV-2020-357 Heap-buffer-overflow in r_read_le32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12685 Crash type: Heap-buffer-overflow READ 1 Crash state: rreadle32 dexmethodsignature2 dexparsedebugitem...

OSV-2020-345 Index-out-of-bounds in yara_yyparse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18942 Crash type: Index-out-of-bounds Crash state: yarayyparse yrlexparserulesstring rulesfuzzer.cc...

OSV-2020-353 Stack-buffer-overflow in ot::MeshCoP::Commissioner::GeneratePskc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19386 Crash type: Stack-buffer-overflow WRITE Crash state: ot::MeshCoP::Commissioner::GeneratePskc ot::Ncp::NcpBase::HandlePropertySetSPINELPROPMESHCOPCOMMISSIONERGENERATEPS ot::Ncp::NcpBase::HandlePropertySetForSpecialPropert...

OSV-2020-342 UNKNOWN READ in ndpi_search_kerberos

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19175 Crash type: UNKNOWN READ Crash state: ndpisearchkerberos checkndpitcpflowfunc ndpidetectionprocesspacket...

OSV-2020-354 UNKNOWN READ in ot::Ip6::NetifUnicastAddress::GetNext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13409 Crash type: UNKNOWN READ Crash state: ot::Ip6::NetifUnicastAddress::GetNext ot::Ip6::Netif::RemoveUnicastAddress ot::Mle::Mle::SetStateDetached...

OSV-2020-352 Heap-buffer-overflow in searchObjectForKeyRec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14619 Crash type: Heap-buffer-overflow READ 4 Crash state: searchObjectForKeyRec searchObjectForKeyRec searchObjectForKeyRec...

OSV-2020-343 Stack-use-after-return in ot::MeshCoP::ChannelMaskEntryBase::GetChannelPage

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13741 Crash type: Stack-use-after-return READ 1 Crash state: ot::MeshCoP::ChannelMaskEntryBase::GetChannelPage ot::MeshCoP::ChannelMaskTlv::GetChannelMask ot::MeshCoP::ChannelMaskTlv::GetChannelMask...

OSV-2020-355 Use-of-uninitialized-value in LzmaDec_TryDummy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17189 Crash type: Use-of-uninitialized-value Crash state: LzmaDecTryDummy LzmaDecDecodeToDic LzmaDecDecodeToBuf...

OSV-2020-334 Heap-buffer-overflow in _iri_unescape_inline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14427 Crash type: Heap-buffer-overflow READ 1 Crash state: iriunescapeinline wgetiriparse addmirror...

OSV-2020-335 Global-buffer-overflow in template_fuzzer.cc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18988 Crash type: Global-buffer-overflow WRITE 1 Crash state: templatefuzzer.cc...

OSV-2020-317 Heap-buffer-overflow in r_core_lines_initcache

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15035 Crash type: Heap-buffer-overflow WRITE 8 Crash state: rcorelinesinitcache cblinesto rconfigseti...

OSV-2020-324 Heap-buffer-overflow in av1_convolve_2d_copy_sr_sse2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12549 Crash type: Heap-buffer-overflow READ 16 Crash state: av1convolve2dcopysrsse2 av1convolve2dfacade av1makeinterpredictor...

OSV-2020-322 Negative-size-param in parse_proxy_protocol_v2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14455 Crash type: Negative-size-param Crash state: parseproxyprotocolv2 parsehttprequest fuzzparsehttprequest...

OSV-2020-313 Heap-buffer-overflow in git_buf_decode_base85

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18882 Crash type: Heap-buffer-overflow READ 1 Crash state: gitbufdecodebase85 parsepatchbinaryside parsepatchbinary...