OSV-2020-680 Bad-free in sc_pkcs15_decode_prkdf_entry

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18482 Crash type: Bad-free Crash state: scpkcs15decodeprkdfentry fuzzpkcs15decode.c...

OSV-2020-685 Global-buffer-overflow in backup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18464 Crash type: Global-buffer-overflow READ 1 Crash state: backup peek lexconfig...

OSV-2020-682 Heap-use-after-free in condition_free_list_type

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13878 Crash type: Heap-use-after-free READ 8 Crash state: conditionfreelisttype linkconfigfree linkloadone...

OSV-2020-681 Heap-use-after-free in WelsDec::SetUnRef

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18459 Crash type: Heap-use-after-free WRITE 1 Crash state: WelsDec::SetUnRef WelsDec::WelsDelLongFromListSetUnref WelsDec::MMCOProcess...

OSV-2020-669 Use-of-uninitialized-value in g_date_time_get_week_number

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17648 Crash type: Use-of-uninitialized-value Crash state: gdatetimegetweeknumber gdatetimenewweek parseisoNUMBERdate...

OSV-2020-663 Heap-buffer-overflow in Variant_decodeJson

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18259 Crash type: Heap-buffer-overflow READ 4 Crash state: VariantdecodeJson UAdecodeJson fuzzjsondecodeencode.cc...

OSV-2020-674 Heap-buffer-overflow in ihevcd_mv_merge

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17196 Crash type: Heap-buffer-overflow READ 4 Crash state: ihevcdmvmerge ihevcdgetmvctb ihevcdparseslicedata...

OSV-2020-671 Heap-use-after-free in WelsDec::SetUnRef

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18743 Crash type: Heap-use-after-free WRITE 1 Crash state: WelsDec::SetUnRef WelsDec::SlidingWindow WelsDec::WelsMarkAsRef...

OSV-2020-672 Stack-buffer-overflow in ot::NetworkData::NetworkData::PrefixMatch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13333 Crash type: Stack-buffer-overflow READ 1 Crash state: ot::NetworkData::NetworkData::PrefixMatch ot::NetworkData::LeaderBase::GetContext ot::Mle::MleRouter::GetNeighbor...

OSV-2020-668 Heap-buffer-overflow in post_process_template

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19013 Crash type: Heap-buffer-overflow READ 4 Crash state: postprocesstemplate parsershutdown parsestring...

OSV-2020-670 Memcpy-param-overlap in ot::Cli::CoapSecure::Process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12679 Crash type: Memcpy-param-overlap Crash state: ot::Cli::CoapSecure::Process ot::Cli::Interpreter::ProcessCoapSecure ot::Cli::Interpreter::ProcessLine...

OSV-2020-662 UNKNOWN READ in wmem_strdup_printf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13725 Crash type: UNKNOWN READ Crash state: wmemstrdupprintf dissectparametersequence dissectrtpssubmessagev2...

OSV-2020-673 UNKNOWN WRITE in htp_connp_res_buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19323 Crash type: UNKNOWN WRITE Crash state: htpconnpresbuffer htpconnpRESLINE htpconnpresdata...

OSV-2020-653 Heap-buffer-overflow in perfetto::base::Hash::Update

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14753 Crash type: Heap-buffer-overflow READ 1 Crash state: perfetto::base::Hash::Update perfetto::base::StringView::Hash perfetto::traceprocessor::StringPool::InternString...

OSV-2020-651 Stack-buffer-overflow in tvb_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15936 Crash type: Stack-buffer-overflow WRITE Crash state: tvbmemcpy quicextractheader dissectquic...

OSV-2020-649 Heap-use-after-free in sctp_fill_hmac_digest_m

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18080 Crash type: Heap-use-after-free WRITE Crash state: sctpfillhmacdigestm sctplowlevelchunkoutput sctpmedchunkoutput...

OSV-2020-657 UNKNOWN READ in perfetto::trace_processor::ProtoTraceParser::ParseTypedFtraceToRaw

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13724 Crash type: UNKNOWN READ Crash state: perfetto::traceprocessor::ProtoTraceParser::ParseTypedFtraceToRaw perfetto::traceprocessor::ProtoTraceParser::ParseFtracePacket...

OSV-2020-658 Heap-buffer-overflow in inflate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15495 Crash type: Heap-buffer-overflow READ 1 Crash state: inflate perfetto::traceprocessor::GzipTraceParser::Parse perfetto::traceprocessor::TraceProcessorImpl::Parse...

OSV-2020-642 Stack-use-after-return in sdb_itoa

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12751 Crash type: Stack-use-after-return WRITE 1 Crash state: sdbitoa parseresourcedirectory parseresourcedirectory...

OSV-2020-654 Heap-buffer-overflow in ZSTD_copy16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17451 Crash type: Heap-buffer-overflow READ 16 Crash state: ZSTDcopy16 ZSTDdecompressSequencesbmi2 ZSTDdecompressBlockinternal...