OSV-2020-2166 Heap-buffer-overflow in get_32aligned_be64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27524 Crash type: Heap-buffer-overflow READ 4 Crash state: get32alignedbe64 nlattrgetbe64 formatodptunattr...

PT-2020-22119

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, specifically a READ 4 crash type. The crash state involves functions such as pixChangeRefcount, pixFre...

OSV-2020-1819 Heap-buffer-overflow in void cv::copyToMat<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25779 Crash type: Heap-buffer-overflow READ 4 Crash state: void cv::copyToMat cv::decodeSRGBData cv::Jpeg2KOpjDecoder::readData...

PT-2020-21939

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A heap-use-after-free READ 4 crash type issue has been identified. The crash state involves UA NodeMap delete and UA Server new functions, as seen in the fuzz binary message.cc file...

OSV-2020-1671 Heap-buffer-overflow in Dasher::Dasher

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25243 Crash type: Heap-buffer-overflow READ 4 Crash state: Dasher::Dasher bool drawLineAA& QCosmeticStroker::drawPath...

OSV-2020-1547 Heap-use-after-free in destroy_op_array

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24436 Crash type: Heap-use-after-free READ 4 Crash state: destroyoparray fuzzerdorequest fuzzerdorequestfrombuffer...

OSV-2020-1386 Heap-buffer-overflow in parse_relocation_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24400 Crash type: Heap-buffer-overflow READ 4 Crash state: parserelocationinfo getrelocs64 relocs...

OSV-2020-1246 Stack-buffer-overflow in void apply_sao_internal<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13643 Crash type: Stack-buffer-overflow READ 4 Crash state: void applysaointernal void applysao threadtasksao::work...

OSV-2020-1185 Global-buffer-overflow in kencodingprober::nsCodingStateMachine::NextState

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12919 Crash type: Global-buffer-overflow READ 4 Crash state: kencodingprober::nsCodingStateMachine::NextState kencodingprober::nsEscCharSetProber::HandleData kencodingprober::nsUniversalDetector::HandleData...

OSV-2020-1171 Heap-use-after-free in JS_ReadObjectRec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21532 Crash type: Heap-use-after-free READ 4 Crash state: JSReadObjectRec JSReadObject fuzzcompile.c...

PT-2020-21767

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 4 crash has been reported, with the crash state involving the helper ret stb mmu mips function. No information is available abo...

PT-2020-21761

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, specifically a READ 4 crash type. The crash occurs in the following functions:...

PT-2020-21671

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, specifically a READ 4 crash type. The crash occurs in the following functions:...

PT-2020-21770

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, specifically a READ 4 crash type. The crash occurs in the WelsDec functions, including...

OSV-2020-867 Heap-buffer-overflow in icu_64::CollationIterator::appendCEsFromCE32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15613 Crash type: Heap-buffer-overflow READ 4 Crash state: icu64::CollationIterator::appendCEsFromCE32 icu64::DataBuilderCollationIterator::fetchCEs icu64::CollationDataBuilder::getCEs...

OSV-2020-789 Heap-use-after-free in llvm_ks::X86Operand::getToken

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22850 Crash type: Heap-use-after-free READ 4 Crash state: llvmks::X86Operand::getToken X86AsmParser::MatchAndEmitATTInstruction X86AsmParser::MatchAndEmitInstruction...

OSV-2020-772 Heap-buffer-overflow in __libcpp_strstr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23601 Crash type: Heap-buffer-overflow READ 4 Crash state: libcppstrstr strstr pcpp::SipRequestFirstLine::parseVersion...

OSV-2020-699 Heap-buffer-overflow in ihevcd_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18406 Crash type: Heap-buffer-overflow READ 4 Crash state: ihevcdprocess ihevcdprocessthread startthread...

OSV-2020-677 Heap-buffer-overflow in load

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15007 Crash type: Heap-buffer-overflow READ 4 Crash state: load rbinobjectnew rbinfilenewfrombuffer...

OSV-2020-674 Heap-buffer-overflow in ihevcd_mv_merge

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17196 Crash type: Heap-buffer-overflow READ 4 Crash state: ihevcdmvmerge ihevcdgetmvctb ihevcdparseslicedata...