OSV-2020-104 Heap-buffer-overflow in void arrow::util::internal::ByteStreamSlitDecodeSSE2<double>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21420 Crash type: Heap-buffer-overflow READ 1 Crash state: void arrow::util::internal::ByteStreamSlitDecodeSSE2 virtual thunk to parquet::ByteStreamSplitDecoderparquet::PhysicalType parquet::TypedDecoderparquet::PhysicalType...

OSV-2020-109 UNKNOWN READ in arrow::BufferBuilder::Append

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20721 Crash type: UNKNOWN READ Crash state: arrow::BufferBuilder::Append arrow::BaseBinaryBuilder::Append parquet::ArrowBinaryHelper::Append...

OSV-2020-63 UNKNOWN READ in arrow::BaseBinaryBuilder<arrow::BinaryType>::UnsafeAppend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20697 Crash type: UNKNOWN READ Crash state: arrow::BaseBinaryBuilder::UnsafeAppend parquet::PlainByteArrayDecoder::DecodeArrowDense parquet::PlainByteArrayDecoder::DecodeArrow...

OSV-2020-52 Heap-buffer-overflow in int arrow::util::RleDecoder::GetBatchWithDictSpaced<double>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20665 Crash type: Heap-buffer-overflow READ 8 Crash state: int arrow::util::RleDecoder::GetBatchWithDictSpaced virtual thunk to parquet::DictDecoderImplparquet::PhysicalType...

OSV-2020-21 UNKNOWN WRITE in arrow::internal::unpack32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20711 Crash type: UNKNOWN WRITE Crash state: arrow::internal::unpack32 int arrow::BitUtil::BitReader::GetBatch parquet::DictByteArrayDecoderImpl::DecodeArrowDense...

arrow:arrow-ipc-file-fuzz: Heap-buffer-overflow in org::apache::arrow::flatbuf::Message::Verify

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5693640900083712 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-file-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

arrow:arrow-ipc-file-fuzz: Crash in arrow::ipc::MessageDecoder::MessageDecoderImpl::ConsumeDataBufferInt32

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5750282928783360 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-file-fuzz Job Type: libfuzzerubsanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffff83ea89ab...

arrow:parquet-arrow-fuzz: Crash in parquet::DictDecoderImpl<parquet::PhysicalType<

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5125226590633984 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x60effffffe14 Crash State:...

Xfig fig2dev Input Validation Error Vulnerability

Xfig fig2dev is a tool for printing and exporting .fig format files. An input validation error vulnerability exists in the 'makearrow' function of the arrow.c file in Xfig fig2dev version 3.2.7b. The vulnerability stems from a networked system or product that does not properly validate input data...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in virtual thunk to parquet::ByteStreamSplitDecoder<parquet::PhysicalType<

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=4890562181464064 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60f0000003df Crash...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in void arrow::util::internal::ByteStreamSlitDecodeSSE2<double>

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5665152419758080 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60f0000003c0 Crash...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in int arrow::BitUtil::BitReader::GetBatch<short>

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5736510608637952 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x625000054905 Cras...

arrow:parquet-arrow-fuzz: Crash in arrow::BaseBinaryBuilder<arrow::BinaryType>::UnsafeAppend

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5674948678123520 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerubsanarrow Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0000048f8000 Crash...

arrow:arrow-ipc-stream-fuzz: Heap-buffer-overflow in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayVisitor>

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5089431154589696 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in parquet::PlainByteArrayDecoder::DecodeArrowDense

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5745965288128512 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in parquet::internal::RecordReader::Make

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5672125707059200 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x611000015cf0 Crash...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in parquet::LevelDecoder::SetData

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5125747499073536 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x633000dc6323 Crash...

arrow:parquet-arrow-fuzz: Container-overflow in parquet::schema::Unflatten

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5110585828311040 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Container-overflow READ 4 Crash Address: 0x61e0000840b0 Crash...

arrow:parquet-arrow-fuzz: Crash in parquet::arrow::ReconstructNestedList

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=6266374655836160 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerubsanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffff7b8 Cra...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in bool arrow::util::RleDecoder::NextCounts<int>

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5650096073211904 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...