OSV-2020-21 UNKNOWN WRITE in arrow::internal::unpack32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20711 Crash type: UNKNOWN WRITE Crash state: arrow::internal::unpack32 int arrow::BitUtil::BitReader::GetBatch parquet::DictByteArrayDecoderImpl::DecodeArrowDense...

arrow:arrow-ipc-file-fuzz: Heap-buffer-overflow in org::apache::arrow::flatbuf::Message::Verify

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5693640900083712 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-file-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

arrow:arrow-ipc-file-fuzz: Crash in arrow::ipc::MessageDecoder::MessageDecoderImpl::ConsumeDataBufferInt32

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5750282928783360 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-file-fuzz Job Type: libfuzzerubsanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffff83ea89ab...

arrow (>=0.14.0, <=4.4.0), arrow-flight (>=2.0.0, <=4.4.0) +62 more potentially affected by CVE-2020-35864 via flatbuffers (>=0.4.0, <=0.8.4)

flatbuffers CARGO version =0.4.0, =0.14.0, =2.0.0, =1.0.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.17.0, =0.1.1, =0.1.0, =0.1.0, =0.1.3 and more Source cves: CVE-2020-35864 Source advisory: OSV:RUSTSEC-2020-0009...

arrow:parquet-arrow-fuzz: Crash in parquet::DictDecoderImpl<parquet::PhysicalType<

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5125226590633984 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x60effffffe14 Crash State:...

Xfig fig2dev Input Validation Error Vulnerability

Xfig fig2dev is a tool for printing and exporting .fig format files. An input validation error vulnerability exists in the 'makearrow' function of the arrow.c file in Xfig fig2dev version 3.2.7b. The vulnerability stems from a networked system or product that does not properly validate input data...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in virtual thunk to parquet::ByteStreamSplitDecoder<parquet::PhysicalType<

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=4890562181464064 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60f0000003df Crash...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in void arrow::util::internal::ByteStreamSlitDecodeSSE2<double>

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5665152419758080 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60f0000003c0 Crash...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in int arrow::BitUtil::BitReader::GetBatch<short>

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5736510608637952 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x625000054905 Cras...

arrow:parquet-arrow-fuzz: Crash in arrow::BaseBinaryBuilder<arrow::BinaryType>::UnsafeAppend

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5674948678123520 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerubsanarrow Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0000048f8000 Crash...

arrow:arrow-ipc-stream-fuzz: Heap-buffer-overflow in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayVisitor>

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5089431154589696 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in parquet::PlainByteArrayDecoder::DecodeArrowDense

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5745965288128512 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in parquet::internal::RecordReader::Make

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5672125707059200 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x611000015cf0 Crash...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in parquet::LevelDecoder::SetData

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5125747499073536 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x633000dc6323 Crash...

arrow:parquet-arrow-fuzz: Container-overflow in parquet::schema::Unflatten

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5110585828311040 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Container-overflow READ 4 Crash Address: 0x61e0000840b0 Crash...

arrow:parquet-arrow-fuzz: Crash in parquet::arrow::ReconstructNestedList

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=6266374655836160 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerubsanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffff7b8 Cra...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in bool arrow::util::RleDecoder::NextCounts<int>

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5650096073211904 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

arrow:parquet-arrow-fuzz: Crash in arrow::BufferBuilder::Append

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5671667462569984 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerubsanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x009a00000097 Crash...

arrow:parquet-arrow-fuzz: Crash in arrow::internal::unpack32

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5110081396146176 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fff1f4fc85c Crash...

arrow:parquet-arrow-fuzz: Negative-size-param in parquet::ColumnReaderImplBase<parquet::PhysicalType<

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5761340172140544 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...