OSV-2020-174 Heap-buffer-overflow in int arrow::BitUtil::BitReader::GetBatch<short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21166 Crash type: Heap-buffer-overflow WRITE 8 Crash state: int arrow::BitUtil::BitReader::GetBatch int arrow::util::RleDecoder::GetBatch parquet::internal::TypedRecordReaderparquet::PhysicalType...

OSV-2020-21 UNKNOWN WRITE in arrow::internal::unpack32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20711 Crash type: UNKNOWN WRITE Crash state: arrow::internal::unpack32 int arrow::BitUtil::BitReader::GetBatch parquet::DictByteArrayDecoderImpl::DecodeArrowDense...

PT-2020-21869

Name of the Vulnerable Software and Affected Versions parquet affected versions not specified Description The issue is related to a heap-use-after-free error, specifically a WRITE 2 crash type. It occurs in the GetBatch function of arrow::BitUtil::BitReader, which is used by...

PT-2020-21962

Name of the Vulnerable Software and Affected Versions Parquet affected versions not specified Description The issue is related to a heap-buffer-overflow write error. Technical details indicate that the crash occurs in the GetBatch function of arrow::BitUtil::BitReader and arrow::util::RleDecoder,...