OSV-2020-22 Container-overflow in parquet::schema::Unflatten

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20897 Crash type: Container-overflow READ 4 Crash state: parquet::schema::Unflatten parquet::FileMetaData::FileMetaDataImpl::FileMetaDataImpl parquet::FileMetaData::FileMetaData...

poppler:pdf_fuzzer: Container-overflow in poppler::page::text_list

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=5724813351190528 Project: poppler Fuzzing Engine: afl Fuzz Target: pdffuzzer Job Type: aflasanpoppler Platform Id: linux Crash Type: Container-overflow WRITE 4 Crash Address:...

rdkit:smiles_string_to_mol_fuzzer: Container-overflow in yysmiles_parse

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5760260085383168 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: smilesstringtomolfuzzer Job Type: libfuzzerasanrdkit Platform Id: linux Crash Type: Container-overflow READ 8 Crash Address:...

libreoffice:pptfuzzer: Container-overflow in SdrObjList::GetObj

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5163258324713472 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: pptfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Container-overflow READ 8 Crash...

arrow:parquet-arrow-fuzz: Container-overflow in parquet::schema::Unflatten

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5110585828311040 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Container-overflow READ 4 Crash Address: 0x61e0000840b0 Crash...

aspell:aspell_fuzzer: Container-overflow in acommon::FilterChar::operator unsigned int

Project: https://github.com/gnuaspell/aspell.git Detailed Report: https://oss-fuzz.com/testcase?key=5745512624160768 Project: aspell Fuzzing Engine: libFuzzer Fuzz Target: aspellfuzzer Job Type: libfuzzerasanaspell Platform Id: linux Crash Type: Container-overflow READ 4 Crash Address:...

llvm:llvm-isel-fuzzer--aarch64-O2: Container-overflow in MachineBlockPlacement::runOnMachineFunction

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5751823645802496 Project: llvm Fuzzing engine: libFuzzer Fuzz target: llvm-isel-fuzzer--aarch64-O2 Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Container-overflow READ 8 Crash Addres...

libreoffice/xlsfuzzer: Container-overflow in ScDPResultDimension::LateInitFrom

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5694719535874048 Project: libreoffice Fuzzer: afllibreofficexlsfuzzer Fuzz target binary: xlsfuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Container-overflow READ 4 Cras...

skia/api_mock_gpu_canvas: Container-overflow in SkFindAndPlaceGlyph::ArbitraryPositions::nextPoint

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5097160457584640 Project: skia Fuzzer: aflskiaapimockgpucanvas Fuzz target binary: apimockgpucanvas Job Type: aflasanskia Platform Id: linux Crash Type: Container-overflow READ 4 Crash Address:...

gdal/mrf_fuzzer: Container-overflow in GDAL_LercNS::BitStuffer2::Decode

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6317459551289344 Project: gdal Fuzzer: libFuzzergdalmrffuzzer Fuzz target binary: mrffuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Container-overflow READ 4 Crash Address:...

gdal/cad_fuzzer: Container-overflow in CADVector::CADVector

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5643855383756800 Project: gdal Fuzzer: libFuzzergdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Container-overflow READ 8 Crash Address:...

libreoffice/htmlfuzzer: Container-overflow in SwHTMLTableLayout::GetAnyBoxStartNode

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5745033807396864 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Container-overfl...

libreoffice/xlsfuzzer: Container-overflow in ScAddress::Col

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5200414640177152 Project: libreoffice Fuzzer: libFuzzerlibreofficexlsfuzzer Fuzz target binary: xlsfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Container-overflow...

skia/animated_image_decode: Container-overflow in piex::GetFullCropDimension

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5667932416770048 Project: skia Fuzzer: libFuzzerskiaanimatedimagedecode Fuzz target binary: animatedimagedecode Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Container-overflow READ 4...

libreoffice/ww8fuzzer: Container-overflow in WW8ListManager::ReadLVL

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6088699478540288 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Container-overflow...

librawspeed/TiffDecoderFuzzer-IiqDecoder: Container-overflow in rawspeed::Spline<unsigned short, void>::prepare

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5304129497858048 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-IiqDecoder Fuzz target binary: TiffDecoderFuzzer-IiqDecoder Job Type: libfuzzerasanlibrawspeed Platform Id:...

libreoffice/htmlfuzzer: Container-overflow in HTMLTableRow::GetCell

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6656273752784896 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Container-overfl...

libreoffice/pngfuzzer: Container-overflow in BitmapColor::GetBlue

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5533260961546240 Project: libreoffice Fuzzer: libFuzzerlibreofficepngfuzzer Fuzz target binary: pngfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Container-overflow...

libreoffice: Container-overflow in HMemIODev::read1b

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4795817573482496 Project: libreoffice Fuzzer: libFuzzerlibreofficehwpfuzzer Fuzz target binary: hwpfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Container-overflow...

libreoffice: Container-overflow in HMemIODev::read1b

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6628872739094528 Project: libreoffice Fuzzer: libFuzzerlibreofficehwpfuzzer Fuzz target binary: hwpfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Container-overflow...