OSV-2021-1261 UNKNOWN READ in kh_get_ucl_hash_node

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38660 Crash type: UNKNOWN READ Crash state: khgetuclhashnode uclhashsearch uclinherithandler...

OSV-2021-1258 Bad-cast to SplashPattern from invalid vptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38669 Crash type: Bad-cast Crash state: Bad-cast to SplashPattern from invalid vptr SplashState::SplashState Splash::restoreState...

libucl:ucl_add_string_fuzzer: Heap-buffer-overflow in ucl_hash_func

Project: https://github.com/vstakhov/libucl.git Detailed Report: https://oss-fuzz.com/testcase?key=6274890689282048 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

OSV-2021-1257 Stack-buffer-overflow in GRIBDataset::Open

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38610 Crash type: Stack-buffer-overflow READ 1 Crash state: GRIBDataset::Open GDALOpenEx GDALOpen...

OSV-2021-1250 Segv on unknown address in ft_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38635 Crash type: Segv on unknown address Crash state: ftfree ftmemfree cffcmapunicodedone...

OSV-2021-1249 Heap-buffer-overflow in int flatbuffers::ReadScalar<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38578 Crash type: Heap-buffer-overflow READ 4 Crash state: int flatbuffers::ReadScalar flatbuffers::Table::GetVTable flatbuffers::Table::GetOptionalFieldOffset...

OSV-2021-1246 Heap-buffer-overflow in FSE_writeNCount_generic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38553 Crash type: Heap-buffer-overflow WRITE 1 Crash state: FSEwriteNCountgeneric FSEwriteNCount ZSTDbuildCTable...

OSV-2021-1245 Heap-buffer-overflow in ucl_object_dtor_unref_single

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38550 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectdtorunrefsingle uclobjectdtorunref uclhashdestroy...

ffmpeg:ffmpeg_AV_CODEC_ID_MSNSIREN_fuzzer: Global-buffer-overflow in siren_decode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5741847809490944 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDMSNSIRENfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Heap-use-after-free in APFSJObjKey::oid

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4863984326017024 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: sleuthkitflsapfsfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

OSV-2021-1239 Heap-buffer-overflow in stbi__load_and_postprocess_8bit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38394 Crash type: Heap-buffer-overflow READ 2 Crash state: stbiloadandpostprocess8bit stbimage.h...

OSV-2021-1238 UNKNOWN READ in cdf_read_property_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38393 Crash type: UNKNOWN READ Crash state: cdfreadpropertyinfo cdfunpacksummaryinfo cdfchecksummaryinfo...

OSV-2021-1236 UNKNOWN READ in icu_70::UCharsTrie::branchNext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38390 Crash type: UNKNOWN READ Crash state: icu70::UCharsTrie::branchNext icu70::UCharsTrie::firstForCodePoint icu70::CollationIterator::nextCE32FromContraction...

OSV-2021-1235 Heap-buffer-overflow in ih264d_fill_bs1_16x16mb_pslice

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38387 Crash type: Heap-buffer-overflow READ 4 Crash state: ih264dfillbs116x16mbpslice ih264dcomputebsnonmbaffthread ih264drecondeblkslice...

OSV-2021-1234 Heap-buffer-overflow in ndr_push_array_uint8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38480 Crash type: Heap-buffer-overflow READ 2 Crash state: ndrpusharrayuint8 ndrpushnbtrdatadata ndrpushnbtrdata...

OSV-2021-1230 UNKNOWN READ in helper_ret_stb_mmu_x86_64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38438 Crash type: UNKNOWN READ Crash state: helperretstbmmux8664 resumeallvcpusx8664 vmstartx8664...

OSV-2021-1227 Heap-buffer-overflow in blosclz_compress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38313 Crash type: Heap-buffer-overflow WRITE 1 Crash state: blosclzcompress bloscc dojob...

OSV-2021-1222 Invalid-free in swift_unexpectedError

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38323 Crash type: Invalid-free Crash state: swiftunexpectedError SwiftProtobuf.TextFormatEncodingVisitor.visitRepeatedMessageFieldA where A: Swi merged protocol witness for SwiftProtobuf.Visitor.visitRepeatedEnumFieldA where...

OSV-2021-1221 Heap-buffer-overflow in parse_via_param

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38307 Crash type: Heap-buffer-overflow READ 1 Crash state: parseviaparam parsevia gethdrfield...

wabt:wasm2wat_fuzzer: Heap-buffer-overflow in wabt::string_view::compare

Project: https://github.com/WebAssembly/wabt.git Detailed Report: https://oss-fuzz.com/testcase?key=5992204003311616 Project: wabt Fuzzing Engine: libFuzzer Fuzz Target: wasm2watfuzzer Job Type: libfuzzerasani386wabt Platform Id: linux Crash Type: Heap-buffer-overflow READ 6 Crash Address:...