OSV-2018-1 Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10897 Crash type: Heap-buffer-overflow READ 1 Crash state: BEInt::operator unsigned short AAT::StateTable ::sanitize AAT::KerxSubTableFormat1::sanitize...

OSV-2021-41 Heap-buffer-overflow in BaseMemStream<char const>::getChar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29460 Crash type: Heap-buffer-overflow READ 1 Crash state: BaseMemStream::getChar Object::streamGetChar Lexer::getChar...

matio:matio_fuzzer: Heap-buffer-overflow in H5MM_memcpy

Project: git://git.code.sf.net/p/matio/matio Detailed Report: https://oss-fuzz.com/testcase?key=5174799678701568 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x613000027e98 Crash State:...

sleuthkit:sleuthkit_fls_ntfs_fuzzer: Heap-buffer-overflow in ntfs_dinode_lookup

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4919728550313984 Project: sleuthkit Fuzzing Engine: honggfuzz Fuzz Target: sleuthkitflsntfsfuzzer Job Type: honggfuzzasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cras...

OSV-2021-40 Heap-buffer-overflow in rijndaelDecrypt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29454 Crash type: Heap-buffer-overflow READ 1 Crash state: rijndaelDecrypt aes256cbcdecrypt checkuserpassword...

wolfssl:cryptofuzz-openssl-api: Heap-buffer-overflow in wc_AesFeedbackEncrypt

Detailed Report: https://oss-fuzz.com/testcase?key=6272306739544064 Project: wolfssl Fuzzing Engine: afl Fuzz Target: cryptofuzz-openssl-api Job Type: aflasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 16 Crash Address: 0x60200000019f Crash State: wcAesFeedbackEncrypt...

selinux:secilc-fuzzer: Heap-buffer-overflow in cil_classorder_to_policydb

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=6604237280772096 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: secilc-fuzzer Job Type: libfuzzerasanselinux Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address...

OSV-2021-39 Heap-buffer-overflow in dotnet_parse_tilde_2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29419 Crash type: Heap-buffer-overflow READ 2 Crash state: dotnetparsetilde2 dotnetparsetilde dotnetparsecom...

OSV-2021-38 Heap-buffer-overflow in my_casedn_str_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29433 Crash type: Heap-buffer-overflow READ 2 Crash state: mycasednstrutf8 LEXUSER::init MYSQLparse...

OSV-2021-36 Use-of-uninitialized-value in grk::mct::decompress_irrev

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29413 Crash type: Use-of-uninitialized-value Crash state: grk::mct::decompressirrev grk::TileProcessor::mctdecompress grk::TileProcessor::decompresstilet1...

OSV-2021-37 Heap-buffer-overflow in WelsDec::CopyRectBlock4Cols

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29431 Crash type: Heap-buffer-overflow READ 16 Crash state: WelsDec::CopyRectBlock4Cols WelsDec::GetColocatedMb WelsDec::PredMvBDirectSpatial...

OSV-2021-32 Heap-use-after-free in igraph_vector_ptr_size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29408 Crash type: Heap-use-after-free READ 8 Crash state: igraphvectorptrsize igraphgmltreedestroy igraphigmlparsedatadestroy...

yara:dotnet_fuzzer: Heap-buffer-overflow in dotnet_parse_tilde_2

Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=6331321972555776 Project: yara Fuzzing Engine: afl Fuzz Target: dotnetfuzzer Job Type: aflasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x6120000008e5 Crash Stat...

igraph:read_gml_fuzzer: Heap-use-after-free in igraph_vector_ptr_size

Project: https://github.com/igraph/igraph.git Detailed Report: https://oss-fuzz.com/testcase?key=4855254405480448 Project: igraph Fuzzing Engine: honggfuzz Fuzz Target: readgmlfuzzer Job Type: honggfuzzasanigraph Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::FileFormat::serializeAsoc

Detailed Report: https://oss-fuzz.com/testcase?key=6243076467195904 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: grk::FileFormat::serializeAsoc...

OSV-2021-31 Heap-buffer-overflow in TTF::be_u16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29338 Crash type: Heap-buffer-overflow READ 1 Crash state: TTF::beu16 TTF::Font::loadfromoffset TTF::Font::loadfrommemory...

OSV-2021-27 Heap-buffer-overflow in ZSTD_createDDict_advanced

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29369 Crash type: Heap-buffer-overflow READ Crash state: ZSTDcreateDDictadvanced ZSTDcreateDDict bloscrundecompressionwithcontext...

OSV-2021-25 Heap-use-after-free in igraph_read_graph_gml

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29377 Crash type: Heap-use-after-free READ 8 Crash state: igraphreadgraphgml readgmlfuzzer.c igraphigmldestroyattrs...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Heap-buffer-overflow in get_bits

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4821602850177024 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

igraph:read_gml_fuzzer: Heap-use-after-free in igraph_read_graph_gml

Project: https://github.com/igraph/igraph.git Detailed Report: https://oss-fuzz.com/testcase?key=4664686297612288 Project: igraph Fuzzing Engine: honggfuzz Fuzz Target: readgmlfuzzer Job Type: honggfuzzasanigraph Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...