OSV-2020-1188 Heap-buffer-overflow in pcpp::IPv6Extension::getExtensionLen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22105 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::IPv6Extension::getExtensionLen pcpp::IPv6Layer::parseExtensions pcpp::IPv6Layer::IPv6Layer...

OSV-2020-1180 UNKNOWN WRITE in ideint_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18993 Crash type: UNKNOWN WRITE Crash state: ideintprocess impeg2ddeinterlace impeg2ddecpicdatathread...

OSV-2020-1171 Heap-use-after-free in JS_ReadObjectRec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21532 Crash type: Heap-use-after-free READ 4 Crash state: JSReadObjectRec JSReadObject fuzzcompile.c...

OSV-2020-1172 Global-buffer-overflow in WelsDec::ParseInterBInfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12652 Crash type: Global-buffer-overflow READ 1 Crash state: WelsDec::ParseInterBInfo WelsDec::WelsActualDecodeMbCavlcBSlice WelsDec::WelsDecodeMbCavlcBSlice...

OSV-2020-1175 Use-of-uninitialized-value in readline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21638 Crash type: Use-of-uninitialized-value Crash state: readline psscan documentload...

OSV-2020-1168 Use-of-uninitialized-value in gbNUMBER_mbc_enc_len

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21944 Crash type: Use-of-uninitialized-value Crash state: gbNUMBERmbcenclen onigencmb4codetombc parseexp...

OSV-2020-1165 Global-buffer-overflow in parse_headers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14154 Crash type: Global-buffer-overflow READ 4 Crash state: parseheaders parsehttprequest fuzzparsehttprequest...

OSV-2020-1161 Heap-buffer-overflow in impeg2_fmt_conv_yuv420p_to_yuv420sp_uv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16604 Crash type: Heap-buffer-overflow WRITE 1 Crash state: impeg2fmtconvyuv420ptoyuv420spuv impeg2dformatconvert impeg2ddecpicdatathread...

OSV-2020-1159 Segv on unknown address in arrow::ipc::ReadMessage

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20124 Crash type: Segv on unknown address Crash state: arrow::ipc::ReadMessage arrow::ipc::RecordBatchFileReader::RecordBatchFileReaderImpl::ReadMessageFromBlo...

OSV-2020-1167 Heap-buffer-overflow in tiffReadCallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14773 Crash type: Heap-buffer-overflow READ Crash state: tiffReadCallback OJPEGReadHeaderInfoSecTablesQTable OJPEGReadHeaderInfoSec...

OSV-2020-1153 Heap-buffer-overflow in ih264d_cavlc_4x4res_block_totalcoeff_11to16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16514 Crash type: Heap-buffer-overflow READ 4 Crash state: ih264dcavlc4x4resblocktotalcoeff11to16 ih264dcavlcparse4x4coeffn0to7 ih264dcavlcparse8x8blockbothavailable...

OSV-2020-1152 Heap-buffer-overflow in pcpp::tbp_my_own_strnlen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22483 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::tbpmyownstrnlen pcpp::HeaderField::HeaderField pcpp::TextBasedProtocolMessage::parseFields...

OSV-2020-1151 Heap-buffer-overflow in sas_read2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12774 Crash type: Heap-buffer-overflow READ 2 Crash state: sasread2 sas7bdatparsecolumnnamesubheader sas7bdatparsepagepass2...

OSV-2020-1148 Heap-buffer-overflow in asn1_item_ex_d2i

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14217 Crash type: Heap-buffer-overflow READ 1 Crash state: asn1itemexd2i ASN1itemd2i d2iPrivateKey...

OSV-2020-1156 Heap-buffer-overflow in mu::Parser::Sum

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22927 Crash type: Heap-buffer-overflow READ 8 Crash state: mu::Parser::Sum mu::ParserBase::ParseCmdCodeBulk mu::ParserBase::ParseString...

OSV-2020-1146 Heap-buffer-overflow in dex_parse_debug_item

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14021 Crash type: Heap-buffer-overflow READ 1 Crash state: dexparsedebugitem parsedexclassmethod parseclass...

OSV-2020-1143 UNKNOWN WRITE in mips_release_mips

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13852 Crash type: UNKNOWN WRITE Crash state: mipsreleasemips ucclose fuzzemumips32be.c...

OSV-2020-1138 Heap-buffer-overflow in void apply_sao_internal<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14184 Crash type: Heap-buffer-overflow READ 1 Crash state: void applysaointernal void applysao threadtasksao::work...

OSV-2020-1142 UNKNOWN WRITE in ideint_weave_blk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16606 Crash type: UNKNOWN WRITE Crash state: ideintweaveblk ideintprocess impeg2ddeinterlace...

OSV-2020-1145 Heap-buffer-overflow in ihevcd_sao_shift_ctb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16817 Crash type: Heap-buffer-overflow WRITE 1 Crash state: ihevcdsaoshiftctb ihevcdprocess ihevcdparseslicedata...