OSV-2020-972 Heap-buffer-overflow in ndpi_search_irc_tcp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21346 Crash type: Heap-buffer-overflow READ 7 Crash state: ndpisearchirctcp checkndpitcpflowfunc ndpidetectionprocesspacket...

libyal:libfwnt_lzx_fuzzer: Use-of-uninitialized-value in libfwnt_huffman_tree_build

Detailed Report: https://oss-fuzz.com/testcase?key=5700197540429824 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libfwntlzxfuzzer Job Type: libfuzzermsanlibyal Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: libfwnthuffmantreebuild...

grok:grk_decompress_fuzzer: Heap-use-after-free in grk::TileProcessor::~TileProcessor

Detailed Report: https://oss-fuzz.com/testcase?key=5137547093868544 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x610000012890 Crash State: grk::TileProcessor::TileProcessor...

libreoffice:pptxfuzzer: Heap-buffer-overflow in AES_decrypt

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5117643946983424 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: pptxfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash...

OSV-2020-969 Stack-buffer-overflow in pgp_parse_algo_attr_blob

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19548 Crash type: Stack-buffer-overflow WRITE 4 Crash state: pgpparsealgoattrblob pgpgetcardfeatures pgpinit...

OSV-2020-959 Container-overflow in yysmiles_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22242 Crash type: Container-overflow READ 8 Crash state: yysmilesparse RDKit::smilesparsehelper RDKit::smilesparse...

OSV-2020-960 Use-of-uninitialized-value in prvTidyDecodeUTF8BytesToChar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12656 Crash type: Use-of-uninitialized-value Crash state: prvTidyDecodeUTF8BytesToChar prvTidyGetUTF8 PPrintText...

OSV-2020-955 UNKNOWN WRITE in vcf_parse_format

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24097 Crash type: UNKNOWN WRITE Crash state: vcfparseformat vcfparse vcfread...

OSV-2020-956 Heap-buffer-overflow in ndpi_workflow_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20644 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpiworkflowprocesspacket fuzzndpireader.c HonggfuzzPersistentLoop...

OSV-2020-954 Use-of-uninitialized-value in adler32_z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13317 Crash type: Use-of-uninitialized-value Crash state: adler32z inflate ZIPDecode...

OSV-2020-948 Heap-buffer-overflow in surround51_to_stereo_downmix_mtx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22402 Crash type: Heap-buffer-overflow WRITE 4 Crash state: surround51tostereodownmixmtx crasfmtconvcreate configformatconverter...

OSV-2020-945 Heap-buffer-overflow in pcpp::SSLExtension::getLength

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22529 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::SSLExtension::getLength pcpp::SSLExtension::getTotalLength pcpp::SSLServerHelloMessage::SSLServerHelloMessage...

OSV-2020-943 Heap-buffer-overflow in pcpp::HeaderField::HeaderField

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22528 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::HeaderField::HeaderField pcpp::TextBasedProtocolMessage::parseFields pcpp::SipResponseLayer::SipResponseLayer...

OSV-2020-941 Heap-buffer-overflow in gc_mark_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19780 Crash type: Heap-buffer-overflow READ 4 Crash state: gcmarkstring gctrace gsgcreclaim...

OSV-2020-940 Heap-use-after-free in surround51_to_stereo_downmix_mtx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21113 Crash type: Heap-use-after-free WRITE 4 Crash state: surround51tostereodownmixmtx crasfmtconvcreate configformatconverter...

OSV-2020-930 Use-of-uninitialized-value in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22087 Crash type: Use-of-uninitialized-value Crash state: std::1::basicstring, std::1::allocatorch pcpp::IDnsResource::IDnsResource pcpp::DnsQuery::DnsQuery...

OSV-2020-929 Use-of-uninitialized-value in Sass::Prelexer::quoted_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15890 Crash type: Use-of-uninitialized-value Crash state: Sass::Prelexer::quotedstring char const Sass::Parser::lex& Sass::Parser::parsevalue...

OSV-2020-927 Heap-buffer-overflow in LogLuv24toXYZ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14011 Crash type: Heap-buffer-overflow WRITE 4 Crash state: LogLuv24toXYZ Luv24toXYZ LogLuvDecode24...

OSV-2020-922 Heap-buffer-overflow in ndpi_search_h323

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22342 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpisearchh323 checkndpiudpflowfunc ndpidetectionprocesspacket...

OSV-2020-919 Use-of-uninitialized-value in ndpi_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21363 Crash type: Use-of-uninitialized-value Crash state: ndpistrdup processClientServerHello processTLSBlock...