OSV-2020-570 Global-buffer-overflow in decode_tlv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13542 Crash type: Global-buffer-overflow READ 4 Crash state: decodetlv dissectnoe calldissectorwork...

OSV-2020-518 Global-buffer-overflow in perfetto::trace_processor::ParseSystraceTracePoint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13481 Crash type: Global-buffer-overflow READ 1 Crash state: perfetto::traceprocessor::ParseSystraceTracePoint perfetto::traceprocessor::ProtoTraceParser::ParsePrint perfetto::traceprocessor::ProtoTraceParser::ParseFtracePacke...

OSV-2020-504 Global-buffer-overflow in lwan_parse_rfc_time

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14297 Crash type: Global-buffer-overflow READ 4 Crash state: lwanparserfctime parseifmodifiedsince fuzzparsehttprequest...

OSV-2020-462 Global-buffer-overflow in strsep_char

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14509 Crash type: Global-buffer-overflow READ Crash state: strsepchar parseproxyprotocolv1 parsehttprequest...

OSV-2020-431 Global-buffer-overflow in parse_headers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14511 Crash type: Global-buffer-overflow READ 2 Crash state: parseheaders parsehttprequest fuzzparsehttprequest...

OSV-2020-406 Global-buffer-overflow in lwan_strbuf_append_str

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18448 Crash type: Global-buffer-overflow READ Crash state: lwanstrbufappendstr parsesection parsesectionshorthand...

OSV-2020-337 Global-buffer-overflow in lex_multiline_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18626 Crash type: Global-buffer-overflow READ 1 Crash state: lexmultilinestring lexnext parsekeyvalue...

OSV-2020-279 Global-buffer-overflow in lex_multiline_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18562 Crash type: Global-buffer-overflow READ 3 Crash state: lexmultilinestring lexnext parsekeyvalue...

imagemagick:ping_dng_fuzzer: Global-buffer-overflow in LibRaw::parseCanonMakernotes

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5655361509130240 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingdngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Cra...

imagemagick:encoder_dng_fuzzer: Global-buffer-overflow in LibRaw::parseSigmaMakernote

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5693021307011072 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderdngfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Global-buffer-overflow READ 4...

OSV-2020-256 Global-buffer-overflow in dissect_wassp_sub_tlv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20004 Crash type: Global-buffer-overflow READ 8 Crash state: dissectwasspsubtlv dissectwasspsubtlv dissectwassptlv...

OSV-2020-183 Global-buffer-overflow in hb_array_t<OT::IntType<unsigned char, 1u> const> hb_array_t<OT::IntType<unsigned

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20321 Crash type: Global-buffer-overflow READ 1 Crash state: hbarrayt const hbarrayt ::copy OT::SBIXGlyph::copy...

json-c:tokener_parse_ex_fuzzer: Global-buffer-overflow in json_tokener_parse_ex

Project: https://github.com/json-c/json-c.git Detailed Report: https://oss-fuzz.com/testcase?key=6193200317595648 Project: json-c Fuzzing Engine: libFuzzer Fuzz Target: tokenerparseexfuzzer Job Type: libfuzzerasani386json-c Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Addres...

monero:load-from-json_fuzz_tests: Global-buffer-overflow in epee::misc_utils::parse::match_string2

Project: https://github.com/monero-project/monero.git Detailed Report: https://oss-fuzz.com/testcase?key=5096090558005248 Project: monero Fuzzing Engine: libFuzzer Fuzz Target: load-from-jsonfuzztests Job Type: libfuzzerasanmonero Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash...

draco:draco_decoder_fuzzer: Global-buffer-overflow in draco::MeshEdgebreakerDecoderImpl<draco::MeshEdgebreakerTraversalValenceDecoder>

Project: https://github.com/google/draco.git Detailed Report: https://oss-fuzz.com/testcase?key=5437324518490112 Project: draco Fuzzing Engine: libFuzzer Fuzz Target: dracodecoderfuzzer Job Type: libfuzzerasandraco Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address:...

skia:svg_dom: Global-buffer-overflow in SkParse::FindNamedColor

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5124092452929536 Project: skia Fuzzing Engine: afl Fuzz Target: svgdom Job Type: aflasanskia Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000001da0690 Crash State:...

capstone:fuzz_disasmnext: Global-buffer-overflow in decodeRegisterClass

Detailed Report: https://oss-fuzz.com/testcase?key=5666610666012672 Project: capstone Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisasmnext Job Type: libfuzzerasancapstone Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x00000099292c Crash State: decodeRegisterClass...

libtsm:libtsm_fuzzer: Global-buffer-overflow in vte_write_debug

Detailed Report: https://oss-fuzz.com/testcase?key=5687421466574848 Project: libtsm Fuzzing Engine: afl Fuzz Target: libtsmfuzzer Job Type: aflasanlibtsm Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000000591670 Crash State: vtewritedebug sendprimaryda doesc...

ffmpeg:ffmpeg_AV_CODEC_ID_HCA_fuzzer: Global-buffer-overflow in unpack

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5683183715876864 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHCAfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address:...

esp-v2:service_control_filter_fuzz_test: Global-buffer-overflow in google::api_proxy::service_control::set_response_code_class

Project: https://github.com/GoogleCloudPlatform/esp-v2.git Detailed Report: https://oss-fuzz.com/testcase?key=5753507539058688 Project: esp-v2 Fuzzing Engine: libFuzzer Fuzz Target: servicecontrolfilterfuzztest Job Type: libfuzzerasanesp-v2 Platform Id: linux Crash Type: Global-buffer-overflow RE...