OSV-2021-677 Heap-buffer-overflow in grk::FileFormatDecompress::apply_palette_clr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33544 Crash type: Heap-buffer-overflow WRITE 16 Crash state: grk::FileFormatDecompress::applypaletteclr grk::FileFormatDecompress::applyColour grkdecompressfuzzer.cpp...

grok:grk_decompress_fuzzer: Crash in grk::SparseBuffer<6u, 6u>::read_or_write

Detailed Report: https://oss-fuzz.com/testcase?key=6267600499376128 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000003c2c Crash State: grk::SparseBuffer::readorwrite grk::SparseBuffer::rea...

grok:grk_decompress_fuzzer: Heap-buffer-overflow in grk::Subband::Subband

Detailed Report: https://oss-fuzz.com/testcase?key=5719298213150720 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzerasangrok Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6140000001d0 Crash State: grk::Subband::Subband...

grok:grk_decompress_fuzzer: Crash in grk::param_qcd::set_irrev_quant

Detailed Report: https://oss-fuzz.com/testcase?key=5725152199049216 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0001000daeaf Crash State: grk::paramqcd::setirrevquant grk::j2kreadSPCodSPCoc...

grok:grk_decompress_fuzzer: Nested bug in the same thread, aborting. with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5082666229301248 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Nested bug in the same thread, aborting. Crash Address: Crash State: NULL Sanitizer: memory MSAN...

grok:grk_decompress_fuzzer: Heap-buffer-overflow in ojph::local::rev_fetch

Detailed Report: https://oss-fuzz.com/testcase?key=4862900302512128 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x62900510e1fc Crash State: ojph::local::revfetch...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::t1_part1::T1Part1::postDecode

Detailed Report: https://oss-fuzz.com/testcase?key=4787678997118976 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: grk::t1part1::T1Part1::postDecode...

grok:grk_decompress_fuzzer: Container-overflow in grk::T2Decode::read_packet_header

Detailed Report: https://oss-fuzz.com/testcase?key=5136412048097280 Project: grok Fuzzing Engine: honggfuzz Fuzz Target: grkdecompressfuzzer Job Type: honggfuzzasangrok Platform Id: linux Crash Type: Container-overflow READ 8 Crash Address: 0x61500007a760 Crash State:...

grok:grk_decompress_fuzzer: Heap-use-after-free in grk::TileProcessor::~TileProcessor

Detailed Report: https://oss-fuzz.com/testcase?key=5137547093868544 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x610000012890 Crash State: grk::TileProcessor::TileProcessor...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::grk_vec::get_len

Detailed Report: https://oss-fuzz.com/testcase?key=5106439487225856 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: grk::grkvec::getlen...

grok:grk_decompress_fuzzer: Heap-use-after-free in grk::t1_part1::T1Part1::postDecode

Detailed Report: https://oss-fuzz.com/testcase?key=5083043089088512 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x606000004290 Crash State: grk::t1part1::T1Part1::postDecode...

grok:grk_decompress_fuzzer: Heap-double-free in grk::T1Decoder::decompress

Detailed Report: https://oss-fuzz.com/testcase?key=5411731517210624 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x606000018c20 Crash State: grk::T1Decoder::decompress...

grok:grk_decompress_fuzzer: Heap-buffer-overflow in grk::t1_part1::T1Part1::decompress

Detailed Report: https://oss-fuzz.com/testcase?key=5700132833329152 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x61e0000c6a07 Crash State: grk::t1part1::T1Part1::decompress...

grok:grk_decompress_fuzzer: Heap-buffer-overflow in grk::param_qcd::push

Detailed Report: https://oss-fuzz.com/testcase?key=5757890427355136 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x62300000a747 Crash State: grk::paramqcd::push...

grok:grk_decompress_fuzzer: Incorrect-function-pointer-type in grk_read_header

Detailed Report: https://oss-fuzz.com/testcase?key=5709008204988416 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzerubsangrok Platform Id: linux Crash Type: Incorrect-function-pointer-type Crash Address: Crash State: grkreadheader grkdecompressfuzzer.cp...