OSV-2026-699 Use-of-uninitialized-value in Mat_VarGetSize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=510360595 Crash type: Use-of-uninitialized-value Crash state: MatVarGetSize MatioRead matiofuzzer.cpp...

OSV-2024-274 Heap-use-after-free in Mat_VarFree

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68071 Crash type: Heap-use-after-free READ 8 Crash state: MatVarFree MatVarFree MatioRead...

OSV-2024-265 Heap-buffer-overflow in Mat_VarDuplicate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68065 Crash type: Heap-buffer-overflow READ 8 Crash state: MatVarDuplicate MatioRead matiofuzzer.cpp...

OSV-2020-491 Stack-buffer-overflow in Mat_VarReadNextInfo5

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17119 Crash type: Stack-buffer-overflow READ 4 Crash state: MatVarReadNextInfo5 MatGetDir MatioRead...