OSV-2020-1142 UNKNOWN WRITE in ideint_weave_blk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16606 Crash type: UNKNOWN WRITE Crash state: ideintweaveblk ideintprocess impeg2ddeinterlace...

OSV-2020-1138 Heap-buffer-overflow in void apply_sao_internal<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14184 Crash type: Heap-buffer-overflow READ 1 Crash state: void applysaointernal void applysao threadtasksao::work...

OSV-2020-1143 UNKNOWN WRITE in mips_release_mips

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13852 Crash type: UNKNOWN WRITE Crash state: mipsreleasemips ucclose fuzzemumips32be.c...

OSV-2020-1145 Heap-buffer-overflow in ihevcd_sao_shift_ctb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16817 Crash type: Heap-buffer-overflow WRITE 1 Crash state: ihevcdsaoshiftctb ihevcdprocess ihevcdparseslicedata...

OSV-2020-1136 Global-buffer-overflow in ssl_sigalg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13797 Crash type: Global-buffer-overflow READ 2 Crash state: sslsigalg tls1processsigalgs tlsextsigalgsserverparse...

OSV-2020-1135 Heap-buffer-overflow in sas_read4

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12584 Crash type: Heap-buffer-overflow READ 4 Crash state: sasread4 sas7bcatparseblock readstatparsesas7bcat...

OSV-2020-1137 Heap-use-after-free in ihevcd_jobq_lock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16884 Crash type: Heap-use-after-free READ 8 Crash state: ihevcdjobqlock ihevcdjobqyield ihevcdjobqdequeue...

OSV-2020-1130 Heap-buffer-overflow in xsltFormatNumberConversion

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17171 Crash type: Heap-buffer-overflow READ 1 Crash state: xsltFormatNumberConversion xsltFormatNumberFunction xmlXPathCompOpEval...

OSV-2020-1133 Heap-buffer-overflow in ndpi_search_h323

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21289 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpisearchh323 checkndpitcpflowfunc ndpidetectionprocesspacket...

OSV-2020-1131 Heap-buffer-overflow in ndpi_search_oscar_tcp_connect

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21000 Crash type: Heap-buffer-overflow READ 4 Crash state: ndpisearchoscartcpconnect checkndpitcpflowfunc ndpidetectionprocesspacket...

OSV-2020-1127 Use-of-uninitialized-value in WelsDec::CWelsDecoder::ReorderPicturesInDisplay

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12647 Crash type: Use-of-uninitialized-value Crash state: WelsDec::CWelsDecoder::ReorderPicturesInDisplay WelsDec::CWelsDecoder::DecodeFrame2 WelsDec::CWelsDecoder::DecodeFrameNoDelay...

OSV-2020-1117 Heap-buffer-overflow in arrow::internal::CountSetBits

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20575 Crash type: Heap-buffer-overflow READ 8 Crash state: arrow::internal::CountSetBits arrow::Array::nullcount arrow::internal::ValidateArray...

OSV-2020-1123 Index-out-of-bounds in store_reg_arm

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20026 Crash type: Index-out-of-bounds Crash state: storeregarm genloadexclusivearm disasarminsnarm...

OSV-2020-1121 UNKNOWN READ in vcf_format

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18196 Crash type: UNKNOWN READ Crash state: vcfformat vcfwrite bcfwrite...

OSV-2020-1113 Heap-use-after-free in node_min_byte_len

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21998 Crash type: Heap-use-after-free READ 4 Crash state: nodeminbytelen tunequant tunetree...

OSV-2020-1114 Heap-buffer-overflow in ndpi_int_check_stun

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19332 Crash type: Heap-buffer-overflow READ 2 Crash state: ndpiintcheckstun ndpisearchstun checkndpiudpflowfunc...

OSV-2020-1098 Heap-use-after-free in WelsDec::MapColToList0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14060 Crash type: Heap-use-after-free READ 4 Crash state: WelsDec::MapColToList0 WelsDec::PredBDirectTemporal WelsDec::ParseInterBInfo...

OSV-2020-1101 Heap-buffer-overflow in Sass::Prelexer::quoted_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15890 Crash type: Heap-buffer-overflow READ 1 Crash state: Sass::Prelexer::quotedstring char const Sass::Parser::lex& Sass::Parser::parsevalue...

OSV-2020-1108 Heap-buffer-overflow in Sass::Prelexer::quoted_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15890 Crash type: Heap-buffer-overflow READ 1 Crash state: Sass::Prelexer::quotedstring char const Sass::Prelexer::alternatives& Sass::Prelexer::cssvariabletoplevelvalue...

OSV-2020-1092 Use-of-uninitialized-value in time_update_datetime

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14744 Crash type: Use-of-uninitialized-value Crash state: timeupdatedatetime currentmrbtime mrbtimenow...