OSV-2020-794 Use-of-uninitialized-value in Splash::pipeRunSimpleXBGR8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23086 Crash type: Use-of-uninitialized-value Crash state: Splash::pipeRunSimpleXBGR8 Splash::blitImage Splash::drawImage...

OSV-2020-797 Use-of-uninitialized-value in MipsAsmParser::isPicAndNotNxxAbi

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22778 Crash type: Use-of-uninitialized-value Crash state: MipsAsmParser::isPicAndNotNxxAbi MipsAsmParser::processInstruction MipsAsmParser::MatchAndEmitInstruction...

OSV-2020-795 Heap-buffer-overflow in ndpi_search_setup_iax

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23831 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpisearchsetupiax ndpisearchiax checkndpiudpflowfunc...

OSV-2020-792 Use-of-uninitialized-value in ihevc_inter_pred_chroma_copy_ssse3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23197 Crash type: Use-of-uninitialized-value Crash state: ihevcinterpredchromacopyssse3 ihevcdinterpredctb ihevcdprocess...

OSV-2020-790 Use-of-uninitialized-value in clang::tok::isAnnotation

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18444 Crash type: Use-of-uninitialized-value Crash state: clang::tok::isAnnotation clang::TokenLexer::Lex clang::Preprocessor::Lex...

OSV-2020-786 UNKNOWN READ in H5T__bit_find

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23887 Crash type: UNKNOWN READ Crash state: H5Tbitfind H5Tconvii H5Tconvert...

OSV-2020-785 Heap-buffer-overflow in sctp_handle_packet_dropped

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23656 Crash type: Heap-buffer-overflow READ 1 Crash state: sctphandlepacketdropped sctpprocesscontrol sctpcommoninputprocessing...

OSV-2020-783 UNKNOWN READ in wabt::BinaryReaderIR::OnFunctionSymbol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20364 Crash type: UNKNOWN READ Crash state: wabt::BinaryReaderIR::OnFunctionSymbol wabt::BinaryReader::ReadLinkingSection wabt::BinaryReader::ReadCustomSection...

OSV-2020-781 Heap-buffer-overflow in __libcpp_memchr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23328 Crash type: Heap-buffer-overflow READ Crash state: libcppmemchr memchr pcpp::HeaderField::HeaderField...

OSV-2020-782 UNKNOWN READ in H5O_dtype_decode_helper

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23320 Crash type: UNKNOWN READ Crash state: H5Odtypedecodehelper H5Odtypeshareddecode H5Oattrshareddecode...

OSV-2020-780 Segv on unknown address in ndpi_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22676 Crash type: Segv on unknown address Crash state: ndpistrdup processndpicollectedinfo packetprocessing...

OSV-2020-776 Negative-size-param in arrow::ConcatenateBuffers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24101 Crash type: Negative-size-param Crash state: arrow::ConcatenateBuffers arrow::ConcatenateImpl::Visit arrow::Status arrow::VisitTypeInline...

OSV-2020-775 Use-of-uninitialized-value in blosc_run_decompression_with_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23826 Crash type: Use-of-uninitialized-value Crash state: bloscrundecompressionwithcontext bloscdecompress fuzzdecompress.c...

OSV-2020-773 Heap-buffer-overflow in pcpp::SSLCertificateRequestMessage::SSLCertificateRequestMessage

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23592 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::SSLCertificateRequestMessage::SSLCertificateRequestMessage pcpp::SSLHandshakeMessage::createHandhakeMessage pcpp::SSLHandshakeLayer::SSLHandshakeLayer...

OSV-2020-774 Heap-buffer-overflow in ndpi_search_kerberos

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23021 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpisearchkerberos checkndpiudpflowfunc ndpicheckflowfunc...

ipfs:ipfs_ds_flatfs: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5745157048369152 Project: ipfs Fuzzing Engine: libFuzzer Fuzz Target: ipfsdsflatfs Job Type: libfuzzerasanipfs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00003a0bd224 Crash State: NULL Sanitizer: address ASAN Recommended Securit...

imagemagick:encoder_mvg_fuzzer: Heap-buffer-overflow in RenderMVGContent

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5716327751483392 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encodermvgfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1...

arrow:arrow-ipc-stream-fuzz: Negative-size-param in arrow::ConcatenateBuffers

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=4964779626856448 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-stream-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

skia:sksl2glsl: Segv on unknown address in SkSL::IRGenerator::convertTypeField

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5720541080846336 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: sksl2glsl Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

minify:minify-number-fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5729119573377024 Project: minify Fuzzing Engine: libFuzzer Fuzz Target: minify-number-fuzzer Job Type: libfuzzerasanminify Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000000772e Crash State: NULL Sanitizer: address ASAN...