OSV-2020-559 Use-of-uninitialized-value in parser_get_next_char

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14739 Crash type: Use-of-uninitialized-value Crash state: parsergetnextchar parsergetparamnameheap icalparseraddline...

OSV-2020-548 Heap-buffer-overflow in acommon::DecodeDirect<unsigned short>::decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16531 Crash type: Heap-buffer-overflow READ 2 Crash state: acommon::DecodeDirect::decode acommon::Convert::convert aspellspellersuggest...

OSV-2020-541 UNKNOWN READ in _fini

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15391 Crash type: UNKNOWN READ Crash state: fini...

OSV-2020-543 Heap-buffer-overflow in circular_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14574 Crash type: Heap-buffer-overflow READ 8 Crash state: circularmemcpy runarmfilter runfilter...

OSV-2020-533 Heap-buffer-overflow in r_utf8_strlen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13726 Crash type: Heap-buffer-overflow READ 1 Crash state: rutf8strlen getstr parseclass...

OSV-2020-523 Heap-buffer-overflow in check_buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15003 Crash type: Heap-buffer-overflow READ 1 Crash state: checkbuffer rbingetbinpluginbybuffer getpluginfrombuffer...

OSV-2020-522 Heap-buffer-overflow in buf_bytes_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14783 Crash type: Heap-buffer-overflow WRITE Crash state: bufbytesread rbufread binpegetcertificate...

OSV-2020-516 Heap-buffer-overflow in hb_array_t<OT::IntType<unsigned short, 2u> const> hb_array_t<OT::IntType<unsigne

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18513 Crash type: Heap-buffer-overflow READ 2 Crash state: hbarrayt const hbarrayt ::copy ZN22hbserializecontextt5copyIN2OT14UnsizedArrayOfINS17IntTypeItLj2EEEEEJRj...

OSV-2020-519 Use-of-uninitialized-value in MOS65XX_group_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15112 Crash type: Use-of-uninitialized-value Crash state: MOS65XXgroupname csgroupname fuzzdisasm.c...

OSV-2020-531 Stack-buffer-overflow in ot::MeshCoP::DatasetManager::HandleSet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15374 Crash type: Stack-buffer-overflow READ 15 Crash state: ot::MeshCoP::DatasetManager::HandleSet ot::MeshCoP::ActiveDataset::HandleSet ot::Coap::CoapBase::ProcessReceivedRequest...

OSV-2020-525 UNKNOWN READ in parse_sec_attr_44

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18693 Crash type: UNKNOWN READ Crash state: parsesecattr44 setcosselectfile scselectfile...

OSV-2020-530 Stack-buffer-overflow in ares_parse_aaaa_reply

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15459 Crash type: Stack-buffer-overflow WRITE 4 Crash state: aresparseaaaareply ares-test-fuzz.c...

OSV-2020-510 UNKNOWN READ in ot::Timer::GetFireTime

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13390 Crash type: UNKNOWN READ Crash state: ot::Timer::GetFireTime ot::Timer::DoesFireBefore ot::TimerScheduler::Add...

OSV-2020-502 Heap-use-after-free in WelsDec::SetUnRef

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18644 Crash type: Heap-use-after-free WRITE 1 Crash state: WelsDec::SetUnRef WelsDec::WelsResetRefPic WelsFreeDynamicMemory...

OSV-2020-496 Stack-buffer-overflow in ot::Mle::Mle::HandleParentResponse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15382 Crash type: Stack-buffer-overflow READ Crash state: ot::Mle::Mle::HandleParentResponse ot::Mle::Mle::HandleUdpReceive ot::Ip6::Udp::HandleMessage...

OSV-2020-506 Stack-buffer-overflow in parse_file_extra_owner

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14331 Crash type: Stack-buffer-overflow WRITE 1 Crash state: parsefileextraowner processheadfileextra processheadfile...

OSV-2020-503 Heap-use-after-free in WelsDec::SetUnRef

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18438 Crash type: Heap-use-after-free WRITE 1 Crash state: WelsDec::SetUnRef WelsDec::WelsResetRefPic WelsFreeDynamicMemory...

OSV-2020-504 Global-buffer-overflow in lwan_parse_rfc_time

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14297 Crash type: Global-buffer-overflow READ 4 Crash state: lwanparserfctime parseifmodifiedsince fuzzparsehttprequest...

OSV-2020-515 Use-of-uninitialized-value in bool std::__1::equal<std::__1::__wrap_iter<unsigned char const*>, std::__1::__wr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18320 Crash type: Use-of-uninitialized-value Crash state: bool std::1::equal, std::1::wr bool std::1::operator== cryptofuzz::ExecutorBase::compa...

OSV-2020-491 Stack-buffer-overflow in Mat_VarReadNextInfo5

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17119 Crash type: Stack-buffer-overflow READ 4 Crash state: MatVarReadNextInfo5 MatGetDir MatioRead...