OSV-2020-489 UNKNOWN READ in ot::Dhcp6::Dhcp6Client::ProcessNextIdentityAssociation

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13348 Crash type: UNKNOWN READ Crash state: ot::Dhcp6::Dhcp6Client::ProcessNextIdentityAssociation ot::Dhcp6::Dhcp6Client::Start ot::Dhcp6::Dhcp6Client::UpdateAddresses...

OSV-2020-487 UNKNOWN READ in crc32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15278 Crash type: UNKNOWN READ Crash state: crc32 updatecrc pushdataready...

OSV-2020-494 Use-of-uninitialized-value in Variant_decodeJson

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14620 Crash type: Use-of-uninitialized-value Crash state: VariantdecodeJson UAdecodeJson fuzzjsondecode.cc...

OSV-2020-490 Heap-double-free in _free_resources

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12945 Crash type: Heap-double-free Crash state: freeresources rlistdelete rlistpurge...

OSV-2020-480 Use-of-uninitialized-value in _idn2_punycode_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13359 Crash type: Use-of-uninitialized-value Crash state: idn2punycodedecode tr46 idn2lookupu8...

OSV-2020-483 Heap-buffer-overflow in run_arm_filter

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15431 Crash type: Heap-buffer-overflow READ 1 Crash state: runarmfilter runfilter applyfilters...

OSV-2020-471 Stack-buffer-overflow in ot::Cli::Interpreter::ProcessService

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12642 Crash type: Stack-buffer-overflow WRITE Crash state: ot::Cli::Interpreter::ProcessService ot::Cli::Interpreter::ProcessLine ot::Cli::Uart::ProcessCommand...

OSV-2020-467 UNKNOWN READ in ot::MessageQueue::GetTail

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13345 Crash type: UNKNOWN READ Crash state: ot::MessageQueue::GetTail ot::Message::GetNext ot::MeshForwarder::GetDirectTransmission...

OSV-2020-468 Stack-buffer-overflow in ot::Ip6::Address::FromString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14821 Crash type: Stack-buffer-overflow WRITE 1 Crash state: ot::Ip6::Address::FromString ot::Cli::Coap::ProcessRequest ot::Cli::Interpreter::ProcessCoap...

OSV-2020-455 Heap-buffer-overflow in r_core_lines_initcache

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14690 Crash type: Heap-buffer-overflow WRITE 8 Crash state: rcorelinesinitcache cblinesto rconfigseti...

OSV-2020-461 Index-out-of-bounds in parse_file_extra_owner

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14393 Crash type: Index-out-of-bounds Crash state: parsefileextraowner processheadfileextra processheadfile...

OSV-2020-447 UNKNOWN READ in yyparse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17968 Crash type: UNKNOWN READ Crash state: yyparse mrbparserparse mrbparsenstring...

OSV-2020-449 Heap-buffer-overflow in perfetto::trace_processor::FuchsiaTraceParser::ParseTracePacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14752 Crash type: Heap-buffer-overflow READ 8 Crash state: perfetto::traceprocessor::FuchsiaTraceParser::ParseTracePacket perfetto::traceprocessor::TraceSorter::SortAndExtractEventsBeyondWindow...

OSV-2020-452 UNKNOWN READ in _fini

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18611 Crash type: UNKNOWN READ Crash state: fini...

OSV-2020-440 UNKNOWN READ in r_uleb128

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13915 Crash type: UNKNOWN READ Crash state: ruleb128 parseclass dexloadcode...

OSV-2020-434 Heap-buffer-overflow in format_generic_odp_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14429 Crash type: Heap-buffer-overflow READ 1 Crash state: formatgenericodpkey checkattrlen formatodpkeyattr...

OSV-2020-442 Heap-buffer-overflow in CRYPTO_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17715 Crash type: Heap-buffer-overflow READ 14 Crash state: CRYPTOstrdup X509V3addvalue i2vGENERALNAME...

OSV-2020-438 Use-of-uninitialized-value in ARM_post_printer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13768 Crash type: Use-of-uninitialized-value Crash state: ARMpostprinter fillinsn csdisasm...

OSV-2020-435 Heap-buffer-overflow in ares_parse_aaaa_reply

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15373 Crash type: Heap-buffer-overflow READ 16 Crash state: aresparseaaaareply ares-test-fuzz.c...

OSV-2020-412 Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18503 Crash type: Heap-buffer-overflow READ 2 Crash state: BEInt::operator unsigned short OT::IntType::operator unsigned int decltype...