OSV-2020-334 Heap-buffer-overflow in _iri_unescape_inline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14427 Crash type: Heap-buffer-overflow READ 1 Crash state: iriunescapeinline wgetiriparse addmirror...

OSV-2020-335 Global-buffer-overflow in template_fuzzer.cc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18988 Crash type: Global-buffer-overflow WRITE 1 Crash state: templatefuzzer.cc...

OSV-2020-317 Heap-buffer-overflow in r_core_lines_initcache

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15035 Crash type: Heap-buffer-overflow WRITE 8 Crash state: rcorelinesinitcache cblinesto rconfigseti...

OSV-2020-324 Heap-buffer-overflow in av1_convolve_2d_copy_sr_sse2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12549 Crash type: Heap-buffer-overflow READ 16 Crash state: av1convolve2dcopysrsse2 av1convolve2dfacade av1makeinterpredictor...

OSV-2020-322 Negative-size-param in parse_proxy_protocol_v2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14455 Crash type: Negative-size-param Crash state: parseproxyprotocolv2 parsehttprequest fuzzparsehttprequest...

OSV-2020-315 Heap-buffer-overflow in r_str_utf8_codepoint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18122 Crash type: Heap-buffer-overflow READ 1 Crash state: rstrutf8codepoint rstrcharfullwidth rstrlenutf8...

OSV-2020-313 Heap-buffer-overflow in git_buf_decode_base85

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18882 Crash type: Heap-buffer-overflow READ 1 Crash state: gitbufdecodebase85 parsepatchbinaryside parsepatchbinary...

mruby:mruby_proto_fuzzer: Heap-double-free in mrb_default_allocf

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4894663076216832 Project: mruby Fuzzing Engine: honggfuzz Fuzz Target: mrubyprotofuzzer Job Type: honggfuzzasanmruby Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x60300001c8a0 Crash...

OSV-2020-307 Heap-buffer-overflow in spng_decode_image

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16830 Crash type: Heap-buffer-overflow READ 1 Crash state: spngdecodeimage spngreadfuzzer.cc...

OSV-2020-303 UNKNOWN READ in dav1d_put_bilin_avx2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16954 Crash type: UNKNOWN READ Crash state: dav1dputbilinavx2...

OSV-2020-305 Stack-buffer-overflow in ot::NetworkData::Leader::SendCommissioningGetResponse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17297 Crash type: Stack-buffer-overflow READ 1 Crash state: ot::NetworkData::Leader::SendCommissioningGetResponse ot::NetworkData::Leader::HandleCommissioningGet ot::Coap::CoapBase::ProcessReceivedRequest...

OSV-2020-294 Heap-buffer-overflow in ihevcd_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18058 Crash type: Heap-buffer-overflow READ 4 Crash state: ihevcdprocess ihevcdprocessthread clone...

OSV-2020-299 Bad-free in sig_destroyed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17160 Crash type: Bad-free Crash state: sigdestroyed signalemitreal signalemit...

OSV-2020-288 Heap-use-after-free in pixReadMemBmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19723 Crash type: Heap-use-after-free READ Crash state: pixReadMemBmp pixReadMem pixrotateshearfuzzer.cc...

OSV-2020-289 Stack-buffer-overflow in ot::Message::Write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17147 Crash type: Stack-buffer-overflow READ Crash state: ot::Message::Write ot::Message::Append ot::Mle::Mle::AppendNetworkData...

OSV-2020-287 Heap-use-after-free in condition_free_list_type

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13882 Crash type: Heap-use-after-free READ 8 Crash state: conditionfreelisttype configparsenetcondition nextassignment...

OSV-2020-280 Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15458 Crash type: Null-dereference READ Crash state: NULL...

OSV-2020-273 Heap-use-after-free in copy_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19509 Crash type: Heap-use-after-free READ 1 Crash state: copystring douncompressblock processblock...

OSV-2020-263 Heap-use-after-free in dotnet_parse_tilde_2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19179 Crash type: Heap-use-after-free READ 2 Crash state: dotnetparsetilde2 dotnetparsetilde dotnetparsecom...

OSV-2020-261 Use-of-uninitialized-value in WelsDec::CWelsDecoder::ReleaseBufferedReadyPicture

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18744 Crash type: Use-of-uninitialized-value Crash state: WelsDec::CWelsDecoder::ReleaseBufferedReadyPicture WelsDec::CWelsDecoder::ReorderPicturesInDisplay WelsDec::CWelsDecoder::DecodeFrame2WithCtx...