OSV-2021-1771 Stack-buffer-overflow in fn_ElIn_evaluate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43012 Crash type: Stack-buffer-overflow WRITE 4 Crash state: fnElInevaluate pdfitfusingfunction gsbegintransparencymask...

OSV-2021-1770 UNKNOWN READ in pdfi_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42980 Crash type: UNKNOWN READ Crash state: pdfifreeobject pdficlearcontext pdfifreecontext...

OSV-2021-1767 Global-buffer-overflow in pdfi_dict_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42957 Crash type: Global-buffer-overflow READ 8 Crash state: pdfidictget pdfidictgetint pdfireadbareobject...

OSV-2021-1764 UNKNOWN READ in read_xref_stream_entries

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42927 Crash type: UNKNOWN READ Crash state: readxrefstreamentries pdfiprocessxrefstream pdfireadxrefstreamdict...

OSV-2021-1763 Stack-buffer-overflow in pdfi_oc_is_ocg_visible

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42908 Crash type: Stack-buffer-overflow WRITE Crash state: pdfiocisocgvisible pdfiopBDC pdfiinterpretstreamoperator...

OSV-2021-1762 Heap-buffer-overflow in TTF::be_u16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42934 Crash type: Heap-buffer-overflow READ 1 Crash state: TTF::beu16 TTF::Cmap::subtable TTF::Font::tryloadfromoffset...

OSV-2021-1760 Heap-buffer-overflow in grk::GrkImage::sycc420_to_rgb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42931 Crash type: Heap-buffer-overflow WRITE 4 Crash state: grk::GrkImage::sycc420torgb grk::GrkImage::colorsycctorgb grk::GrkImage::colorConvert...

OSV-2021-1759 Heap-use-after-free in zend_hash_reverse_apply

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42894 Crash type: Heap-use-after-free READ 4 Crash state: zendhashreverseapply shutdowndestructors zendcalldestructors...

OSV-2021-1756 Heap-buffer-overflow in Curl_sasl_decode_mech

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42901 Crash type: Heap-buffer-overflow READ 10 Crash state: Curlsasldecodemech Curlsaslparseurlauthoption pop3parseurloptions...

OSV-2021-1755 Heap-buffer-overflow in ndlz4_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42924 Crash type: Heap-buffer-overflow READ 4 Crash state: ndlz4decompress ndlzdecompress bloscd...

OSV-2021-1753 UNKNOWN READ in names_string_ref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42907 Crash type: UNKNOWN READ Crash state: namesstringref zfontglyphname pdfifapigetglyphnameorcid...

OSV-2021-1752 Heap-buffer-overflow in s_hex_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42896 Crash type: Heap-buffer-overflow READ 1 Crash state: shexprocess sexDprocess sreadbuf...

OSV-2021-1748 Heap-buffer-overflow in jxl::N_AVX2::FloatToRGBA8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42839 Crash type: Heap-buffer-overflow WRITE 1 Crash state: jxl::NAVX2::FloatToRGBA8 jxl::FinalizeImageRect jxl::ThreadPool::RunCallStatejxl::FinalizeFrameDecoding...

OSV-2021-1743 Stack-buffer-overflow in strncat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42736 Crash type: Stack-buffer-overflow WRITE Crash state: strncat pdfcmapopenfile pdfireadcmap...

OSV-2021-1740 Stack-buffer-overflow in pdfi_annot_draw_LE_one

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42783 Crash type: Stack-buffer-overflow WRITE Crash state: pdfiannotdrawLEone pdfiannotdrawLE pdfiannotdrawLine...

OSV-2021-1736 Segv on unknown address in symhash

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42741 Crash type: Segv on unknown address Crash state: symhash hashtabsearch mlssemanticlevelexpand...

OSV-2021-1733 UNKNOWN READ in mls_semantic_level_expand

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42729 Crash type: UNKNOWN READ Crash state: mlssemanticlevelexpand policydbusercache hashtabmap...

OSV-2021-1730 Heap-buffer-overflow in seturl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42708 Crash type: Heap-buffer-overflow READ Crash state: seturl parseurl curlurlset...

OSV-2021-1728 UNKNOWN READ in pdfi_dict_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42687 Crash type: UNKNOWN READ Crash state: pdfidictget pdfidictgetint pdfireadbareobject...

OSV-2021-1727 UNKNOWN WRITE in void uWS::WebSocketProtocol<true, Impl>::UnrolledXor<4>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42672 Crash type: UNKNOWN WRITE Crash state: void uWS::WebSocketProtocol::UnrolledXor void uWS::WebSocketProtocol::UnrolledXor void uWS::WebSocketProtocol::UnrolledXor...