OSV-2021-1333 Heap-buffer-overflow in pe_get_section_full_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38952 Crash type: Heap-buffer-overflow READ 1 Crash state: pegetsectionfullname peload yrmodulesload...

OSV-2021-1326 Heap-buffer-overflow in my_ismbchar_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38923 Crash type: Heap-buffer-overflow READ 2 Crash state: myismbcharutf8 checkcolumnname getvariable...

OSV-2021-1316 Stack-buffer-overflow in Assimp::ZipArchiveIOSystem::Implement::MapArchive

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38870 Crash type: Stack-buffer-overflow READ Crash state: Assimp::ZipArchiveIOSystem::Implement::MapArchive Assimp::ZipArchiveIOSystem::getFileList Assimp::D3MF::D3MFOpcPackage::D3MFOpcPackage...

OSV-2021-1314 Use-of-uninitialized-value in LoadBinarySchema

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38817 Crash type: Use-of-uninitialized-value Crash state: LoadBinarySchema dotest flatbuffersmonsterfuzzer.cc...

OSV-2021-1312 Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38808 Crash type: Use-of-uninitialized-value Crash state: std::1::basicostream & std::1::putcha printjson fuzzdump.cpp...

OSV-2021-1311 Null-dereference READ in unzOpenCurrentFile3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38873 Crash type: Null-dereference READ Crash state: unzOpenCurrentFile3 unzOpenCurrentFile Assimp::ZipFileInfo::Extract...

OSV-2021-1310 Heap-use-after-free in hb_resolve_overflows

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38878 Crash type: Heap-use-after-free READ 4 Crash state: hbresolveoverflows repack hbsubsetorfail...

OSV-2021-1300 UNKNOWN READ in get_body

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38750 Crash type: UNKNOWN READ Crash state: getbody parsesdp fuzzparsemsg.c...

OSV-2021-1287 Use-of-uninitialized-value in piex::image_type_recognition::ContainsNikonSignatures

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38799 Crash type: Use-of-uninitialized-value Crash state: piex::imagetyperecognition::ContainsNikonSignatures piex::imagetyperecognition::NefTypeChecker::IsMyType piex::imagetyperecognition::RecognizeRawImageTypeLite...

OSV-2021-1269 Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38777 Crash type: Use-of-uninitialized-value Crash state: std::1::basicostream & std::1::putcha S2LaxPolylineShape::Init S2LaxPolylineShape::S2LaxPolylineShape...

OSV-2021-1266 UNKNOWN WRITE in void AK::BumpAllocator<true, 2097152ul>::for_each_chunk<AK::UniformBumpAllocator

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38701 Crash type: UNKNOWN WRITE Crash state: void AK::BumpAllocator::foreachchunk::BumpAllocatedLinkedList regex::Matcher::execute...

OSV-2021-1262 Heap-buffer-overflow in H5O__chunk_deserialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38686 Crash type: Heap-buffer-overflow READ 1 Crash state: H5Ochunkdeserialize H5Ocachechkdeserialize H5Cprotect...

OSV-2021-1261 UNKNOWN READ in kh_get_ucl_hash_node

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38660 Crash type: UNKNOWN READ Crash state: khgetuclhashnode uclhashsearch uclinherithandler...

OSV-2021-1258 Bad-cast to SplashPattern from invalid vptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38669 Crash type: Bad-cast Crash state: Bad-cast to SplashPattern from invalid vptr SplashState::SplashState Splash::restoreState...

OSV-2021-1257 Stack-buffer-overflow in GRIBDataset::Open

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38610 Crash type: Stack-buffer-overflow READ 1 Crash state: GRIBDataset::Open GDALOpenEx GDALOpen...

OSV-2021-1250 Segv on unknown address in ft_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38635 Crash type: Segv on unknown address Crash state: ftfree ftmemfree cffcmapunicodedone...

OSV-2021-1249 Heap-buffer-overflow in int flatbuffers::ReadScalar<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38578 Crash type: Heap-buffer-overflow READ 4 Crash state: int flatbuffers::ReadScalar flatbuffers::Table::GetVTable flatbuffers::Table::GetOptionalFieldOffset...

OSV-2021-1246 Heap-buffer-overflow in FSE_writeNCount_generic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38553 Crash type: Heap-buffer-overflow WRITE 1 Crash state: FSEwriteNCountgeneric FSEwriteNCount ZSTDbuildCTable...

OSV-2021-1245 Heap-buffer-overflow in ucl_object_dtor_unref_single

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38550 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectdtorunrefsingle uclobjectdtorunref uclhashdestroy...

OSV-2021-1239 Heap-buffer-overflow in stbi__load_and_postprocess_8bit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38394 Crash type: Heap-buffer-overflow READ 2 Crash state: stbiloadandpostprocess8bit stbimage.h...