OSV-2021-1194 Heap-use-after-free in zend_string_release

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38014 Crash type: Heap-use-after-free READ 4 Crash state: zendstringrelease zendclosurefreestorage zendobjectsstoredel...

OSV-2021-1192 Segv on unknown address in arrow::DefaultBackend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37927 Crash type: Segv on unknown address Crash state: arrow::DefaultBackend arrow::PoolBuffer::MakeUnique arrow::AllocateBuffer...

OSV-2021-1189 Segv on unknown address in arrow::DefaultBackend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37915 Crash type: Segv on unknown address Crash state: arrow::DefaultBackend arrow::defaultmemorypool arrow::ipc::IpcReadOptions::Defaults...

OSV-2021-1186 Segv on unknown address in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37856 Crash type: Segv on unknown address Crash state: helpeructracecode...

OSV-2021-1183 UNKNOWN WRITE in draco::DepthFirstTraverser<draco::CornerTable, draco::MeshAttributeIndicesEncodi

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37864 Crash type: UNKNOWN WRITE Crash state: draco::DepthFirstTraverserdraco::CornerTable, draco::MeshAttributeIndicesEncodi draco::MeshTraversalSequencerdraco::DepthFirstTraverserdraco::CornerTable, dra...

OSV-2021-1181 Heap-buffer-overflow in draco::MeshPredictionSchemeTexCoordsDecoder<int, draco::PredictionSchemeWrapDeco

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37814 Crash type: Heap-buffer-overflow WRITE 4 Crash state: draco::MeshPredictionSchemeTexCoordsDecoderint, draco::PredictionSchemeWrapDeco draco::MeshPredictionSchemeTexCoordsDecoderint, draco::PredictionSchemeWrapDeco...

OSV-2021-1174 Heap-use-after-free in zend_string_release

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37695 Crash type: Heap-use-after-free READ 4 Crash state: zendstringrelease zendclosurefreestorage zendobjectsstoredel...

OSV-2021-1173 UNKNOWN READ in luaG_getfuncline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37678 Crash type: UNKNOWN READ Crash state: luaGgetfuncline luaGrunerror luaDgrowstack...

OSV-2021-1172 UNKNOWN WRITE in snmp_add_var

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37647 Crash type: UNKNOWN WRITE Crash state: snmpaddvar snmpapifuzzer.c...

OSV-2021-1170 Heap-buffer-overflow in exif_get_slong

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37581 Crash type: Heap-buffer-overflow READ 1 Crash state: exifgetslong exifgetsrational mnoteappleentrygetvalue...

OSV-2021-1166 Use-of-uninitialized-value in H5F_addr_decode_len

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37536 Crash type: Use-of-uninitialized-value Crash state: H5Faddrdecodelen H5VLnativetokentoaddr H5VLnativeobjectopen...

OSV-2021-1161 UNKNOWN READ in decode_ise

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37413 Crash type: UNKNOWN READ Crash state: decodeise physicaltosymbolic fuzzastcphysicaltosymbolic.cpp...

OSV-2021-1159 UNKNOWN WRITE in hb_bit_set_invertible_t::set

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37425 Crash type: UNKNOWN WRITE Crash state: hbbitsetinvertiblet::set hbsparsesett::set hbsetcopy...

OSV-2021-1157 Heap-use-after-free in TranslateRules

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37410 Crash type: Heap-use-after-free READ 1 Crash state: TranslateRules TranslateWord3 TranslateWord...

OSV-2021-1153 Heap-buffer-overflow in hb_array_t<OT::IntType<unsigned int, 4u> const> hb_array_t<OT::IntType<unsigned

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37348 Crash type: Heap-buffer-overflow READ 4 Crash state: hbarrayt const hbarrayt ::copy hbheadt , decltype...

OSV-2021-1152 UNKNOWN READ in exif_mnote_data_apple_load

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37334 Crash type: UNKNOWN READ Crash state: exifmnotedataappleload exifmnotedataload interpretmakernote...

OSV-2021-1149 Heap-buffer-overflow in JS::Lexer::consume

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37294 Crash type: Heap-buffer-overflow READ 1 Crash state: JS::Lexer::consume JS::Lexer::next JS::Parser::consume...

OSV-2021-1142 Heap-buffer-overflow in exif_get_slong

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37231 Crash type: Heap-buffer-overflow READ 1 Crash state: exifgetslong mnoteappleentrygetvalue exifmnotedataapplegetvalue...

OSV-2021-1141 Heap-use-after-free in TranslateLetter

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37238 Crash type: Heap-use-after-free READ 4 Crash state: TranslateLetter TranslateWord3 TranslateWord...

OSV-2021-1138 Heap-buffer-overflow in exif_get_sshort

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37226 Crash type: Heap-buffer-overflow READ 1 Crash state: exifgetsshort exifgetshort exifmnotedataappleload...