OSV-2021-1003 Dynamic-stack-buffer-overflow in mdb_numeric_to_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36187 Crash type: Dynamic-stack-buffer-overflow WRITE 16 Crash state: mdbnumerictostring mdbxferbounddata mdbattemptbind...

OSV-2021-998 Dynamic-stack-buffer-overflow in std::__1::__wrap_iter<char const*>::__wrap_iter

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36137 Crash type: Dynamic-stack-buffer-overflow WRITE 8 Crash state: std::1::wrapiter::wrapiter std::1::basicstring, std::1::allocatorch geos::io::StringTokenizer::StringTokenizer...

OSV-2021-997 Heap-buffer-overflow in ZSTD_createDDict_advanced

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36103 Crash type: Heap-buffer-overflow READ Crash state: ZSTDcreateDDictadvanced ZSTDcreateDDict bloscrundecompressionwithcontext...

OSV-2021-991 Dynamic-stack-buffer-overflow in fmt::v8::detail::dragonbox::umul192_upper64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36110 Crash type: Dynamic-stack-buffer-overflow WRITE 8 Crash state: fmt::v8::detail::dragonbox::umul192upper64 fmt::v8::detail::dragonbox::cacheaccessor::computemul fmt::v8::detail::dragonbox::decimalfp...

OSV-2021-987 Use-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36127 Crash type: Use-after-poison WRITE 8 Crash state: AK::RefPtr ::RefPtr AK::String::String JS::abstractrelation...

OSV-2021-979 Heap-buffer-overflow in stbi__convert_16_to_8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36087 Crash type: Heap-buffer-overflow READ 2 Crash state: stbiconvert16to8 stbiloadandpostprocess8bit stbiloadfrommemory...

OSV-2021-977 Dynamic-stack-buffer-overflow in std::__1::pair<unsigned int, unsigned int>::pair<unsigned int, unsigned int, fal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36062 Crash type: Dynamic-stack-buffer-overflow WRITE 4 Crash state: std::1::pair::pair::type, std::1::unw void GFWX::decode...

OSV-2021-975 Dynamic-stack-buffer-overflow in CryptDigestUpdateInt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36074 Crash type: Dynamic-stack-buffer-overflow WRITE 8 Crash state: CryptDigestUpdateInt ComputeCpHash CheckCommandAudit...

OSV-2021-973 Heap-buffer-overflow in blosc_run_decompression_with_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36093 Crash type: Heap-buffer-overflow READ 4 Crash state: bloscrundecompressionwithcontext blosc2decompressctx framedecompresschunk...

OSV-2021-972 UNKNOWN READ in void mc_chroma<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36056 Crash type: UNKNOWN READ Crash state: void mcchroma generateinterpredictionsamples decodepredictionunit...

OSV-2021-962 Heap-use-after-free in Segment::write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36050 Crash type: Heap-use-after-free READ 1 Crash state: Segment::write Doublewrite::writepages Doublewrite::flushtodisk...

OSV-2021-958 Dynamic-stack-buffer-overflow in mdb_numeric_to_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35972 Crash type: Dynamic-stack-buffer-overflow WRITE 16 Crash state: mdbnumerictostring mdbxferbounddata mdbattemptbind...

OSV-2021-940 Heap-buffer-overflow in json_string_unescape

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35925 Crash type: Heap-buffer-overflow WRITE 1 Crash state: jsonstringunescape aftervalue executecallbacks...

OSV-2021-939 Segv on unknown address in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35912 Crash type: Segv on unknown address Crash state: helpeructracecode...

OSV-2021-935 Heap-buffer-overflow in answer_request

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35920 Crash type: Heap-buffer-overflow WRITE 1 Crash state: answerrequest FuzzAnswerTheRequest fuzzrfc1035.c...

OSV-2021-934 Heap-buffer-overflow in extract_addresses

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35865 Crash type: Heap-buffer-overflow WRITE 1 Crash state: extractaddresses FuzzExtractTheAddress fuzzrfc1035.c...

OSV-2021-932 Heap-buffer-overflow in resize_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35898 Crash type: Heap-buffer-overflow WRITE Crash state: resizepacket FuzzResizePacket fuzzrfc1035.c...

OSV-2021-931 Heap-buffer-overflow in extract_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35861 Crash type: Heap-buffer-overflow WRITE 1 Crash state: extractname answerauth FuzzAuth...

OSV-2021-930 Heap-use-after-free in dhcp6_no_relay

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35860 Crash type: Heap-use-after-free WRITE 1 Crash state: dhcp6norelay dhcp6mayberelay dhcp6reply...

OSV-2021-928 UNKNOWN WRITE in g_array_append_vals

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35890 Crash type: UNKNOWN WRITE Crash state: garrayappendvals gbytearrayappend fubytearrayappendbytes...