OSV-2021-520 Heap-buffer-overflow in flatbuffers::EscapeString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32008 Crash type: Heap-buffer-overflow READ 1 Crash state: flatbuffers::EscapeString flexbuffers::Reference::ToString void flexbuffers::AppendToString...

OSV-2021-514 UNKNOWN READ in _fini

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31953 Crash type: UNKNOWN READ Crash state: fini...

OSV-2021-512 Heap-buffer-overflow in luaG_getfuncline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31892 Crash type: Heap-buffer-overflow READ 1 Crash state: luaGgetfuncline luaGrunerror luaDgrowstack...

OSV-2021-510 Heap-use-after-free in grk_object_unref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31874 Crash type: Heap-use-after-free READ 8 Crash state: grkobjectunref grk::GrkObjectImpl::release grk::GrkObject::unref...

OSV-2021-509 Heap-buffer-overflow in _estrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31922 Crash type: Heap-buffer-overflow READ Crash state: estrdup exifprocessusercomment exifprocessIFDTAGimpl...

OSV-2021-504 Heap-buffer-overflow in ih264d_mark_err_slice_skip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31757 Crash type: Heap-buffer-overflow WRITE 8 Crash state: ih264dmarkerrsliceskip ih264dvideodecode ih264dapifunction...

OSV-2021-503 Use-after-poison in std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::Expression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31765 Crash type: Use-after-poison READ 8 Crash state: std::1::uniqueptrSkSL::Expression, std::1::defaultdeleteSkSL::Expression SkSL::DefinitionMap::getKnownDefinition SkSL::VariableReference::constantPropagate...

OSV-2021-498 Invalid-free in frame_get_lazychunk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31705 Crash type: Invalid-free Crash state: framegetlazychunk framedecompresschunk blosc2schunkdecompresschunk...

OSV-2021-495 Heap-double-free in bit_chain_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31724 Crash type: Heap-double-free Crash state: bitchainfree dwgencodeMTEXT dwgencodeaddobject...

OSV-2021-487 UNKNOWN READ in blosc_run_decompression_with_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31611 Crash type: UNKNOWN READ Crash state: bloscrundecompressionwithcontext blosc2decompressctx framedecompresschunk...

OSV-2021-481 Heap-buffer-overflow in ZSTD_createDDict_advanced

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31586 Crash type: Heap-buffer-overflow READ Crash state: ZSTDcreateDDictadvanced ZSTDcreateDDict bloscrundecompressionwithcontext...

OSV-2021-480 UNKNOWN READ in std::__Fuzzer::basic_filebuf<char, std::__Fuzzer::char_traits<char> >::setbuf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31578 Crash type: UNKNOWN READ Crash state: std::Fuzzer::basicfilebuf ::setbuf std::Fuzzer::basicfilebuf ::basicfil...

OSV-2021-476 Heap-buffer-overflow in blosc_d

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31556 Crash type: Heap-buffer-overflow READ 4 Crash state: bloscd dojob bloscrundecompressionwithcontext...

OSV-2021-464 Heap-buffer-overflow in blosc_read_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31535 Crash type: Heap-buffer-overflow READ 16 Crash state: bloscreadheader blosc2cbuffersizes framegetlazychunk...

OSV-2021-461 Heap-buffer-overflow in ProcessReply

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31527 Crash type: Heap-buffer-overflow READ 1 Crash state: ProcessReply wolfSSLconnect client.c...

OSV-2021-460 Heap-buffer-overflow in Op_to_sdr_planes::convert_colorspace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31495 Crash type: Heap-buffer-overflow READ 2 Crash state: Optosdrplanes::convertcolorspace heif::ColorConversionPipeline::convertimage heif::convertcolorspace...

OSV-2021-459 Segv on unknown address in slice_segment_header::operator=

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31492 Crash type: Segv on unknown address Crash state: slicesegmentheader::operator= slicesegmentheader::read decodercontext::readsliceNAL...

OSV-2021-457 Heap-buffer-overflow in unescape_tag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31491 Crash type: Heap-buffer-overflow READ 1 Crash state: unescapetag ircparsemessagetags ircservereventtags...

OSV-2021-455 Heap-use-after-free in zend_hash_iterator_pos_ex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31423 Crash type: Heap-use-after-free READ 1 Crash state: zendhashiteratorposex ZENDFEFETCHRWSPECVARHANDLER fuzzerexecuteex...

OSV-2021-454 Heap-buffer-overflow in irc_parse_message_tags

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31443 Crash type: Heap-buffer-overflow READ 8 Crash state: ircparsemessagetags ircservereventtags signalemitreal...