OSV-2021-207 Heap-buffer-overflow in blosc_getitem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29613 Crash type: Heap-buffer-overflow READ 1 Crash state: bloscgetitem getcoffset framegetlazychunk...

OSV-2021-205 Heap-use-after-free in lua_closeslot

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29610 Crash type: Heap-use-after-free WRITE 1 Crash state: luacloseslot luaLtraceback msghandler...

OSV-2021-204 Heap-buffer-overflow in WelsDec::NeedErrorCon

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29604 Crash type: Heap-buffer-overflow READ 1 Crash state: WelsDec::NeedErrorCon WelsDec::CheckAndFinishLastPic WelsDecodeBs...

OSV-2021-203 Memcpy-param-overlap in flatview_write_continue

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29586 Crash type: Memcpy-param-overlap Crash state: flatviewwritecontinue flatviewwrite addressspacewrite...

OSV-2017-167 Global-buffer-overflow in vte_write_debug

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=457 Crash type: Global-buffer-overflow READ 1 Crash state: vtewritedebug doaction parsedata...

OSV-2017-161 Global-buffer-overflow in vte_write_debug

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=449 Crash type: Global-buffer-overflow READ 1 Crash state: vtewritedebug doexecute doaction...

OSV-2016-5 Global-buffer-overflow in vte_write_debug

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=182 Crash type: Global-buffer-overflow READ 1 Crash state: vtewritedebug doaction parsedata...

OSV-2016-4 Global-buffer-overflow in vte_write_debug

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=174 Crash type: Global-buffer-overflow READ 1 Crash state: vtewritedebug doexecute doaction...

OSV-2017-159 Global-buffer-overflow in vte_write_debug

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=182 Crash type: Global-buffer-overflow READ 1 Crash state: vtewritedebug doaction parsedata...

OSV-2016-3 UNKNOWN READ in file_regexec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=143 Crash type: UNKNOWN READ Crash state: fileregexec magiccheck match...

OSV-2018-459 Use-of-uninitialized-value in lex_white

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5632 Crash type: Use-of-uninitialized-value Crash state: lexwhite pdflex pdfprocessstream...

OSV-2017-154 Heap-buffer-overflow in TetrahedralInterpFloat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=852 Crash type: Heap-buffer-overflow READ 4 Crash state: TetrahedralInterpFloat LUTeval16 CachedXFORM...

OSV-2018-451 Use-of-uninitialized-value in jbig2_huffman_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9682 Crash type: Use-of-uninitialized-value Crash state: jbig2huffmanget jbig2decodesymboldict jbig2symboldictionary...

OSV-2018-448 Use-of-uninitialized-value in CachedXFORM4to3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5623 Crash type: Use-of-uninitialized-value Crash state: CachedXFORM4to3 cmsDoTransform fzlcmstransformpixmap...

OSV-2018-446 Use-of-uninitialized-value in fz_drop_key_storable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5879 Crash type: Use-of-uninitialized-value Crash state: fzdropkeystorable fzdropcolorspacecontext fzdropcontext...

OSV-2018-441 Stack-buffer-underflow in ps_index

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9970 Crash type: Stack-buffer-underflow READ 8 Crash state: psindex psrun evalpostscriptfunc...

OSV-2018-422 Use-of-uninitialized-value in cf2_glyphpath_pushPrevElem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5659 Crash type: Use-of-uninitialized-value Crash state: cf2glyphpathpushPrevElem cf2glyphpathcurveTo cf2interpT2CharString...

OSV-2018-413 Use-of-uninitialized-value in fz_adjust_ft_glyph_width

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5596 Crash type: Use-of-uninitialized-value Crash state: fzadjustftglyphwidth doftrenderglyph fzrenderftglyph...

OSV-2018-417 UNKNOWN READ in boost::sub_match<std::__1::__wrap_iter<char const*> >::sub_match

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9539 Crash type: UNKNOWN READ Crash state: boost::submatch ::submatch ZNSt316vectorIN5boost9submatchINS11wrapiterIPKcEEEENS9allocatorIS7EEE1 boost::matchresults, std::1::allocatorboo...

OSV-2018-408 Use-of-uninitialized-value in fz_is_empty_irect

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5865 Crash type: Use-of-uninitialized-value Crash state: fzisemptyirect fzintersectirect fzdrawclippath...