OSV-2018-388 Use-of-uninitialized-value in MatShaperEval16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5748 Crash type: Use-of-uninitialized-value Crash state: MatShaperEval16 PrecalculatedXFORM cmsDoTransform...

OSV-2018-389 UNKNOWN READ in boost::re_detail_NUMBER::basic_regex_creator<char, boost::regex_traits<char, boo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6708 Crash type: UNKNOWN READ Crash state: boost::redetailNUMBER::basicregexcreatorchar, boost::regextraitschar, boo boost::redetailNUMBER::basicregexcreatorchar, boost::regextraitschar, boo...

OSV-2018-384 Use-of-uninitialized-value in template_affine_N_lerp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5616 Crash type: Use-of-uninitialized-value Crash state: templateaffineNlerp paintaffinelerpdasa0 fzpaintimageimp...

OSV-2018-367 Use-of-uninitialized-value in cf2_glyphpath_lineTo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8323 Crash type: Use-of-uninitialized-value Crash state: cf2glyphpathlineTo cf2glyphpathcloseOpenPath cf2glyphpathmoveTo...

OSV-2018-368 Use-of-uninitialized-value in evict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5666 Crash type: Use-of-uninitialized-value Crash state: evict fzemptystore fzdropstorecontext...

OSV-2018-369 Negative-size-param in get_urls_css

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8032 Crash type: Negative-size-param Crash state: geturlscss wgetcssfuzzer.c...

OSV-2018-347 Heap-use-after-free in fz_drop_key_storable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5521 Crash type: Heap-use-after-free READ 4 Crash state: fzdropkeystorable fzdropdefaultcolorspaces fzdrawdropdevice...

OSV-2018-335 Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10888 Crash type: Null-dereference READ Crash state: NULL...

OSV-2018-332 UNKNOWN READ in template_affine_color_N_lerp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6522 Crash type: UNKNOWN READ Crash state: templateaffinecolorNlerp paintaffinecolorlerpN fzpaintimageimp...

OSV-2017-138 Heap-use-after-free in gnutls_x509_crl_deinit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1304 Crash type: Heap-use-after-free READ 8 Crash state: gnutlsx509crldeinit gnutlspkcs12simpleparse start...

OSV-2018-301 Use-of-uninitialized-value in fz_paint_triangle

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5641 Crash type: Use-of-uninitialized-value Crash state: fzpainttriangle dopainttri fzprocessshadetype4...

OSV-2018-300 Use-of-uninitialized-value in fz_unpack_tile

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8326 Crash type: Use-of-uninitialized-value Crash state: fzunpacktile fzdecompimagefromstream compressedimagegetpixmap...

OSV-2018-291 Use-of-uninitialized-value in pdf_lex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5610 Crash type: Use-of-uninitialized-value Crash state: pdflex pdfloadcmap pdfloadembeddedcmap...

OSV-2017-134 Heap-buffer-overflow in cdf_file_property_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1064 Crash type: Heap-buffer-overflow READ 1 Crash state: cdffilepropertyinfo cdffilesummaryinfo cdfchecksummaryinfo...

OSV-2018-293 Use-of-uninitialized-value in pdf_load_version

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5496 Crash type: Use-of-uninitialized-value Crash state: pdfloadversion pdfinitdocument pdfopendocumentwithstream...

OSV-2018-280 Heap-buffer-overflow in xstrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7931 Crash type: Heap-buffer-overflow READ Crash state: xstrdup ftpparsewinntls wgetftplsfuzzer.c...

OSV-2018-273 Heap-buffer-overflow in ftp_parse_winnt_ls

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7930 Crash type: Heap-buffer-overflow READ 1 Crash state: ftpparsewinntls wgetftplsfuzzer.c...

OSV-2021-184 Heap-buffer-overflow in H5HL__fl_deserialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29580 Crash type: Heap-buffer-overflow READ 1 Crash state: H5HLfldeserialize H5HLcachedatablockdeserialize H5Cloadentry...

OSV-2018-255 Heap-use-after-free in add_range

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5492 Crash type: Heap-use-after-free READ 4 Crash state: addrange pdfmaprangetorange pdfparsebfrange...

OSV-2018-252 Heap-use-after-free in fz_fin_cached_color_converter

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5604 Crash type: Heap-use-after-free READ 8 Crash state: fzfincachedcolorconverter fzpaintshade fzdrawfillshade...