OSV-2017-126 Bad-cast to const std::__1::__less<unsigned long, unsigned long> *_start

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=606 Crash type: Bad-cast Crash state: Bad-cast to const std::1::less start...

OSV-2017-121 Global-buffer-overflow in vte_write_debug

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8923 Crash type: Global-buffer-overflow READ 1 Crash state: vtewritedebug dotrans tsmvteinput...

OSV-2017-120 Global-buffer-overflow in csnStreamDissector

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1571 Crash type: Global-buffer-overflow READ 2 Crash state: csnStreamDissector csnStreamDissector csnStreamDissector...

OSV-2017-117 Use-of-uninitialized-value in CharToWide

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4290 Crash type: Use-of-uninitialized-value Crash state: CharToWide Archive::GetComment Archive::ViewComment...

OSV-2017-114 Use-of-uninitialized-value in __gxx_personality_v0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4310 Crash type: Use-of-uninitialized-value Crash state: gxxpersonalityv0 UnwindRaiseException ErrorHandler::Throw...

OSV-2017-109 Use-of-uninitialized-value in Unpack::MakeDecodeTables

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4298 Crash type: Use-of-uninitialized-value Crash state: Unpack::MakeDecodeTables Unpack::ReadTables20 Unpack::Unpack20...

OSV-2017-113 Use-of-uninitialized-value in CommandData::IsProcessFile

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4411 Crash type: Use-of-uninitialized-value Crash state: CommandData::IsProcessFile CmdExtract::ExtractCurrentFile CmdExtract::ExtractArchive...

OSV-2017-108 Heap-use-after-free in nl::wpantund::SpinelNCPInstance::should_filter_address

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4459 Crash type: Heap-use-after-free READ 6 Crash state: nl::wpantund::SpinelNCPInstance::shouldfilteraddress nl::wpantund::SpinelNCPInstance::handlencpspinelvalueinserted nl::wpantund::SpinelNCPInstance::handlencpspinelcallba...

OSV-2021-169 Heap-buffer-overflow in H5O__cont_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29549 Crash type: Heap-buffer-overflow READ 1 Crash state: H5Ocontdecode H5Ochunkdeserialize H5Ocachedeserialize...

OSV-2017-106 Use-of-uninitialized-value in getrn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2601 Crash type: Use-of-uninitialized-value Crash state: getrn lhretrieve intthreadgetitem...

OSV-2017-101 Heap-double-free in ExtensionObject_deleteMembers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4345 Crash type: Heap-double-free Crash state: ExtensionObjectdeleteMembers UAdeleteMembers UAdecodeBinary...

OSV-2017-95 Use-of-uninitialized-value in Archive::GetComment

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4410 Crash type: Use-of-uninitialized-value Crash state: Archive::GetComment Archive::ViewComment CmdExtract::ExtractArchive...

OSV-2016-2 UNKNOWN READ in file_regexec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=283 Crash type: UNKNOWN READ Crash state: fileregexec magiccheck match...

OSV-2017-93 Use-of-uninitialized-value in CharToWideMap

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4285 Crash type: Use-of-uninitialized-value Crash state: CharToWideMap CharToWide Archive::GetComment...

OSV-2017-91 UNKNOWN READ in spinel_datatype_vunpack_

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4790 Crash type: UNKNOWN READ Crash state: spineldatatypevunpack spineldatatypeunpack nl::wpantund::SpinelNCPInstance::handlencpspinelvalueinserted...

OSV-2017-90 Use-of-uninitialized-value in ComprDataIO::UnpRead

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4283 Crash type: Use-of-uninitialized-value Crash state: ComprDataIO::UnpRead Unpack::UnpReadBuf Unpack::Unpack15...

OSV-2021-162 Segv on unknown address in Mat_H5ReadNextReferenceData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29540 Crash type: Segv on unknown address Crash state: MatH5ReadNextReferenceData MatVarRead73 ReadData...

OSV-2017-83 Heap-buffer-overflow in idn2_lookup_u8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2262 Crash type: Heap-buffer-overflow READ 4 Crash state: idn2lookupu8 pslidnatoASCII addpunycodeifneeded...

OSV-2017-76 Use-of-uninitialized-value in Archive::ConvertFileHeader

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4279 Crash type: Use-of-uninitialized-value Crash state: Archive::ConvertFileHeader Archive::ReadHeader15 Archive::ReadHeader...

OSV-2021-159 UNKNOWN READ in htp_connp_RES_FINALIZE

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29551 Crash type: UNKNOWN READ Crash state: htpconnpRESFINALIZE htpconnpresdata fuzzhtp.c...