OSV-2017-73 UNKNOWN READ in rawspeed::MosDecoder::decodeRawInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2479 Crash type: UNKNOWN READ Crash state: rawspeed::MosDecoder::decodeRawInternal rawspeed::RawDecoder::decodeRaw start...

OSV-2017-72 Use-of-uninitialized-value in _gnutls_mpi_dprint_size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1494 Crash type: Use-of-uninitialized-value Crash state: gnutlsmpidprintsize wrapnettlepkencrypt gnutlsgenrsaclientkx...

OSV-2017-71 Use-of-uninitialized-value in wcsncatz

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4350 Crash type: Use-of-uninitialized-value Crash state: wcsncatz Archive::ProcessExtra50 Archive::ReadHeader50...

OSV-2017-69 Use-of-uninitialized-value in IsRelativeSymlinkSafe

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4409 Crash type: Use-of-uninitialized-value Crash state: IsRelativeSymlinkSafe ExtractUnixLink30 ExtractSymlink...

OSV-2017-67 Heap-buffer-overflow in OSS_FUZZ_png_combine_row

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3608 Crash type: Heap-buffer-overflow WRITE Crash state: OSSFUZZpngcombinerow OSSFUZZpngreadrow start...

OSV-2017-66 UNKNOWN READ in cfree

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4561 Crash type: UNKNOWN READ Crash state: cfree copyAttributeIntoNode UAServereditNode...

OSV-2017-65 Use-of-uninitialized-value in Archive::GetComment

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4275 Crash type: Use-of-uninitialized-value Crash state: Archive::GetComment Archive::ViewComment CmdExtract::ExtractArchive...

OSV-2017-64 Use-of-uninitialized-value in SetExtraInfo20

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4408 Crash type: Use-of-uninitialized-value Crash state: SetExtraInfo20 CmdExtract::ExtractCurrentFile CmdExtract::ExtractArchive...

OSV-2017-61 Heap-buffer-overflow in opj_mct_decode_real

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3305 Crash type: Heap-buffer-overflow READ 4 Crash state: opjmctdecodereal opjtcdmctdecode opjtcddecodetile...

OSV-2017-59 Heap-buffer-overflow in nlohmann::basic_json<std::__1::map, std::__1::vector, std::__1::basic_string<cha

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=381 Crash type: Heap-buffer-overflow READ 1 Crash state: nlohmann::basicjsonstd::1::map, std::1::vector, std::1::basicstringcha nlohmann::basicjsonstd::1::map, std::1::vector, std::1::basicstringcha...

OSV-2017-58 Heap-use-after-free in UA_Array_copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4300 Crash type: Heap-use-after-free READ Crash state: UAArraycopy copynoInit NodeIdcopy...

OSV-2017-55 Heap-double-free in ExtensionObject_deleteMembers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4296 Crash type: Heap-double-free Crash state: ExtensionObjectdeleteMembers UAArraydelete ArraydecodeBinary...

OSV-2021-145 Heap-buffer-overflow in H5O_dtype_decode_helper

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29536 Crash type: Heap-buffer-overflow READ 1 Crash state: H5Odtypedecodehelper H5Odtypedecode H5Odtypeshareddecode...

OSV-2017-54 Use-of-uninitialized-value in macho_parse_file_32_be

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4375 Crash type: Use-of-uninitialized-value Crash state: machoparsefile32be machoload yrmodulesload...

OSV-2021-141 Use-of-uninitialized-value in H5G__traverse_real

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29546 Crash type: Use-of-uninitialized-value Crash state: H5Gtraversereal H5Gtraverse H5Glocinfo...

OSV-2017-42 Heap-use-after-free in UA_Array_copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4346 Crash type: Heap-use-after-free READ 2 Crash state: UAArraycopy copynoInit NodeIdcopy...

OSV-2017-41 Heap-buffer-overflow in OSS_FUZZ_png_combine_row

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3606 Crash type: Heap-buffer-overflow WRITE 4 Crash state: OSSFUZZpngcombinerow OSSFUZZpngreadrow start...

OSV-2017-39 Use-of-uninitialized-value in IsRelativeSymlinkSafe

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4308 Crash type: Use-of-uninitialized-value Crash state: IsRelativeSymlinkSafe ExtractUnixLink30 ExtractSymlink...

OSV-2017-33 Use-of-uninitialized-value in __cxxabiv1::scan_eh_tab

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4307 Crash type: Use-of-uninitialized-value Crash state: cxxabiv1::scanehtab gxxpersonalityv0 UnwindRaiseException...

OSV-2018-231 Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5843 Crash type: Use-of-uninitialized-value Crash state: rawspeed::RawImageData::checkMemIsInitialized rawspeed::RawDecoder::decodeRaw rawspeed::alignedMalloc...