OSV-2018-230 Heap-buffer-overflow in rtsp_rtp_readwrite

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7105 Crash type: Heap-buffer-overflow READ 1 Crash state: rtsprtpreadwrite readwritedata Curlreadwrite...

OSV-2018-228 Heap-buffer-overflow in g_variant_serialiser_is_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9828 Crash type: Heap-buffer-overflow READ 1 Crash state: gvariantserialiserisstring gvariantserialiserisobjectpath gvariantserialisedisnormal...

OSV-2018-227 Heap-buffer-overflow in rawspeed::TableLookUp::setTable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5256 Crash type: Heap-buffer-overflow WRITE 2 Crash state: rawspeed::TableLookUp::setTable rawspeed::RawImageData::setTable rawspeed::DngDecoder::handleMetadata...

OSV-2017-29 Heap-use-after-free in UInt32_encodeBinary

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4764 Crash type: Heap-use-after-free WRITE 4 Crash state: UInt32encodeBinary UAencodeBinaryInternal UAencodeBinary...

OSV-2018-226 Heap-buffer-overflow in pcf_get_encodings

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9561 Crash type: Heap-buffer-overflow READ 1 Crash state: pcfgetencodings pcfloadfont PCFFaceInit...

OSV-2018-224 UNKNOWN READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8353 Crash type: UNKNOWN READ Crash state: NULL...

OSV-2021-120 Heap-use-after-free in UA_SecureChannel_deleteMembersCleanup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5652 Crash type: Heap-use-after-free READ 8 Crash state: UASecureChanneldeleteMembersCleanup UASecureChannelManagerdeleteMembers UAServerdelete...

OSV-2018-219 UNKNOWN READ in pcf_get_encodings

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9527 Crash type: UNKNOWN READ Crash state: pcfgetencodings pcfloadfont PCFFaceInit...

OSV-2018-213 Use-of-uninitialized-value in gvs_tuple_is_normal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9840 Crash type: Use-of-uninitialized-value Crash state: gvstupleisnormal gvariantserialisedisnormal gvsvariantisnormal...

OSV-2018-212 Heap-buffer-overflow in token_stream_prepare

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9805 Crash type: Heap-buffer-overflow READ 1 Crash state: tokenstreamprepare parse typedeclparse...

OSV-2018-210 Heap-use-after-free in UA_SecureChannel_deleteMembersCleanup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5499 Crash type: Heap-use-after-free READ 8 Crash state: UASecureChanneldeleteMembersCleanup removeSecureChannelCallback UAServerrunshutdown...

OSV-2018-208 Global-buffer-overflow in bloaty::wasm::Section::Read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9540 Crash type: Global-buffer-overflow READ 8 Crash state: bloaty::wasm::Section::Read bloaty::wasm::ParseSections bloaty::wasm::WebAssemblyObjectFile::ProcessFile...

OSV-2017-22 Heap-buffer-overflow in opj_tcd_mct_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3331 Crash type: Heap-buffer-overflow READ 4 Crash state: opjtcdmctdecode opjtcddecodetile opjj2kdecodetile...

OSV-2018-206 Heap-buffer-overflow in parse_sigalgs_list

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9808 Crash type: Heap-buffer-overflow READ 1 Crash state: parsesigalgslist SSLCTXset1sigalgslist std::1::functionvoid...

OSV-2018-201 Heap-buffer-overflow in r_str_utf16_to_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10487 Crash type: Heap-buffer-overflow READ 1 Crash state: rstrutf16toutf8 sections rbinobjectsetitems...

OSV-2018-200 Heap-buffer-overflow in SplashPath::lineTo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10148 Crash type: Heap-buffer-overflow READ 1 Crash state: SplashPath::lineTo Splash::makeDashedPath Splash::stroke...

OSV-2018-202 Heap-buffer-overflow in parse_mode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11167 Crash type: Heap-buffer-overflow READ 1 Crash state: parsemode gittreeparseraw gitobjectfromraw...

OSV-2018-196 Use-of-uninitialized-value in _pkcs12_decode_safe_contents

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10216 Crash type: Use-of-uninitialized-value Crash state: pkcs12decodesafecontents parsesafecontents gnutlspkcs12getbag...

OSV-2018-199 Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10986 Crash type: Heap-buffer-overflow READ 1 Crash state: BEInt::operator unsigned short AAT::LookupSegmentSingle ::cmp AAT::LookupSegmentSingle const OT::VarSizedBi...

OSV-2018-195 Heap-buffer-overflow in gmp_emsa_pkcs1_signature_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10671 Crash type: Heap-buffer-overflow WRITE 1 Crash state: gmpemsapkcs1signaturedata verifyemsapkcs1signature verify...