OSV-2018-10 UNKNOWN READ in __msan_memcpy.part.51

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9801 Crash type: UNKNOWN READ Crash state: msanmemcpy.part.51 gvsreadunalignedle gvsvariablesizedarrayisnormal...

OSV-2017-3 Use-of-uninitialized-value in Archive::GetComment

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4610 Crash type: Use-of-uninitialized-value Crash state: Archive::GetComment Archive::ViewComment CmdExtract::ExtractArchive...

OSV-2018-6 Use-of-uninitialized-value in DosSlashToUnix

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9307 Crash type: Use-of-uninitialized-value Crash state: DosSlashToUnix ExtractUnixLink50 ExtractSymlink...

OSV-2017-1 Index-out-of-bounds in fuzz_send_next_response

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3956 Crash type: Index-out-of-bounds Crash state: fuzzsendnextresponse fuzzhandletransfer start...

OSV-2018-2 Heap-buffer-overflow in git_buf_vprintf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11004 Crash type: Heap-buffer-overflow READ 13 Crash state: gitbufvprintf giterrset gitstrntol32...

OSV-2018-1 Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10897 Crash type: Heap-buffer-overflow READ 1 Crash state: BEInt::operator unsigned short AAT::StateTable ::sanitize AAT::KerxSubTableFormat1::sanitize...

OSV-2021-41 Heap-buffer-overflow in BaseMemStream<char const>::getChar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29460 Crash type: Heap-buffer-overflow READ 1 Crash state: BaseMemStream::getChar Object::streamGetChar Lexer::getChar...

OSV-2021-40 Heap-buffer-overflow in rijndaelDecrypt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29454 Crash type: Heap-buffer-overflow READ 1 Crash state: rijndaelDecrypt aes256cbcdecrypt checkuserpassword...

OSV-2021-39 Heap-buffer-overflow in dotnet_parse_tilde_2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29419 Crash type: Heap-buffer-overflow READ 2 Crash state: dotnetparsetilde2 dotnetparsetilde dotnetparsecom...

OSV-2021-38 Heap-buffer-overflow in my_casedn_str_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29433 Crash type: Heap-buffer-overflow READ 2 Crash state: mycasednstrutf8 LEXUSER::init MYSQLparse...

OSV-2021-37 Heap-buffer-overflow in WelsDec::CopyRectBlock4Cols

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29431 Crash type: Heap-buffer-overflow READ 16 Crash state: WelsDec::CopyRectBlock4Cols WelsDec::GetColocatedMb WelsDec::PredMvBDirectSpatial...

OSV-2021-36 Use-of-uninitialized-value in grk::mct::decompress_irrev

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29413 Crash type: Use-of-uninitialized-value Crash state: grk::mct::decompressirrev grk::TileProcessor::mctdecompress grk::TileProcessor::decompresstilet1...

OSV-2021-32 Heap-use-after-free in igraph_vector_ptr_size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29408 Crash type: Heap-use-after-free READ 8 Crash state: igraphvectorptrsize igraphgmltreedestroy igraphigmlparsedatadestroy...

OSV-2021-31 Heap-buffer-overflow in TTF::be_u16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29338 Crash type: Heap-buffer-overflow READ 1 Crash state: TTF::beu16 TTF::Font::loadfromoffset TTF::Font::loadfrommemory...

OSV-2021-27 Heap-buffer-overflow in ZSTD_createDDict_advanced

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29369 Crash type: Heap-buffer-overflow READ Crash state: ZSTDcreateDDictadvanced ZSTDcreateDDict bloscrundecompressionwithcontext...

OSV-2021-25 Heap-use-after-free in igraph_read_graph_gml

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29377 Crash type: Heap-use-after-free READ 8 Crash state: igraphreadgraphgml readgmlfuzzer.c igraphigmldestroyattrs...

OSV-2021-23 UNKNOWN READ in blosc_getitem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29287 Crash type: UNKNOWN READ Crash state: bloscgetitem getcoffset framegetlazychunk...

OSV-2021-22 UNKNOWN READ in frame_get_metalayers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29280 Crash type: UNKNOWN READ Crash state: framegetmetalayers blosc2frametoschunk blosc2schunkopensframe...

OSV-2021-16 Stack-buffer-overflow in JS::Heap::gather_conservative_roots

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29266 Crash type: Stack-buffer-overflow READ 8 Crash state: JS::Heap::gatherconservativeroots JS::Heap::gatherroots JS::Heap::collectgarbage...

OSV-2021-10 Heap-buffer-overflow in sp_tohex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29185 Crash type: Heap-buffer-overflow WRITE 1 Crash state: sptohex sptoradix cryptofuzz::module::wolfCryptbignum::Bignum::baseConversion...