OSV-2020-1802 Heap-buffer-overflow in cli_codepage_to_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21960 Crash type: Heap-buffer-overflow READ Crash state: clicodepagetoutf8 clivbareaddirnew clivbascandirnew...

OSV-2020-1792 Heap-buffer-overflow in text_normalize_buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20464 Crash type: Heap-buffer-overflow READ 1 Crash state: textnormalizebuffer arjreadfileheader cliscanarj...

OSV-2020-1787 Use-of-uninitialized-value in zend_generator_search_multi_children_node

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25678 Crash type: Use-of-uninitialized-value Crash state: zendgeneratorsearchmultichildrennode zendgeneratoraddchild zendgeneratoryieldfrom...

OSV-2020-1784 Use-of-uninitialized-value in put_unweighted_pred_16_fallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25707 Crash type: Use-of-uninitialized-value Crash state: putunweightedpred16fallback accelerationfunctions::putunweightedpred generateinterpredictionsamples...

OSV-2020-1782 Heap-buffer-overflow in cli_codepage_to_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23499 Crash type: Heap-buffer-overflow READ Crash state: clicodepagetoutf8 clivbareaddirnew clivbascandirnew...

libressl:client: Heap-buffer-overflow in x509_constraints_extract_names

Project: https://github.com/libressl-portable/portable.git Detailed Report: https://oss-fuzz.com/testcase?key=6077145108185088 Project: libressl Fuzzing Engine: afl Fuzz Target: client Job Type: aflasanlibressl Platform Id: linux Crash Type: Heap-buffer-overflow READ 10 Crash Address:...

inchi:inchi_input_fuzzer: Heap-use-after-free in Free_INChI_Stereo

Detailed Report: https://oss-fuzz.com/testcase?key=5714777442353152 Project: inchi Fuzzing Engine: libFuzzer Fuzz Target: inchiinputfuzzer Job Type: libfuzzerasaninchi Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60d0000003c8 Crash State: FreeINChIStereo...

OSV-2020-1779 Heap-use-after-free in zend_gc_addref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25697 Crash type: Heap-use-after-free READ 4 Crash state: zendgcaddref zendgeneratorupdatecurrent zendgeneratordtorstorage...

fasthttp:fuzz_request: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5745696710590464 Project: fasthttp Fuzzing Engine: libFuzzer Fuzz Target: fuzzrequest Job Type: libfuzzerasanfasthttp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000555d7b8 Crash State: NULL Sanitizer: address ASAN Recommended...

c-blosc2:decompress_fuzzer: Crash in blosc_d

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=6044542246322176 Project: c-blosc2 Fuzzing Engine: honggfuzz Fuzz Target: decompressfuzzer Job Type: honggfuzzasanc-blosc2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x604ffffff8c1...

php:php-fuzz-execute: Heap-use-after-free in zend_gc_addref

Detailed Report: https://oss-fuzz.com/testcase?key=5636312147951616 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-execute Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x612000018040 Crash State: zendgcaddref...

OSV-2020-1777 Heap-buffer-overflow in exif_process_IFD_in_MAKERNOTE

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19044 Crash type: Heap-buffer-overflow READ 9 Crash state: exifprocessIFDinMAKERNOTE exifprocessIFDTAG exifprocessIFDinTIFF...

OSV-2020-1762 Heap-use-after-free in gc_mark_grey

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23350 Crash type: Heap-use-after-free READ 4 Crash state: gcmarkgrey gcmarkroots zendgccollectcycles...

libreoffice:sftfuzzer: Crash in GetUShort

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=6456579883532288 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: sftfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

OSV-2020-1759 Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25652 Crash type: Index-out-of-bounds Crash state: LibRaw::ahdinterpolaterandbinrgbandconverttocielab LibRaw::ahdinterpolaterandbandconverttocielab LibRaw::ahdinterpolate...

OSV-2020-1752 Heap-buffer-overflow in void mc_chroma<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25620 Crash type: Heap-buffer-overflow READ 2 Crash state: void mcchroma generateinterpredictionsamples decodepredictionunit...

OSV-2020-1748 Use-of-uninitialized-value in transform_4x4_luma_add_8_fallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25619 Crash type: Use-of-uninitialized-value Crash state: transform4x4lumaadd8fallback void accelerationfunctions::transform4x4dstadd void transformcoefficients...

OSV-2020-1742 Heap-use-after-free in grk::SOTMarker::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25602 Crash type: Heap-use-after-free READ 2 Crash state: grk::SOTMarker::read grk::j2kreadsot grk::CodeStream::processmarker...

OSV-2020-1741 Heap-use-after-free in zend_assign_to_variable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25601 Crash type: Heap-use-after-free READ 1 Crash state: zendassigntovariable zendstdwriteproperty ZENDASSIGNOBJSPECCVCONSTOPDATAVARHANDLER...

OSV-2020-1739 Index-out-of-bounds in tsk_img_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25580 Crash type: Index-out-of-bounds Crash state: tskimgread tskvsreadblock macloadtable...