harfbuzz:hb-subset-fuzzer: Crash in hb_vector_t<CFF::op_str_t>::resize

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5448978976735232 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000000094e0...

harfbuzz:hb-shape-fuzzer: Crash in hb_realloc_impl

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5675987258572800 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-shape-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_JPEG2000_fuzzer: Heap-buffer-overflow in jpegNUMBER_read_main_headers

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5165847820369920 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDJPEG2000fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Addres...

assimp:assimp_fuzzer: Container-overflow in std::__1::enable_if<

Detailed Report: https://oss-fuzz.com/testcase?key=5666827234181120 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Container-overflow READ 1 Crash Address: 0x61b00000116d Crash State: std::1::enableif...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::IOStreamBuffer<char>::getNextDataLine

Detailed Report: https://oss-fuzz.com/testcase?key=5183227204206592 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x602000000200 Crash State:...

assimp:assimp_fuzzer: Heap-buffer-overflow in ODDLParser::OpenDDLParser::parseIdentifier

Detailed Report: https://oss-fuzz.com/testcase?key=5161012492500992 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x602000000239 Crash State:...

assimp:assimp_fuzzer: Stack-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Detailed Report: https://oss-fuzz.com/testcase?key=4847905282981888 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address: 0x7ffc14401cd0 Crash State: std::1::basicstring,...

OSV-2020-1541 UNKNOWN READ in eval_expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22919 Crash type: UNKNOWN READ Crash state: evalexpr pathxeval pathxsymtabdefine...

OSV-2020-1540 UNKNOWN READ in eval_expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23781 Crash type: UNKNOWN READ Crash state: evalexpr evalbinary evalexpr...

OSV-2020-1538 Use-of-uninitialized-value in cmsMLUgetASCII

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19724 Crash type: Use-of-uninitialized-value Crash state: cmsMLUgetASCII cmsGetProfileInfoASCII GetICCProperty...

OSV-2020-1536 Segv on unknown address in GetValueFromLinkedList

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20923 Crash type: Segv on unknown address Crash state: GetValueFromLinkedList Magick::throwException Magick::Image::read...

OSV-2020-1534 Use-of-uninitialized-value in void transform_idct_add<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23918 Crash type: Use-of-uninitialized-value Crash state: void transformidctadd transform8x8add16fallback void accelerationfunctions::transformadd...

OSV-2020-1532 Heap-buffer-overflow in Op_RGB_to_RGB24_32::convert_colorspace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22109 Crash type: Heap-buffer-overflow READ 1 Crash state: OpRGBtoRGB2432::convertcolorspace heif::ColorConversionPipeline::convertimage heif::convertcolorspace...

OSV-2020-1528 Use-of-uninitialized-value in PushColormapIndex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10379 Crash type: Use-of-uninitialized-value Crash state: PushColormapIndex SyncImage WriteOnePNGImage...

OSV-2020-1527 Use-of-uninitialized-value in ConstantString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21159 Crash type: Use-of-uninitialized-value Crash state: ConstantString SetImageProperty TIFFGetProperties...

php:php-fuzz-parser: Heap-use-after-free in destroy_op_array

Detailed Report: https://oss-fuzz.com/testcase?key=5668642998714368 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-parser Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x606000013760 Crash State: destroyoparray fuzzerdorequest...

OSV-2020-1520 Use-of-uninitialized-value in transform_4x4_luma_add_8_fallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23288 Crash type: Use-of-uninitialized-value Crash state: transform4x4lumaadd8fallback void accelerationfunctions::transform4x4dstadd void transformcoefficients...

OSV-2020-1523 UNKNOWN READ in Mat_H5ReadFieldNames

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23456 Crash type: UNKNOWN READ Crash state: MatH5ReadFieldNames MatH5ReadGroupInfo MatVarReadNextInfoIterate...

OSV-2020-1522 Segv on unknown address in clang::Sema::EnterDeclaratorContext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20232 Crash type: Segv on unknown address Crash state: clang::Sema::EnterDeclaratorContext clang::Sema::ActOnCXXEnterDeclaratorScope clang::Parser::ParseDirectDeclarator...

OSV-2020-1519 Index-out-of-bounds in DHT::hide_hots

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23837 Crash type: Index-out-of-bounds Crash state: DHT::hidehots LibRaw::dhtinterpolate LibRaw::dcrawprocess...