OSV-2020-1440 Use-of-uninitialized-value in PPrintText

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13014 Crash type: Use-of-uninitialized-value Crash state: PPrintText prvTidyPPrintTree prvTidyPPrintTree...

OSV-2020-1443 Segv on unknown address in clang::Sema::ActOnCapScopeReturnStmt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20420 Crash type: Segv on unknown address Crash state: clang::Sema::ActOnCapScopeReturnStmt clang::Sema::BuildReturnStmt clang::Sema::ActOnReturnStmt...

OSV-2020-1442 Segv on unknown address in clang::CXXRecordDecl::data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19228 Crash type: Segv on unknown address Crash state: clang::CXXRecordDecl::data getDefaultInitValue EvaluateVarDecl...

OSV-2020-1444 Heap-buffer-overflow in void mc_chroma<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22678 Crash type: Heap-buffer-overflow READ 2 Crash state: void mcchroma generateinterpredictionsamples decodepredictionunit...

OSV-2020-1441 Heap-buffer-overflow in void apply_sao_internal<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21935 Crash type: Heap-buffer-overflow READ 1 Crash state: void applysaointernal void applysao threadtasksao::work...

OSV-2020-1435 Stack-buffer-overflow in void put_epel_hv_fallback<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22174 Crash type: Stack-buffer-overflow READ 2 Crash state: void putepelhvfallback accelerationfunctions::puthevcepelhv void mcchroma...

OSV-2020-1428 Heap-buffer-overflow in yr_object_set_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Heap-buffer-overflow READ 10 Crash state: yrobjectsetstring dexparse dexload...

OSV-2020-1429 Segv on unknown address in clang::OverloadExpr::find

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19972 Crash type: Segv on unknown address Crash state: clang::OverloadExpr::find clang::Sema::ResolveAndFixSingleFunctionTemplateSpecialization clang::Sema::CheckPlaceholderExpr...

OSV-2020-1430 Segv on unknown address in clang::Parser::ParseCXXAmbiguousParenExpression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19617 Crash type: Segv on unknown address Crash state: clang::Parser::ParseCXXAmbiguousParenExpression clang::Parser::ParseParenExpression clang::Parser::ParseCastExpression...

OSV-2020-1426 Segv on unknown address in clang::CXXRecordDecl::data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19132 Crash type: Segv on unknown address Crash state: clang::CXXRecordDecl::data clang::Sema::FinalizeVarWithDestructor clang::Sema::ActOnBlockStmtExpr...

OSV-2020-1432 Segv on unknown address in EvaluateObjectArgument

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19880 Crash type: Segv on unknown address Crash state: EvaluateObjectArgument ExprEvaluatorBase::handleCallExpr clang::StmtVisitorBase::Visit...

OSV-2020-1423 Use-of-uninitialized-value in txt2sd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22219 Crash type: Use-of-uninitialized-value Crash state: txt2sd fuzzmdnsxht.cc txt2sd...

OSV-2020-1425 Use-of-uninitialized-value in dotnet_parse_com

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8901 Crash type: Use-of-uninitialized-value Crash state: dotnetparsecom dotnetload yrmodulesload...

OSV-2020-1422 Segv on unknown address in llvm::APInt::trunc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21207 Crash type: Segv on unknown address Crash state: llvm::APInt::trunc AnalyzeBitFieldAssignment clang::InitializationSequence::Perform...

OSV-2020-1421 Segv on unknown address in clang::FunctionProtoType::FunctionProtoType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21119 Crash type: Segv on unknown address Crash state: clang::FunctionProtoType::FunctionProtoType clang::ASTContext::getFunctionTypeInternal GetFullTypeForDeclarator...

OSV-2020-1420 Bad-cast to Sass::PreValue from Sass::Unary_Expression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15896 Crash type: Bad-cast Crash state: Bad-cast to Sass::PreValue from Sass::UnaryExpression Sass::SharedImpl::SharedImpl Sass::Parser::parseiekeywordarg...

OSV-2020-1417 Index-out-of-bounds in DHT::get_hv_rbg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23870 Crash type: Index-out-of-bounds Crash state: DHT::gethvrbg DHT::makehvdline DHT::makehvdirs...

OSV-2020-1413 Segv on unknown address in clang::Decl::AccessDeclContextSanity

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19071 Crash type: Segv on unknown address Crash state: clang::Decl::AccessDeclContextSanity clang::Sema::SetMemberAccessSpecifier clang::Sema::ActOnTag...

OSV-2020-1414 Heap-buffer-overflow in format_generic_odp_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20003 Crash type: Heap-buffer-overflow READ 1 Crash state: formatgenericodpkey checkattrlen formatodpkeyattr...

OSV-2020-1416 Segv on unknown address in clang::Decl::AccessDeclContextSanity

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19117 Crash type: Segv on unknown address Crash state: clang::Decl::AccessDeclContextSanity LookupDirect clang::Sema::LookupQualifiedName...