c-blosc2:decompress_fuzzer: Heap-use-after-free in ZSTD_DDict_dictContent

Detailed Report: https://oss-fuzz.com/testcase?key=6101295449767936 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressfuzzer Job Type: libfuzzerasanc-blosc2 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x62b00000e208 Crash State: ZSTDDDictdictContent...

OSV-2020-885 Stack-use-after-scope in coolkey_apdu_io

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23979 Crash type: Stack-use-after-scope READ 8 Crash state: coolkeyapduio coolkeyrsaop coolkeycomputecrypt...

OSV-2020-881 Heap-buffer-overflow in read_uleb128

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18549 Crash type: Heap-buffer-overflow READ 1 Crash state: readuleb128 walkexports getsymbols...

OSV-2020-880 Heap-buffer-overflow in smtp_command_parse_line

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23514 Crash type: Heap-buffer-overflow READ 1 Crash state: smtpcommandparseline smtpcommandparse smtpcommandparsenext...

OSV-2020-879 Use-of-uninitialized-value in jumpOverRec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20112 Crash type: Use-of-uninitialized-value Crash state: jumpOverRec jumpOverRec jumpOverRec...

OSV-2020-876 Use-of-uninitialized-value in XCFImageFormat::mergeRGBToRGB

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21783 Crash type: Use-of-uninitialized-value Crash state: XCFImageFormat::mergeRGBToRGB XCFImageFormat::mergeLayerIntoImage XCFImageFormat::loadLayer...

OSV-2020-875 Use-of-uninitialized-value in ndpi_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22475 Crash type: Use-of-uninitialized-value Crash state: ndpistrdup processClientServerHello processTLSBlock...

OSV-2020-868 Use-of-uninitialized-value in fetchARGB32ToRGBA64PM_avx2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21808 Crash type: Use-of-uninitialized-value Crash state: fetchARGB32ToRGBA64PMavx2 blenduntransformedgenericrgb64 fillRectnormalized...

OSV-2020-863 Use-of-uninitialized-value in QPDFTokenizer::isSpace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20391 Crash type: Use-of-uninitialized-value Crash state: QPDFTokenizer::isSpace QPDFTokenizer::presentCharacter QPDFTokenizer::readToken...

OSV-2020-862 Use-of-uninitialized-value in std::__1::vector<std::__1::vector<Sass::Extension, std::__1::allocator<Sass::Ext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21223 Crash type: Use-of-uninitialized-value Crash state: std::1::vectorstd::1::vectorSass::Extension, std::1::allocatorSass::Ext Sass::Extender::extendCompound Sass::Extender::extendComplex...

OSV-2020-859 UNKNOWN READ in H5O_sdspace_shared_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19220 Crash type: UNKNOWN READ Crash state: H5Osdspaceshareddecode H5Oattrshareddecode H5Omsgiteratereal...

OSV-2020-858 Heap-buffer-overflow in H5O_fill_new_shared_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18810 Crash type: Heap-buffer-overflow READ Crash state: H5Ofillnewshareddecode H5Omsgreadoh H5Omsgread...

OSV-2020-856 Use-of-uninitialized-value in deflate_slow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18745 Crash type: Use-of-uninitialized-value Crash state: deflateslow deflate PlFlate::handleData...

OSV-2020-855 Use-of-uninitialized-value in read_uleb128

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Use-of-uninitialized-value Crash state: readuleb128 dexparse dexload...

OSV-2020-854 UNKNOWN READ in std::__1::__hash_node_base<std::__1::__hash_node<std::__1::__hash_value_type<std

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20959 Crash type: UNKNOWN READ Crash state: std::1::hashnodebasestd::1::hashnodestd::1::hashvaluetypestd std::1::hashtablestd::1::hashvaluetypestd::1::basicstringchar,...

OSV-2020-853 Use-of-uninitialized-value in llvm_ks::MCAssembler::computeFragmentSize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22482 Crash type: Use-of-uninitialized-value Crash state: llvmks::MCAssembler::computeFragmentSize llvmks::MCAsmLayout::layoutFragment llvmks::MCAsmLayout::ensureValid...

OSV-2020-852 Use-of-uninitialized-value in H5MM_xstrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21457 Crash type: Use-of-uninitialized-value Crash state: H5MMxstrdup H5Epushstack H5Eprintfstack...

OSV-2020-849 Heap-buffer-overflow in dotnet_parse_tilde_2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19591 Crash type: Heap-buffer-overflow READ 2 Crash state: dotnetparsetilde2 dotnetparsetilde dotnetparsecom...

OSV-2020-847 Use-of-uninitialized-value in ycck_cmyk_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18732 Crash type: Use-of-uninitialized-value Crash state: ycckcmykconvert sepupsample processdatasimplemain...

OSV-2020-845 Use-of-uninitialized-value in isMatchAtCPBoundary

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19497 Crash type: Use-of-uninitialized-value Crash state: isMatchAtCPBoundary ustrFindFirst66 icu66::UnicodeString::indexOf...