OSV-2022-194 Heap-buffer-overflow in SuperFastHash

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44964 Crash type: Heap-buffer-overflow READ 1 Crash state: SuperFastHash Assimp::SceneCombiner::AddNodePrefixesChecked Assimp::SceneCombiner::AddNodePrefixesChecked...

OSV-2022-169 Heap-buffer-overflow in ucasemap_internalUTF8ToTitle_70

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44779 Crash type: Heap-buffer-overflow READ 1 Crash state: ucasemapinternalUTF8ToTitle70 ucasemapmapUTF8 ucasemaputf8ToTitle70...

OSV-2022-150 Heap-buffer-overflow in coap_split_uri_sub

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44611 Crash type: Heap-buffer-overflow READ 1 Crash state: coapspliturisub coapgeturipath...

OSV-2022-147 Heap-buffer-overflow in parse_primitive

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44574 Crash type: Heap-buffer-overflow READ 1 Crash state: parseprimitive plistfromjson jplistfuzzer.cc...

OSV-2022-77 Heap-buffer-overflow in hufDecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43916 Crash type: Heap-buffer-overflow READ 1 Crash state: hufDecode internalhufdecompress internalexrundopiz...

OSV-2022-36 Heap-buffer-overflow in void absl::BytesToHexStringInternal<std::__1::basic_string<char, std::__1::char_

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43553 Crash type: Heap-buffer-overflow READ 1 Crash state: void absl::BytesToHexStringInternalstd::1::basicstringchar, std::1::char absl::BytesToHexString...

OSV-2022-5 Heap-buffer-overflow in pcpp::IPv6AuthenticationHeader::getExtensionLen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43290 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::IPv6AuthenticationHeader::getExtensionLen pcpp::IPv6Layer::parseExtensions pcpp::IPv6Layer::IPv6Layer...

OSV-2021-1221 Heap-buffer-overflow in parse_via_param

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38307 Crash type: Heap-buffer-overflow READ 1 Crash state: parseviaparam parsevia gethdrfield...

OSV-2021-1201 Heap-buffer-overflow in q_memchr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38065 Crash type: Heap-buffer-overflow READ 1 Crash state: qmemchr parsequotedparam parseparambody...

OSV-2021-1197 Heap-buffer-overflow in H5O__linfo_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38041 Crash type: Heap-buffer-overflow READ 1 Crash state: H5Olinfodecode H5Omsgreadoh H5Omsgread...

OSV-2021-760 Heap-buffer-overflow in std::__1::char_traits<char>::length

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34230 Crash type: Heap-buffer-overflow READ 1 Crash state: std::1::chartraits::length std::1::basicstring, std::1::allocatorch ODDLParser::logInvalidTokenError...

OSV-2021-537 Heap-buffer-overflow in sc_pkcs15emu_oberthur_add_pubkey

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32149 Crash type: Heap-buffer-overflow READ 1 Crash state: scpkcs15emuoberthuraddpubkey scoberthurparsepublicinfo scpkcs15emuoberthurinit...

OSV-2021-222 Heap-buffer-overflow in arith_uncompress_to

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29792 Crash type: Heap-buffer-overflow READ 1 Crash state: arithuncompressto cramuncompressblock cramreadSAMhdr...

OSV-2018-273 Heap-buffer-overflow in ftp_parse_winnt_ls

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7930 Crash type: Heap-buffer-overflow READ 1 Crash state: ftpparsewinntls wgetftplsfuzzer.c...

OSV-2021-145 Heap-buffer-overflow in H5O_dtype_decode_helper

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29536 Crash type: Heap-buffer-overflow READ 1 Crash state: H5Odtypedecodehelper H5Odtypedecode H5Odtypeshareddecode...

OSV-2018-201 Heap-buffer-overflow in r_str_utf16_to_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10487 Crash type: Heap-buffer-overflow READ 1 Crash state: rstrutf16toutf8 sections rbinobjectsetitems...

OSV-2018-199 Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10986 Crash type: Heap-buffer-overflow READ 1 Crash state: BEInt::operator unsigned short AAT::LookupSegmentSingle ::cmp AAT::LookupSegmentSingle const OT::VarSizedBi...

OSV-2018-116 Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11060 Crash type: Heap-buffer-overflow READ 1 Crash state: BEInt::operator unsigned short AAT::LookupFormat10 ::sanitize AAT::Lookup ::sanitize...

OSV-2018-104 Heap-buffer-overflow in git__strntol64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11382 Crash type: Heap-buffer-overflow READ 1 Crash state: gitstrntol64 gitstrntol32 parsemode...

OSV-2018-102 Heap-buffer-overflow in r_read_le32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11303 Crash type: Heap-buffer-overflow READ 1 Crash state: rreadle32 rbinfilegetstrings rbinobjectsetitems...