OSV-2021-1217 Heap-use-after-free in ZEND_FETCH_OBJ_R_SPEC_CV_CONST_INLINE_HANDLER

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38297 Crash type: Heap-use-after-free READ 8 Crash state: ZENDFETCHOBJRSPECCVCONSTINLINEHANDLER ZENDFETCHOBJRSPECCVCONSTHANDLER fuzzerexecuteex...

OSV-2021-1171 Heap-buffer-overflow in luaG_runerror

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37621 Crash type: Heap-buffer-overflow READ 8 Crash state: luaGrunerror luaDpretailcall luaVexecute...

OSV-2021-1113 Stack-buffer-overflow in getoid

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36962 Crash type: Stack-buffer-overflow READ 8 Crash state: getoid parseobjectid parseasntype...

OSV-2021-1049 Container-overflow in jxl::InvSqueeze

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36485 Crash type: Container-overflow READ 8 Crash state: jxl::InvSqueeze jxl::Transform::Inverse jxl::Image::undotransforms...

OSV-2021-635 Heap-use-after-free in std::__1::__tree_iterator<std::__1::__value_type<std::__1::basic_string<char, st

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33227 Crash type: Heap-use-after-free READ 8 Crash state: std::1::treeiteratorstd::1::valuetypestd::1::basicstringchar, st void draco::Metadata::AddEntrystd::1::vectorunsigned char, std::1::allocat...

OSV-2021-563 Heap-use-after-free in AK::NonnullOwnPtr<JS::IndexedPropertyStorage>::operator->

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32459 Crash type: Heap-use-after-free READ 8 Crash state: AK::NonnullOwnPtr::operator- JS::IndexedProperties::arraylikesize JS::IndexedProperties::append...

OSV-2021-417 Heap-use-after-free in __cil_verify_classperms

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31065 Crash type: Heap-use-after-free READ 8 Crash state: cilverifyclassperms cilverifyclasspermission cilpreverifyhelper...

OSV-2021-343 Heap-use-after-free in sctp_sorecvmsg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30571 Crash type: Heap-use-after-free READ 8 Crash state: sctpsorecvmsg usrsctprecvv handleupcall...

OSV-2018-191 Heap-buffer-overflow in network_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11302 Crash type: Heap-buffer-overflow READ 8 Crash state: networkfree managerfree fuzz-network-parser.c...

OSV-2018-115 Global-buffer-overflow in CFF::BlendArg::set_blends

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11691 Crash type: Global-buffer-overflow READ 8 Crash state: CFF::BlendArg::setblends CFF::CFF2CSOpSet::proc CFF::CSInterpreter::int...

OSV-2018-101 Heap-buffer-overflow in r_bin_mdmp_init_pe_bins

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11361 Crash type: Heap-buffer-overflow READ 8 Crash state: rbinmdmpinitpebins rbinmdmpinit rbinmdmpnewbuf...

OSV-2021-16 Stack-buffer-overflow in JS::Heap::gather_conservative_roots

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29266 Crash type: Stack-buffer-overflow READ 8 Crash state: JS::Heap::gatherconservativeroots JS::Heap::gatherroots JS::Heap::collectgarbage...

OSV-2020-2075 Heap-use-after-free in flb_parser_decoder_list_destroy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26345 Crash type: Heap-use-after-free READ 8 Crash state: flbparserdecoderlistdestroy parserfuzzer.c flbfree...

OSV-2020-1875 Heap-use-after-free in dict_find_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20652 Crash type: Heap-use-after-free READ 8 Crash state: dictfindstring gsmaintempnames gsmainfinit...

OSV-2020-1472 Heap-buffer-overflow in stbi__YCbCr_to_RGB_simd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22605 Crash type: Heap-buffer-overflow READ 8 Crash state: stbiYCbCrtoRGBsimd loadjpegimage stbijpegload...

OSV-2020-1349 Heap-buffer-overflow in mu::ParserBase::ParseCmdCodeBulk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23410 Crash type: Heap-buffer-overflow READ 8 Crash state: mu::ParserBase::ParseCmdCodeBulk mu::ParserBase::ParseString setevalfuzzer.cc...

OSV-2020-1012 Heap-buffer-overflow in sas_read8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12723 Crash type: Heap-buffer-overflow READ 8 Crash state: sasread8 sas7bdatparsecolumnsizesubheader sas7bdatparsepagepass2...

OSV-2020-1029 Heap-buffer-overflow in iotlb_to_region_mips

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17193 Crash type: Heap-buffer-overflow READ 8 Crash state: iotlbtoregionmips getpageaddrcodemips tbfindslowmips...

grok:grk_decompress_fuzzer: Heap-use-after-free in grk::TileProcessor::~TileProcessor

Detailed Report: https://oss-fuzz.com/testcase?key=5137547093868544 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x610000012890 Crash State: grk::TileProcessor::TileProcessor...

draco:draco_pc_decoder_fuzzer: Heap-use-after-free in draco::Metadata::AddSubMetadata

Detailed Report: https://oss-fuzz.com/testcase?key=6326315129765888 Project: draco Fuzzing Engine: afl Fuzz Target: dracopcdecoderfuzzer Job Type: aflasandraco Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6040000000b0 Crash State: draco::Metadata::AddSubMetadata...