OSV-2018-59 Heap-use-after-free in read_uncompressed_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10200 Crash type: Heap-use-after-free WRITE 2 Crash state: readuncompressedheader av1decodeframeheadersandsetup aomdecodeframefromobus...

libaom/av1_dec_fuzzer: Index-out-of-bounds in read_uncompressed_header

Detailed report: https://oss-fuzz.com/testcase?key=5682574110752768 Project: libaom Fuzzer: libFuzzerlibaomav1decfuzzer Fuzz target binary: av1decfuzzer Job Type: libfuzzerubsanlibaom Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: readuncompressedheader...

libaom/av1_dec_fuzzer: Heap-use-after-free in read_uncompressed_header

Detailed report: https://oss-fuzz.com/testcase?key=5631259649245184 Project: libaom Fuzzer: libFuzzerlibaomav1decfuzzer Fuzz target binary: av1decfuzzer Job Type: libfuzzerasanlibaom Platform Id: linux Crash Type: Heap-use-after-free WRITE 2 Crash Address: 0x7f08e0263260 Crash State:...