64 matches found
OSV-2024-914 UNKNOWN READ in boost::re_detail_500::basic_regex_formatter<std::__1::ostream_iterator<char, cha
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66851 Crash type: UNKNOWN READ Crash state: boost::redetail500::basicregexformatter boost::red...
OSV-2024-867 Use-of-uninitialized-value in std::__1::ostreambuf_iterator<char, std::__1::char_traits<char>> std::__1::__pad
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68801 Crash type: Use-of-uninitialized-value Crash state: std::1::ostreambufiterator std::1::pad std::1::basicostream& std::1::putchar ostream...
OSV-2024-504 Heap-buffer-overflow in ultrahdr::getYuv420Pixel
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69101 Crash type: Heap-buffer-overflow READ 1 Crash state: ultrahdr::getYuv420Pixel std::1::function::funcultrahdr::JpegR::applyGainMap ultrahdr::JpegR::applyGainMap...
OSV-2024-476 Heap-buffer-overflow in ultrahdr::getYuv420Pixel
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68946 Crash type: Heap-buffer-overflow READ 1 Crash state: ultrahdr::getYuv420Pixel std::1::function::funcultrahdr::JpegR::applyGainMap ultrahdr::JpegR::applyGainMap...
OSV-2024-330 UNKNOWN READ in std::__1::__POW10_SPLIT_2
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67360 Crash type: UNKNOWN READ Crash state: std::1::POW10SPLIT2...
OSV-2023-1259 Use-of-uninitialized-value in std::__1::__stdoutbuf<char>::xsputn
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64693 Crash type: Use-of-uninitialized-value Crash state: std::1::stdoutbuf::xsputn std::1::ostreambufiterator std::1::pa std::1::basicostream & std::1::putcha...
OSV-2022-1261 UNKNOWN WRITE in void std::__1::allocator_traits<std::__1::allocator<wabt::interp::HandlerDesc> >
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54245 Crash type: UNKNOWN WRITE Crash state: void std::1::allocatortraits void std::1::vectorwabt::interp::HandlerDesc, std::1::allocatorwabt::inter std::1::vectorwabt::interp::HandlerDesc, std::1::allocatorwabt::interp::Ha...
OSV-2022-999 Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51972 Crash type: Heap-buffer-overflow READ Crash state: std::1::basicstring, std::1::allocatorch Exiv2::QuickTimeVideo::userDataDecoder Exiv2::QuickTimeVideo::tagDecoder...
OSV-2022-904 Heap-use-after-free in std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<geos::geom::Coor
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51406 Crash type: Heap-use-after-free READ 8 Crash state: std::1::pairstd::1::treeiteratorstd::1::valuetypegeos::geom::Coor geos::geomgraph::NodeMap::addNode geos::geomgraph::GeometryGraph::addSelfIntersectionNode...
OSV-2022-861 Heap-use-after-free in std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<geos::geom::Coor
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51083 Crash type: Heap-use-after-free READ 8 Crash state: std::1::pairstd::1::treeiteratorstd::1::valuetypegeos::geom::Coor geos::geomgraph::NodeMap::addNode geos::operation::overlay::OverlayOp::copyPoints...
OSV-2022-794 Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50629 Crash type: Heap-buffer-overflow READ 5 Crash state: std::1::basicstring, std::1::allocatorch Exiv2::QuickTimeVideo::previewTagDecoder Exiv2::QuickTimeVideo::tagDecoder...
OSV-2022-436 Stack-buffer-overflow in spvtools::opt::CompositeInsertToCompositeConstruct
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47684 Crash type: Stack-buffer-overflow READ 8 Crash state: spvtools::opt::CompositeInsertToCompositeConstruct std::1::function::funcbool spvtools::opt::InstructionFolder::FoldInstructionInternal...
OSV-2022-425 Heap-use-after-free in std::__1::__tree_node_base<void*>*& std::__1::__tree<std::__1::__value_type<std:
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47533 Crash type: Heap-use-after-free READ 1 Crash state: std::1::treenodebase& std::1::treestd::1::valuetypestd: std::1::pairstd::1::treeiteratorstd::1::valuetypestd::1::basic...
OSV-2022-375 Stack-use-after-return in std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<i
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46986 Crash type: Stack-use-after-return READ 1 Crash state: std::1::function::funcbool grk::WaveletReverse::decompresspartialtilei tf::Executor::invoke tf::Executor::spawn...
OSV-2022-321 Stack-use-after-scope in std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<g
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46468 Crash type: Stack-use-after-scope WRITE 1 Crash state: std::1::function::funcbool grk::WaveletReverse::decompresspartialtileg tf::Executor::invoke tf::Executor::consumetask...
OSV-2022-295 Use-of-uninitialized-value in unsigned long grk::N_SSE4::vscheduler<grk::N_SSE4::DecompressDcShiftIrrev>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46241 Crash type: Use-of-uninitialized-value Crash state: unsigned long grk::NSSE4::vscheduler std::1::function::funcunsigned long grk::NSSE4::vschedulergrk::NSSE4:: tf::Executor::invoke...
OSV-2021-1641 Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41582 Crash type: Heap-buffer-overflow READ Crash state: std::1::basicstring, std::1::allocatorch void Assimp::Logger::warnchar const Assimp::NDOImporter::InternReadFile...
OSV-2021-1392 Container-overflow in std::__1::__function::__func<uWS::TemplatedApp<false>&& uWS::TemplatedApp<false>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39354 Crash type: Container-overflow READ 1 Crash state: std::1::function::func&& uWS::TemplatedApp uWS::TopicTree::publish ofats::anydetail::handlertraitsvoid, uWS::WebSocketfalse, true, test...
OSV-2021-1390 Container-overflow in std::__1::__function::__func<uWS::TemplatedApp<false>&& uWS::TemplatedApp<false>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39348 Crash type: Container-overflow READ 1 Crash state: std::1::function::func&& uWS::TemplatedApp uWS::WebSocketfalse, true, test uWS::WebSocketfalse, true, test...
OSV-2021-1386 Container-overflow in std::__1::__function::__func<uWS::TemplatedApp<true>&& uWS::TemplatedApp<true>::
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39355 Crash type: Container-overflow READ 1 Crash state: std::1::function::func&& uWS::TemplatedApp:: uWS::TopicTree::publish uWS::TemplatedApp::publish...