4483 matches found
OSV-2021-822 Heap-buffer-overflow in AK::Formatter<char const*, void>::format
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34863 Crash type: Heap-buffer-overflow READ 3 Crash state: AK::Formatter::format void AK::formatvalue AK::vformatimpl...
OSV-2021-808 Global-buffer-overflow in DoEmbedded2
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34718 Crash type: Global-buffer-overflow READ 4 Crash state: DoEmbedded2 CalcLengths SpeakNextClause...
OSV-2021-600 Heap-buffer-overflow in gif_internal_decode_frame
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32855 Crash type: Heap-buffer-overflow WRITE Crash state: gifinternaldecodeframe gifdecodeframe vipsforeignloadnsgifgenerate...
OSV-2021-443 Segv on unknown address in Imf_2_5::copyIntoFrameBuffer
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31293 Crash type: Segv on unknown address Crash state: Imf25::copyIntoFrameBuffer Imf25::LineBufferTask::execute IlmThread::NullThreadPoolProvider::addTask...
OSV-2021-430 Stack-buffer-overflow in tvb_memcpy
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31198 Crash type: Stack-buffer-overflow WRITE Crash state: tvbmemcpy compositememcpy tvbgetnstringz...
OSV-2021-386 Stack-buffer-overflow in ot::Coap::Message::AppendUintOption
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30831 Crash type: Stack-buffer-overflow READ 1 Crash state: ot::Coap::Message::AppendUintOption ot::Coap::Message::AppendBlockOption otCoapMessageAppendBlock2Option...
OSV-2021-371 Heap-buffer-overflow in frame_get_lazychunk
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30772 Crash type: Heap-buffer-overflow READ 4 Crash state: framegetlazychunk framedecompresschunk blosc2schunkdecompresschunk...
OSV-2018-301 Use-of-uninitialized-value in fz_paint_triangle
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5641 Crash type: Use-of-uninitialized-value Crash state: fzpainttriangle dopainttri fzprocessshadetype4...
OSV-2018-274 Use-of-uninitialized-value in pdf_lex
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5600 Crash type: Use-of-uninitialized-value Crash state: pdflex pdfprocessstream pdfprocesscontents...
OSV-2018-237 Use-of-uninitialized-value in sfnt_open_font
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5603 Crash type: Use-of-uninitialized-value Crash state: sfntopenfont sfntinitface ttfaceinit...
OSV-2017-109 Use-of-uninitialized-value in Unpack::MakeDecodeTables
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4298 Crash type: Use-of-uninitialized-value Crash state: Unpack::MakeDecodeTables Unpack::ReadTables20 Unpack::Unpack20...
OSV-2017-110 Use-of-uninitialized-value in ExtractUnixLink30
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4309 Crash type: Use-of-uninitialized-value Crash state: ExtractUnixLink30 ExtractSymlink CmdExtract::ExtractCurrentFile...
OSV-2017-66 UNKNOWN READ in cfree
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4561 Crash type: UNKNOWN READ Crash state: cfree copyAttributeIntoNode UAServereditNode...
OSV-2017-58 Heap-use-after-free in UA_Array_copy
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4300 Crash type: Heap-use-after-free READ Crash state: UAArraycopy copynoInit NodeIdcopy...
OSV-2017-55 Heap-double-free in ExtensionObject_deleteMembers
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4296 Crash type: Heap-double-free Crash state: ExtensionObjectdeleteMembers UAArraydelete ArraydecodeBinary...
OSV-2018-124 UNKNOWN READ in netdev_get
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11314 Crash type: UNKNOWN READ Crash state: netdevget configparsenetdev nextassignment...
OSV-2018-121 Use-of-uninitialized-value in _gnutls_x509_read_pkalgo_params
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10135 Crash type: Use-of-uninitialized-value Crash state: gnutlsx509readpkalgoparams printcrtpubkey printcert...
OSV-2018-113 Use-of-uninitialized-value in iclip
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11466 Crash type: Use-of-uninitialized-value Crash state: iclip applytorowuv dav1dapplygrain8bpc...
OSV-2018-70 Heap-buffer-overflow in learn_check
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11862 Crash type: Heap-buffer-overflow READ 2 Crash state: learncheck ofpactscheck parseofpstr...
OSV-2017-17 Use-of-uninitialized-value in QuickOpen::Seek
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4522 Crash type: Use-of-uninitialized-value Crash state: QuickOpen::Seek Archive::Seek QuickOpen::Load...
OSV-2021-40 Heap-buffer-overflow in rijndaelDecrypt
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29454 Crash type: Heap-buffer-overflow READ 1 Crash state: rijndaelDecrypt aes256cbcdecrypt checkuserpassword...
OSV-2020-2298 UNKNOWN READ in ndpi_free
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29081 Crash type: UNKNOWN READ Crash state: ndpifree ndpifreeflow fuzzprocesspacket.c...
OSV-2020-2285 Bad-cast to pcpp::Layer from invalid vptr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28945 Crash type: Bad-cast Crash state: Bad-cast to pcpp::Layer from invalid vptr pcpp::IDnsResource::getRawData pcpp::DnsResource::getDataLength...
OSV-2020-2180 UNKNOWN READ in helper_be_stl_mmu_armeb
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27736 Crash type: UNKNOWN READ Crash state: helperbestlmmuarmeb stack...
OSV-2020-2159 Heap-buffer-overflow in flb_parser_json_do
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27499 Crash type: Heap-buffer-overflow READ Crash state: flbparserjsondo flbparserdo parserfuzzer.c...
OSV-2020-2143 UNKNOWN READ in __dynamic_cast
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27315 Crash type: UNKNOWN READ Crash state: dynamiccast HandleDynamicTypeCacheMiss RDKit::SubstanceGroup::addAtomWithBookmark...
OSV-2020-2121 Use-of-uninitialized-value in WelsDec::BaseMC
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26861 Crash type: Use-of-uninitialized-value Crash state: WelsDec::BaseMC WelsDec::GetInterBPred WelsDec::WelsMbInterPrediction...
OSV-2020-2098 Use-of-uninitialized-value in std::__1::__function::__func<LLVMFuzzerTestOneInput::$_0, std::__1::allocator<LL
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26617 Crash type: Use-of-uninitialized-value Crash state: std::1::function::funcLLVMFuzzerTestOneInput::$0, std::1::allocatorLL functional std::1::function::funcLLVMFuzzerTestOneInput::$0, std::1::allocatorLL...
OSV-2020-2060 Heap-buffer-overflow in fp_to_unsigned_bin_at_pos
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26295 Crash type: Heap-buffer-overflow WRITE 1 Crash state: fptounsignedbinatpos fptounsignedbin mptounsignedbin...
OSV-2020-2014 Stack-buffer-overflow in flb_sds_cat
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26237 Crash type: Stack-buffer-overflow READ Crash state: flbsdscat flbmsgpackgelfvalue flbmsgpacktogelf...
OSV-2020-1897 Heap-buffer-overflow in stbi__tga_load
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22651 Crash type: Heap-buffer-overflow READ 3 Crash state: stbitgaload stbiloadmain stbiloadandpostprocess8bit...
OSV-2020-1875 Heap-use-after-free in dict_find_string
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20652 Crash type: Heap-use-after-free READ 8 Crash state: dictfindstring gsmaintempnames gsmainfinit...
OSV-2020-1849 Use-of-uninitialized-value in RDKit::SubstanceGroup::getBondType
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25906 Crash type: Use-of-uninitialized-value Crash state: RDKit::SubstanceGroup::getBondType RDKit::SubstanceGroup::addCState RDKit::SGroupParsing::ParseSGroupV2000SBVLine...
OSV-2020-1820 Stack-buffer-overflow in hermes::regex::Parser<hermes::regex::Regex<hermes::regex::UTF16RegexTraits>, cha
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25815 Crash type: Stack-buffer-overflow READ 2 Crash state: hermes::regex::Parser, cha hermes::regex::Parser, cha hermes::regex::Parser, cha...
OSV-2020-1540 UNKNOWN READ in eval_expr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23781 Crash type: UNKNOWN READ Crash state: evalexpr evalbinary evalexpr...
OSV-2020-1386 Heap-buffer-overflow in parse_relocation_info
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24400 Crash type: Heap-buffer-overflow READ 4 Crash state: parserelocationinfo getrelocs64 relocs...
OSV-2020-1321 UNKNOWN READ in FlowGetHash
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21479 Crash type: UNKNOWN READ Crash state: FlowGetHash FlowSetupPacket DecodeICMPV4...
OSV-2020-1310 Use-of-uninitialized-value in pcpp::SSLCertificateRequestMessage::SSLCertificateRequestMessage
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22513 Crash type: Use-of-uninitialized-value Crash state: pcpp::SSLCertificateRequestMessage::SSLCertificateRequestMessage pcpp::SSLHandshakeMessage::createHandhakeMessage pcpp::SSLHandshakeLayer::SSLHandshakeLayer...
OSV-2020-1232 Use-of-uninitialized-value in TIFFYCbCrtoRGB
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16844 Crash type: Use-of-uninitialized-value Crash state: TIFFYCbCrtoRGB putcontig8bitYCbCr22tile gtTileContig...
OSV-2020-1221 Use-of-uninitialized-value in ps_read_doseps
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21301 Crash type: Use-of-uninitialized-value Crash state: psreaddoseps psscan documentload...
OSV-2020-1200 UNKNOWN WRITE in DumpModeDecode
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14071 Crash type: UNKNOWN WRITE Crash state: DumpModeDecode TIFFReadEncodedStrip cv::TiffDecoder::readData32FC3...
OSV-2020-1172 Global-buffer-overflow in WelsDec::ParseInterBInfo
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12652 Crash type: Global-buffer-overflow READ 1 Crash state: WelsDec::ParseInterBInfo WelsDec::WelsActualDecodeMbCavlcBSlice WelsDec::WelsDecodeMbCavlcBSlice...
OSV-2020-1056 Use-of-uninitialized-value in xmlStrlen
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15069 Crash type: Use-of-uninitialized-value Crash state: xmlStrlen xmlBufferAdd xmlBufferCat...
OSV-2020-1011 Heap-buffer-overflow in ndpi_search_mail_smtp_tcp
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18731 Crash type: Heap-buffer-overflow READ 4 Crash state: ndpisearchmailsmtptcp checkndpitcpflowfunc ndpidetectionprocesspacket...
OSV-2020-943 Heap-buffer-overflow in pcpp::HeaderField::HeaderField
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22528 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::HeaderField::HeaderField pcpp::TextBasedProtocolMessage::parseFields pcpp::SipResponseLayer::SipResponseLayer...
OSV-2020-920 Heap-buffer-overflow in pcpp::SSLServerHelloMessage::getSessionIDLength
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22523 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::SSLServerHelloMessage::getSessionIDLength pcpp::SSLServerHelloMessage::SSLServerHelloMessage pcpp::SSLHandshakeMessage::createHandhakeMessage...
OSV-2020-885 Stack-use-after-scope in coolkey_apdu_io
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23979 Crash type: Stack-use-after-scope READ 8 Crash state: coolkeyapduio coolkeyrsaop coolkeycomputecrypt...
OSV-2020-829 Heap-use-after-free in check_content_type_and_change_protocol
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23834 Crash type: Heap-use-after-free READ 2 Crash state: checkcontenttypeandchangeprotocol ndpicheckhttptcp ndpisearchhttptcp...
OSV-2020-797 Use-of-uninitialized-value in MipsAsmParser::isPicAndNotNxxAbi
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22778 Crash type: Use-of-uninitialized-value Crash state: MipsAsmParser::isPicAndNotNxxAbi MipsAsmParser::processInstruction MipsAsmParser::MatchAndEmitInstruction...