OSV-2022-1168 Heap-buffer-overflow in parse_subrip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53210 Crash type: Heap-buffer-overflow WRITE Crash state: parsesubrip parsewebvtt gstsubparsechain...

OSV-2022-1157 Stack-buffer-overflow in merge_utf16be_ascii

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53149 Crash type: Stack-buffer-overflow WRITE 1 Crash state: mergeutf16beascii probeisoNUMBER superblocksprobe...

OSV-2022-1155 UNKNOWN WRITE in wasmtime_fuzzing::oracles::instantiate_many::h1a28dda90c13f877

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53102 Crash type: UNKNOWN WRITE Crash state: wasmtimefuzzing::oracles::instantiatemany::h1a28dda90c13f877 instantiatemany::::run::he4646225c064edb2...

OSV-2022-1144 Heap-buffer-overflow in onigenc_mbn_mbc_case_fold

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53041 Crash type: Heap-buffer-overflow READ 1 Crash state: onigencmbnmbccasefold euckrmbccasefold matchat...

OSV-2022-1121 Global-buffer-overflow in get_unpack_proc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52870 Crash type: Global-buffer-overflow READ 8 Crash state: getunpackproc xpsbegintypedimage epobegintypedimage...

OSV-2022-1013 Heap-buffer-overflow in msyylex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52066 Crash type: Heap-buffer-overflow WRITE 1 Crash state: msyylex loadMapInternal msLoadMap...

OSV-2022-1004 Heap-buffer-overflow in AffixMgr::cpdcase_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51988 Crash type: Heap-buffer-overflow READ 1 Crash state: AffixMgr::cpdcasecheck AffixMgr::compoundcheck HunspellImpl::checkword...

OSV-2022-963 Security exception in org.codehaus.janino.Parser.parseConditionalExpression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51821 Crash type: Security exception Crash state: org.codehaus.janino.Parser.parseConditionalExpression java.base/sun.nio.cs.CESU8$Encoder.encodeLoop java.base/java.nio.charset.CharsetEncoder.encode...

OSV-2022-901 Heap-double-free in HashMgr::~HashMgr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51432 Crash type: Heap-double-free Crash state: HashMgr::HashMgr HunspellImpl::HunspellImpl Hunspell::Hunspell...

OSV-2022-852 Security exception in java.base/java.nio.Bits.reserveMemory

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51044 Crash type: Security exception Crash state: java.base/java.nio.Bits.reserveMemory java.base/java.nio.DirectByteBuffer. java.base/java.nio.ByteBuffer.allocateDirect...

OSV-2022-776 Heap-buffer-overflow in do_job

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50528 Crash type: Heap-buffer-overflow WRITE 4 Crash state: dojob blosccompresscontext blosc2compress...

OSV-2022-774 Segv on unknown address in cranelift_filetests::function_runner::CompiledFunction::call::ha6b9162cd2eNUMBER

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50556 Crash type: Segv on unknown address Crash state: craneliftfiletests::functionrunner::CompiledFunction::call::ha6b9162cd2eNUMBER...

OSV-2022-686 Heap-use-after-free in FT_Stream_ReadULong

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49859 Crash type: Heap-use-after-free READ 1 Crash state: FTStreamReadULong sfntinitface ttfaceinit...

OSV-2022-679 Heap-buffer-overflow in udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49845 Crash type: Heap-buffer-overflow WRITE 4 Crash state: udiv mrbbintmod intmod...

OSV-2022-669 Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49728 Crash type: Heap-buffer-overflow READ 4 Crash state: llvm::DataLayout::getIndexedOffsetInType InterpreterStackFrame::ResolveConstantValue InterpreterStackFrame::ResolveConstant...

OSV-2022-598 Heap-buffer-overflow in get_symbols_64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49209 Crash type: Heap-buffer-overflow READ 8 Crash state: getsymbols64 getmain64 binsym...

OSV-2022-425 Heap-use-after-free in std::__1::__tree_node_base<void*>*& std::__1::__tree<std::__1::__value_type<std:

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47533 Crash type: Heap-use-after-free READ 1 Crash state: std::1::treenodebase& std::1::treestd::1::valuetypestd: std::1::pairstd::1::treeiteratorstd::1::valuetypestd::1::basic...

OSV-2022-360 Invalid-free in igl::MshLoader::~MshLoader

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46818 Crash type: Invalid-free Crash state: igl::MshLoader::MshLoader iglfuzzer.cpp...

OSV-2022-313 Heap-buffer-overflow in generic_unpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46432 Crash type: Heap-buffer-overflow READ 2 Crash state: genericunpack exrdecodingrun Imf31::checkCoreFile...

OSV-2022-303 Heap-use-after-free in start_pass_phuff_decoder

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46338 Crash type: Heap-use-after-free WRITE 4 Crash state: startpassphuffdecoder startinputpass jinitmasterdecompress...

OSV-2022-295 Use-of-uninitialized-value in unsigned long grk::N_SSE4::vscheduler<grk::N_SSE4::DecompressDcShiftIrrev>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46241 Crash type: Use-of-uninitialized-value Crash state: unsigned long grk::NSSE4::vscheduler std::1::function::funcunsigned long grk::NSSE4::vschedulergrk::NSSE4:: tf::Executor::invoke...

OSV-2022-289 Heap-buffer-overflow in add_compile_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46086 Crash type: Heap-buffer-overflow READ 4 Crash state: addcompilestring compiletree compiletree...

OSV-2022-238 Segv on unknown address in i_zval_ptr_dtor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45429 Crash type: Segv on unknown address Crash state: izvalptrdtor zendleavehelperSPEC zenddispatchtrycatchfinallyhelperSPEC...

OSV-2022-194 Heap-buffer-overflow in SuperFastHash

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44964 Crash type: Heap-buffer-overflow READ 1 Crash state: SuperFastHash Assimp::SceneCombiner::AddNodePrefixesChecked Assimp::SceneCombiner::AddNodePrefixesChecked...

OSV-2022-177 UNKNOWN READ in gx_dc_default_fill_masked

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44855 Crash type: UNKNOWN READ Crash state: gxdcdefaultfillmasked copyportrait imagerendersimple...

OSV-2022-128 Stack-buffer-overflow in decompress_rNUMBER

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44432 Crash type: Stack-buffer-overflow WRITE 1 Crash state: decompressrNUMBER readrNUMBERmetadata dwgdecode...

OSV-2022-126 Heap-buffer-overflow in md_analyze_inlines

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44446 Crash type: Heap-buffer-overflow READ 1 Crash state: mdanalyzeinlines mdprocessnormalblockcontents mdprocesstablecell...

OSV-2022-121 Heap-buffer-overflow in s_hex_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44406 Crash type: Heap-buffer-overflow READ 1 Crash state: shexprocess sexDprocess sreadbuf...

OSV-2021-1804 Heap-buffer-overflow in ndpi_workflow_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43921 Crash type: Heap-buffer-overflow READ 2 Crash state: ndpiworkflowprocesspacket fuzzndpireader.c...

OSV-2022-61 Heap-buffer-overflow in cli_loadcrt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43828 Crash type: Heap-buffer-overflow READ Crash state: cliloadcrt cliload clload...

OSV-2022-36 Heap-buffer-overflow in void absl::BytesToHexStringInternal<std::__1::basic_string<char, std::__1::char_

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43553 Crash type: Heap-buffer-overflow READ 1 Crash state: void absl::BytesToHexStringInternalstd::1::basicstringchar, std::1::char absl::BytesToHexString...

OSV-2022-34 Heap-buffer-overflow in LZ4_decompress_safe

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43513 Crash type: Heap-buffer-overflow READ 16 Crash state: LZ4decompresssafe bloscd dojob...

OSV-2021-1795 Negative-size-param in general_endcidrange_func

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43156 Crash type: Negative-size-param Crash state: generalendcidrangefunc cmapendcidrangefunc pdfipscriptinterpret...

OSV-2021-1745 Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42862 Crash type: Heap-buffer-overflow READ 1 Crash state: std::1::basicstring, std::1::allocator...

OSV-2021-1731 Memcpy-param-overlap in gs_fapi_do_char

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42656 Crash type: Memcpy-param-overlap Crash state: gsfapidochar pdfifapibuildchar showproceed...

OSV-2021-1728 UNKNOWN READ in pdfi_dict_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42687 Crash type: UNKNOWN READ Crash state: pdfidictget pdfidictgetint pdfireadbareobject...

OSV-2021-1697 Heap-use-after-free in stell

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42280 Crash type: Heap-use-after-free READ 1 Crash state: stell pdfiunreadtell pdfidereference...

OSV-2021-1692 Heap-use-after-free in chunk_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42324 Crash type: Heap-use-after-free READ 8 Crash state: chunkfreeobject pdfiopenmemorystreamfromfilteredstream pdfibuildmeshshading...

OSV-2021-1676 UNKNOWN READ in ndlz8_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42262 Crash type: UNKNOWN READ Crash state: ndlz8decompress bloscd dojob...

OSV-2021-1672 Heap-buffer-overflow in blosc_d

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42210 Crash type: Heap-buffer-overflow READ 4 Crash state: bloscd dojob bloscrundecompressionwithcontext...

OSV-2021-1663 Heap-buffer-overflow in ndlz4_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42131 Crash type: Heap-buffer-overflow WRITE Crash state: ndlz4decompress bloscd dojob...

OSV-2021-1568 Heap-use-after-free in MqttDecode_Props

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40904 Crash type: Heap-use-after-free READ 1 Crash state: MqttDecodeProps MqttDecodeDisconnect MqttClientDecodePacket...

OSV-2021-1518 UNKNOWN READ in bool OT::OffsetTo<OT::ClipBox, OT::IntType<unsigned int, 3u>, true>::serialize_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40540 Crash type: UNKNOWN READ Crash state: bool OT::OffsetTo, true::serializec OT::ClipList::serializecliprecords OT::ClipList::subset...

OSV-2021-1454 Uncaught exception in org.jsoup.parser.HtmlTreeBuilder.process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39939 Crash type: Uncaught exception Crash state: org.jsoup.parser.HtmlTreeBuilder.process org.jsoup.parser.HtmlTreeBuilderState$9.process org.jsoup.parser.HtmlTreeBuilder.process...

OSV-2021-1413 UNKNOWN READ in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39559 Crash type: UNKNOWN READ Crash state: helpeructracecode...

OSV-2021-1392 Container-overflow in std::__1::__function::__func<uWS::TemplatedApp<false>&& uWS::TemplatedApp<false>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39354 Crash type: Container-overflow READ 1 Crash state: std::1::function::func&& uWS::TemplatedApp uWS::TopicTree::publish ofats::anydetail::handlertraitsvoid, uWS::WebSocketfalse, true, test...

OSV-2021-1390 Container-overflow in std::__1::__function::__func<uWS::TemplatedApp<false>&& uWS::TemplatedApp<false>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39348 Crash type: Container-overflow READ 1 Crash state: std::1::function::func&& uWS::TemplatedApp uWS::WebSocketfalse, true, test uWS::WebSocketfalse, true, test...

OSV-2021-1385 Heap-buffer-overflow in Assimp::BaseImporter::ConvertToUTF8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39339 Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::BaseImporter::ConvertToUTF8 Assimp::BaseImporter::TextFileToBuffer Assimp::OpenGEX::OpenGEXImporter::InternReadFile...

OSV-2021-1266 UNKNOWN WRITE in void AK::BumpAllocator<true, 2097152ul>::for_each_chunk<AK::UniformBumpAllocator

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38701 Crash type: UNKNOWN WRITE Crash state: void AK::BumpAllocator::foreachchunk::BumpAllocatedLinkedList regex::Matcher::execute...

OSV-2021-1192 Segv on unknown address in arrow::DefaultBackend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37927 Crash type: Segv on unknown address Crash state: arrow::DefaultBackend arrow::PoolBuffer::MakeUnique arrow::AllocateBuffer...