4483 matches found
OSV-2026-354 Use-of-uninitialized-value in pcpp::MplsLayer::toString
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=489360236 Crash type: Use-of-uninitialized-value Crash state: pcpp::MplsLayer::toString FuzzTarget.cpp pcpp::RawPacket::RawPacket...
OSV-2023-1328 Stack-buffer-overflow in icu_75::TZDBTimeZoneNames::getMetaZoneNames
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65128 Crash type: Stack-buffer-overflow WRITE 1 Crash state: icu75::TZDBTimeZoneNames::getMetaZoneNames icu75::TZDBTimeZoneNames::getMetaZoneDisplayName TestNames...
OSV-2023-1012 Global-buffer-overflow in iusace_quantize_lines
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63230 Crash type: Global-buffer-overflow READ 4 Crash state: iusacequantizelines iusacequantizespec iusacefdencode...
OSV-2023-756 Heap-buffer-overflow in rawspeed::DngDecoder::decodeMetaDataInternal
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61800 Crash type: Heap-buffer-overflow READ 4 Crash state: rawspeed::DngDecoder::decodeMetaDataInternal rawspeed::RawDecoder::decodeMetaData...
OSV-2023-528 Memcpy-param-overlap in pdfi_copy_truetype_font
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60204 Crash type: Memcpy-param-overlap Crash state: pdficopytruetypefont pdfiloadfont pdfiloaddictfont...
OSV-2023-392 Negative-size-param in H5MM_memcpy
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58892 Crash type: Negative-size-param Crash state: H5MMmemcpy H5Olinkdecode H5Omsgiteratereal...
OSV-2023-327 Heap-double-free in HashMgr::~HashMgr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58133 Crash type: Heap-double-free Crash state: HashMgr::HashMgr HunspellImpl::HunspellImpl Hunspell::Hunspell...
OSV-2022-738 Security exception in DatatypeFuzzer.fuzzerTestOneInput
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50379 Crash type: Security exception Crash state: DatatypeFuzzer.fuzzerTestOneInput com.codeintelligence.jazzer.driver.FuzzTargetRunner.runOne com.codeintelligence.jazzer.driver.FuzzTargetRunner.startLibFuzzer...
OSV-2022-490 Stack-buffer-overflow in spvtools::opt::CompositeInsertToCompositeConstruct
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48060 Crash type: Stack-buffer-overflow READ 4 Crash state: spvtools::opt::CompositeInsertToCompositeConstruct std::1::function::funcbool spvtools::opt::InstructionFolder::FoldInstructionInternal...
OSV-2021-1644 Container-overflow in void jxl::CopyImageTo<int>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41608 Crash type: Container-overflow READ 4 Crash state: void jxl::CopyImageTo jxl::ModularFrameDecoder::DecodeGroup jxl::FrameDecoder::ProcessACGroup...
OSV-2021-998 Dynamic-stack-buffer-overflow in std::__1::__wrap_iter<char const*>::__wrap_iter
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36137 Crash type: Dynamic-stack-buffer-overflow WRITE 8 Crash state: std::1::wrapiter::wrapiter std::1::basicstring, std::1::allocatorch geos::io::StringTokenizer::StringTokenizer...
OSV-2021-939 Segv on unknown address in helper_uc_tracecode
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35912 Crash type: Segv on unknown address Crash state: helpeructracecode...
OSV-2020-2259 Stack-buffer-overflow in ot::MeshCoP::ChannelMaskEntry::GetMask
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28556 Crash type: Stack-buffer-overflow READ 4 Crash state: ot::MeshCoP::ChannelMaskEntry::GetMask ot::MeshCoP::ChannelMaskTlv::GetChannelMask ot::MeshCoP::Dataset::ConvertTo...
OSV-2020-2151 Use-of-uninitialized-value in tinfl_decompress
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27413 Crash type: Use-of-uninitialized-value Crash state: tinfldecompress mzinflate mzuncompress2...
OSV-2020-1667 Heap-use-after-free in xmlTextReaderRead
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25210 Crash type: Heap-use-after-free READ 4 Crash state: xmlTextReaderRead xml.c xmlTextReaderFreeNode...
OSV-2020-1159 Segv on unknown address in arrow::ipc::ReadMessage
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20124 Crash type: Segv on unknown address Crash state: arrow::ipc::ReadMessage arrow::ipc::RecordBatchFileReader::RecordBatchFileReaderImpl::ReadMessageFromBlo...
OSV-2020-902 Index-out-of-bounds in QUnicodeTables::qGetProp
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24266 Crash type: Index-out-of-bounds Crash state: QUnicodeTables::qGetProp QString QUnicodeTables::convertCase QString::toLowerhelper...
OSV-2020-138 Heap-buffer-overflow in org::apache::arrow::flatbuf::Message::Verify
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21681 Crash type: Heap-buffer-overflow READ 4 Crash state: org::apache::arrow::flatbuf::Message::Verify arrow::ipc::CheckMetadataAndGetBodyLength arrow::ipc::MessageDecoder::MessageDecoderImpl::ConsumeMetadata...
OSV-2020-109 UNKNOWN READ in arrow::BufferBuilder::Append
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20721 Crash type: UNKNOWN READ Crash state: arrow::BufferBuilder::Append arrow::BaseBinaryBuilder::Append parquet::ArrowBinaryHelper::Append...
OSV-2026-1092 Security exception in com.github.javaparser.ast.expr.Name.accept
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=539142495 Crash type: Security exception Crash state: com.github.javaparser.ast.expr.Name.accept com.github.javaparser.ast.visitor.VoidVisitorAdapter.lambda$visit$133 java.base/java.util.Optional.ifPresent...
OSV-2026-910 Heap-use-after-free in gf_node_unregister
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=523017646 Crash type: Heap-use-after-free READ 8 Crash state: gfnodeunregister BDDecSceneReplace BMSceneReplace...
OSV-2026-882 Null-dereference READ in cram_decoder_init
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=520827587 Crash type: Null-dereference READ Crash state: cramdecoderinit cramdecodecompressionheader cramnextslice...
OSV-2026-699 Use-of-uninitialized-value in Mat_VarGetSize
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=510360595 Crash type: Use-of-uninitialized-value Crash state: MatVarGetSize MatioRead matiofuzzer.cpp...
OSV-2026-608 Stack-buffer-overflow in is_http
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=504809218 Crash type: Stack-buffer-overflow READ Crash state: ishttp stungetmessagelenstr FuzzStunClient.c...
OSV-2026-521 UNKNOWN READ in unsigned long Assimp::StreamReader<true, true>::Get<unsigned long>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=499121788 Crash type: UNKNOWN READ Crash state: unsigned long Assimp::StreamReader::Get bool Assimp::Blender::Structure::ResolvePointerstd::1::sharedptr, Assimp::Bl bool Assimp::Blender::Structure::ReadFieldPtr2,...
OSV-2025-1004 Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=470469212 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.RegexInjection.hookInternal com.codeintelligence.jazzer.sanitizers.RegexInjection.patternHook...
OSV-2025-766 Heap-buffer-overflow in Open
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=446027676 Crash type: Heap-buffer-overflow READ 4 Crash state: Open demuxProbe vlcmoduleload...
OSV-2023-599 Negative-size-param in passDoAction
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60723 Crash type: Negative-size-param Crash state: passDoAction translateString loutranslate...
OSV-2022-1028 Heap-buffer-overflow in AffixMgr::compound_check
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52195 Crash type: Heap-buffer-overflow READ 1 Crash state: AffixMgr::compoundcheck SuggestMgr::checkword SuggestMgr::testsug...
OSV-2022-698 Heap-buffer-overflow in i2c_ASN1_INTEGER
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49963 Crash type: Heap-buffer-overflow READ 1 Crash state: i2cASN1INTEGER bni2c asn1exi2c...
OSV-2022-5 Heap-buffer-overflow in pcpp::IPv6AuthenticationHeader::getExtensionLen
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43290 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::IPv6AuthenticationHeader::getExtensionLen pcpp::IPv6Layer::parseExtensions pcpp::IPv6Layer::IPv6Layer...
OSV-2021-1747 Heap-buffer-overflow in seturl
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42808 Crash type: Heap-buffer-overflow READ 16 Crash state: seturl parseurl curlurlset...
OSV-2021-1496 Heap-buffer-overflow in jxl::JxlBoxContentDecoder::Process
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40396 Crash type: Heap-buffer-overflow WRITE 1 Crash state: jxl::JxlBoxContentDecoder::Process JxlDecoderProcessInput djxlfuzzer.cc...
OSV-2021-1201 Heap-buffer-overflow in q_memchr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38065 Crash type: Heap-buffer-overflow READ 1 Crash state: qmemchr parsequotedparam parseparambody...
OSV-2021-1181 Heap-buffer-overflow in draco::MeshPredictionSchemeTexCoordsDecoder<int, draco::PredictionSchemeWrapDeco
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37814 Crash type: Heap-buffer-overflow WRITE 4 Crash state: draco::MeshPredictionSchemeTexCoordsDecoderint, draco::PredictionSchemeWrapDeco draco::MeshPredictionSchemeTexCoordsDecoderint, draco::PredictionSchemeWrapDeco...
OSV-2021-1124 Segv on unknown address in helper_uc_tracecode
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37116 Crash type: Segv on unknown address Crash state: helpeructracecode...
OSV-2021-801 UNKNOWN READ in std::__1::__tree<std::__1::__value_type<Json::Value::CZString, Json::Value>, std
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34665 Crash type: UNKNOWN READ Crash state: std::1::tree, std std::1::mapJson::Value::CZString, Json::Value, std::1::lessJson::Value::CZ Json::Value::begin...
OSV-2021-703 Container-overflow in unsigned long jsoncons::detail::escape_string<char, jsoncons::string_sink<std::_
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33781 Crash type: Container-overflow READ 1 Crash state: unsigned long jsoncons::detail::escapestring::key...
OSV-2021-679 Heap-buffer-overflow in strlcpy
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33556 Crash type: Heap-buffer-overflow WRITE Crash state: strlcpy parselxcmntopts setconfigrootfsoptions...
OSV-2021-594 Global-buffer-overflow in read_coding_unit
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32791 Crash type: Global-buffer-overflow READ 1 Crash state: readcodingunit readcodingquadtree readcodingquadtree...
OSV-2021-537 Heap-buffer-overflow in sc_pkcs15emu_oberthur_add_pubkey
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32149 Crash type: Heap-buffer-overflow READ 1 Crash state: scpkcs15emuoberthuraddpubkey scoberthurparsepublicinfo scpkcs15emuoberthurinit...
OSV-2021-278 Heap-buffer-overflow in H5MM_memcpy
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30250 Crash type: Heap-buffer-overflow READ Crash state: H5MMmemcpy H5VMmemcpyvv H5Dcompactreadvv...
OSV-2018-159 Use-of-uninitialized-value in AAT::LookupFormat8<OT::IntType<unsigned short, 2u> >::get_value
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10953 Crash type: Use-of-uninitialized-value Crash state: AAT::LookupFormat8 ::getvalue AAT::Lookup ::getvalue AAT::StateTable::getclass...
OSV-2018-149 Heap-buffer-overflow in BEInt<unsigned int, 4>::operator unsigned int
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11033 Crash type: Heap-buffer-overflow READ 1 Crash state: BEInt::operator unsigned int AAT::KerxSubTableFormat2::sanitize hbsanitizecontextt::returnt AAT::KerxTable::dispatch...
OSV-2018-138 Heap-buffer-overflow in parse_odp_key_mask_attr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11160 Crash type: Heap-buffer-overflow READ 1 Crash state: parseodpkeymaskattr odpflowfromstring parsekeys...
OSV-2020-1253 Heap-buffer-overflow in pixReadFromTiffStream
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21435 Crash type: Heap-buffer-overflow WRITE 1 Crash state: pixReadFromTiffStream pixReadMemTiff pixReadMem...
OSV-2020-1026 Heap-buffer-overflow in DefragInsertFrag
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21446 Crash type: Heap-buffer-overflow READ Crash state: DefragInsertFrag Defrag DecodeIPV6...
OSV-2020-704 Heap-buffer-overflow in BEInt<unsigned char, 1>::set
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13736 Crash type: Heap-buffer-overflow WRITE 1 Crash state: BEInt::set CFF::CFFIndex ::setoffsetat bool CFF::FDArray ::serializeCFF::cff2fontdict...
OSV-2020-653 Heap-buffer-overflow in perfetto::base::Hash::Update
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14753 Crash type: Heap-buffer-overflow READ 1 Crash state: perfetto::base::Hash::Update perfetto::base::StringView::Hash perfetto::traceprocessor::StringPool::InternString...