OSV-2020-1440 Use-of-uninitialized-value in PPrintText

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13014 Crash type: Use-of-uninitialized-value Crash state: PPrintText prvTidyPPrintTree prvTidyPPrintTree...

OSV-2020-1429 Segv on unknown address in clang::OverloadExpr::find

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19972 Crash type: Segv on unknown address Crash state: clang::OverloadExpr::find clang::Sema::ResolveAndFixSingleFunctionTemplateSpecialization clang::Sema::CheckPlaceholderExpr...

OSV-2020-1371 Bad-cast to pcpp::IDnsResource from invalid vptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23926 Crash type: Bad-cast Crash state: Bad-cast to pcpp::IDnsResource from invalid vptr pcpp::DnsLayer::parseResources pcpp::DnsLayer::DnsLayer...

OSV-2020-1340 Use-of-uninitialized-value in Gfx::fillPatch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15395 Crash type: Use-of-uninitialized-value Crash state: Gfx::fillPatch Gfx::doPatchMeshShFill Gfx::doShadingPatternFill...

OSV-2020-1326 Heap-buffer-overflow in ihevcd_parse_slice_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16804 Crash type: Heap-buffer-overflow READ 4 Crash state: ihevcdparseslicedata ihevcddecode ihevcdcxaapifunction...

OSV-2020-1299 UNKNOWN WRITE in ideint_weave_blk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17084 Crash type: UNKNOWN WRITE Crash state: ideintweaveblk ideintprocess impeg2ddeinterlace...

OSV-2020-1294 Heap-buffer-overflow in SHA1Update

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18740 Crash type: Heap-buffer-overflow READ Crash state: SHA1Update getSSCertificateFingerprint tlsDetectProtocolFromCertificate...

OSV-2020-1266 UNKNOWN READ in arrow::Array::IsNull

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20139 Crash type: UNKNOWN READ Crash state: arrow::Array::IsNull arrow::Status arrow::VisitArrayInline arrow::internal::ValidateArrayData...

OSV-2020-1233 Heap-buffer-overflow in getTLScertificate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19269 Crash type: Heap-buffer-overflow READ 6 Crash state: getTLScertificate tlsDetectProtocolFromCertificate ndpisearchtlstcpudp...

OSV-2020-1175 Use-of-uninitialized-value in readline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21638 Crash type: Use-of-uninitialized-value Crash state: readline psscan documentload...

OSV-2020-1150 Global-buffer-overflow in ssl_sigalg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13800 Crash type: Global-buffer-overflow READ 2 Crash state: sslsigalg ssl3getserverkeyexchange ssl3connect...

OSV-2020-1148 Heap-buffer-overflow in asn1_item_ex_d2i

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14217 Crash type: Heap-buffer-overflow READ 1 Crash state: asn1itemexd2i ASN1itemd2i d2iPrivateKey...

OSV-2020-1125 Use-of-uninitialized-value in pcpp::IDnsResource::decodeName

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22451 Crash type: Use-of-uninitialized-value Crash state: pcpp::IDnsResource::decodeName pcpp::IDnsResource::IDnsResource pcpp::DnsQuery::DnsQuery...

OSV-2020-1093 Heap-buffer-overflow in mu::ParserBase::ParseCmdCodeBulk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23330 Crash type: Heap-buffer-overflow READ 8 Crash state: mu::ParserBase::ParseCmdCodeBulk mu::ParserBase::ParseString mu::ParserBase::Eval...

OSV-2020-1062 Use-of-uninitialized-value in ihevc_recon_4x4_ttype1

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18991 Crash type: Use-of-uninitialized-value Crash state: ihevcrecon4x4ttype1 ihevcdiquantitransreconctb ihevcdprocess...

OSV-2020-1051 Global-buffer-overflow in kencodingprober::nsCodingStateMachine::NextState

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12918 Crash type: Global-buffer-overflow READ 4 Crash state: kencodingprober::nsCodingStateMachine::NextState kencodingprober::nsEscCharSetProber::HandleData kcodecsfuzzer.cc...

OSV-2020-1041 Use-of-uninitialized-value in McCopyWidthEq16_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13005 Crash type: Use-of-uninitialized-value Crash state: McCopyWidthEq16c WelsDec::BaseMC WelsDec::GetInterPred...

OSV-2020-1017 Heap-buffer-overflow in decode_bit_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16614 Crash type: Heap-buffer-overflow READ 1 Crash state: decodebitstring scasn1printbitstring printtagsrecursive...

OSV-2020-1025 UNKNOWN READ in auto LLVMFuzzerTestOneInput::$_1::operator

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24195 Crash type: UNKNOWN READ Crash state: auto LLVMFuzzerTestOneInput::$1::operator int fuzzerinput::run set-gc.cpp...

OSV-2020-1021 UNKNOWN READ in exif_mnote_data_olympus_load

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15312 Crash type: UNKNOWN READ Crash state: exifmnotedataolympusload exifdataloaddata exifloadergetdata...

OSV-2020-1004 Heap-buffer-overflow in gtTileSeparate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13280 Crash type: Heap-buffer-overflow READ 4 Crash state: gtTileSeparate TIFFReadRGBATileExt cv::TiffDecoder::readData...

OSV-2020-1005 Global-buffer-overflow in ihevcd_unpack_coeffs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16926 Crash type: Global-buffer-overflow READ 1 Crash state: ihevcdunpackcoeffs ihevcdiquantitransreconctb ihevcdprocess...

OSV-2020-999 UNKNOWN WRITE in vcf_parse_format

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21139 Crash type: UNKNOWN WRITE Crash state: vcfparseformat vcfparse viewvcf...

OSV-2020-973 Heap-buffer-overflow in pcpp::HeaderField::HeaderField

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22837 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::HeaderField::HeaderField pcpp::TextBasedProtocolMessage::parseFields pcpp::SipResponseLayer::SipResponseLayer...

OSV-2020-977 Segv on unknown address in draco::MeshPredictionSchemeTexCoordsDecoder<int, draco::PredictionSchemeWrapDeco

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23414 Crash type: Segv on unknown address Crash state: draco::MeshPredictionSchemeTexCoordsDecoderint, draco::PredictionSchemeWrapDeco draco::MeshPredictionSchemeTexCoordsDecoderint, draco::PredictionSchemeWrapDeco...

OSV-2020-972 Heap-buffer-overflow in ndpi_search_irc_tcp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21346 Crash type: Heap-buffer-overflow READ 7 Crash state: ndpisearchirctcp checkndpitcpflowfunc ndpidetectionprocesspacket...

OSV-2020-962 Use-of-uninitialized-value in processCertificateElements

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22864 Crash type: Use-of-uninitialized-value Crash state: processCertificateElements processCertificate processTLSBlock...

OSV-2020-945 Heap-buffer-overflow in pcpp::SSLExtension::getLength

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22529 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::SSLExtension::getLength pcpp::SSLExtension::getTotalLength pcpp::SSLServerHelloMessage::SSLServerHelloMessage...

OSV-2020-942 Heap-buffer-overflow in ihevcd_mv_pred

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16894 Crash type: Heap-buffer-overflow READ 4 Crash state: ihevcdmvpred ihevcdgetmvctb ihevcdparseslicedata...

OSV-2020-872 Use-of-uninitialized-value in tun_key_to_attr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22026 Crash type: Use-of-uninitialized-value Crash state: tunkeytoattr odpflowkeyfromflow parsekeys...

OSV-2020-860 Use-of-uninitialized-value in printUInt32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14912 Crash type: Use-of-uninitialized-value Crash state: printUInt32 printU1ImmOperand printInstruction...

OSV-2020-822 Use-of-uninitialized-value in jbig2_arith_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23762 Crash type: Use-of-uninitialized-value Crash state: jbig2arithdecode jbig2decoderefinementTPGRON jbig2decoderefinementregion...

OSV-2020-813 Use-of-uninitialized-value in inflate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17121 Crash type: Use-of-uninitialized-value Crash state: inflate InflateRankDims ReadNextStructField...

OSV-2020-810 Use-of-uninitialized-value in pcap_filter_with_aux_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22220 Crash type: Use-of-uninitialized-value Crash state: pcapfilterwithauxdata pcapfilter pcapofflinefilter...

OSV-2020-806 Segv on unknown address in process_ndpi_collected_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22122 Crash type: Segv on unknown address Crash state: processndpicollectedinfo packetprocessing ndpiworkflowprocesspacket...

OSV-2020-804 Use-of-uninitialized-value in read_markers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23581 Crash type: Use-of-uninitialized-value Crash state: readmarkers consumemarkers jpegconsumeinput...

OSV-2020-789 Heap-use-after-free in llvm_ks::X86Operand::getToken

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22850 Crash type: Heap-use-after-free READ 4 Crash state: llvmks::X86Operand::getToken X86AsmParser::MatchAndEmitATTInstruction X86AsmParser::MatchAndEmitInstruction...

OSV-2020-780 Segv on unknown address in ndpi_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22676 Crash type: Segv on unknown address Crash state: ndpistrdup processndpicollectedinfo packetprocessing...

OSV-2020-748 Heap-buffer-overflow in OGR_RawField_IsUnset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23705 Crash type: Heap-buffer-overflow READ 4 Crash state: OGRRawFieldIsUnset OGRFeature::IsFieldSetAndNotNull OGRFeature::OGRFeature...

OSV-2020-739 UNKNOWN READ in str_decref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18756 Crash type: UNKNOWN READ Crash state: strdecref objfree mrbgcdestroy...

OSV-2020-728 Stack-buffer-overflow in ot::Ip6::OptionPadN::Init

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14854 Crash type: Stack-buffer-overflow WRITE 9 Crash state: ot::Ip6::OptionPadN::Init ot::Ip6::Ip6::RemoveMplOption ot::Ip6::Ip6::ProcessReceiveCallback...

OSV-2020-725 Heap-buffer-overflow in walk_exports

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18321 Crash type: Heap-buffer-overflow READ 2 Crash state: walkexports getsymbols getmain...

OSV-2020-692 Heap-use-after-free in WelsDec::SetUnRef

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18458 Crash type: Heap-use-after-free WRITE 1 Crash state: WelsDec::SetUnRef WelsDec::SlidingWindow WelsDec::WelsMarkAsRef...

OSV-2020-698 Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18515 Crash type: Heap-buffer-overflow READ 2 Crash state: BEInt::operator unsigned short OT::IntType::operator unsigned int OT::ArrayOf, OT::IntType ::...

OSV-2020-688 Heap-use-after-free in icalparameter_new_from_value_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14737 Crash type: Heap-use-after-free READ 2 Crash state: icalparameternewfromvaluestring icalparseraddline icalparserparse...

OSV-2020-681 Heap-use-after-free in WelsDec::SetUnRef

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18459 Crash type: Heap-use-after-free WRITE 1 Crash state: WelsDec::SetUnRef WelsDec::WelsDelLongFromListSetUnref WelsDec::MMCOProcess...

OSV-2020-673 UNKNOWN WRITE in htp_connp_res_buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19323 Crash type: UNKNOWN WRITE Crash state: htpconnpresbuffer htpconnpRESLINE htpconnpresdata...

OSV-2020-633 Global-buffer-overflow in ne_find_element

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15056 Crash type: Global-buffer-overflow READ 8 Crash state: nefindelement neparse nestegginit...

OSV-2020-624 Heap-buffer-overflow in LZ4_write32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15941 Crash type: Heap-buffer-overflow WRITE 4 Crash state: LZ4write32 LZ4compressfastextState LZ4compressfast...

OSV-2020-631 Stack-use-after-return in ihevcd_process_thread

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17500 Crash type: Stack-use-after-return READ 8 Crash state: ihevcdprocessthread startthread...