OSV-2022-437 Stack-buffer-overflow in sc_asn1_read_tag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47675 Crash type: Stack-buffer-overflow READ 1 Crash state: scasn1readtag scasn1findtag cardoslistfiles...

OSV-2022-436 Stack-buffer-overflow in spvtools::opt::CompositeInsertToCompositeConstruct

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47684 Crash type: Stack-buffer-overflow READ 8 Crash state: spvtools::opt::CompositeInsertToCompositeConstruct std::1::function::funcbool spvtools::opt::InstructionFolder::FoldInstructionInternal...

OSV-2022-380 Stack-buffer-overflow in sc_asn1_read_tag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47035 Crash type: Stack-buffer-overflow READ 1 Crash state: scasn1readtag scasn1findtag cardoslistfiles...

OSV-2022-304 Heap-use-after-free in decode_mcu

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46335 Crash type: Heap-use-after-free WRITE 4 Crash state: decodemcu consumedata jpegstartdecompress...

OSV-2022-278 UNKNOWN READ in s_RLE_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45992 Crash type: UNKNOWN READ Crash state: sRLEprocess cmdputbits clistcopymono...

OSV-2022-220 Stack-buffer-overflow in load_regex_matcher

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45247 Crash type: Stack-buffer-overflow WRITE 1 Crash state: loadregexmatcher cliloadpdb cliload...

OSV-2022-199 Stack-buffer-overflow in check_user_password_preR5

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44983 Crash type: Stack-buffer-overflow READ Crash state: checkuserpasswordpreR5 pdfiinitialiseDecryption pdfisetinputstream...

OSV-2021-1809 Heap-buffer-overflow in ujson.cpython-38-x86_64-linux-gnu.so

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44973 Crash type: Heap-buffer-overflow WRITE 1 Crash state: ujson.cpython-38-x8664-linux-gnu.so ujson.cpython-38-x8664-linux-gnu.so ujson.cpython-38-x8664-linux-gnu.so...

OSV-2022-100 Stack-buffer-overflow in sgets

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44160 Crash type: Stack-buffer-overflow WRITE 1 Crash state: sgets pdfireadbytes readxrefentryslow...

OSV-2022-79 Segv on unknown address in gp_semaphore_close

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43984 Crash type: Segv on unknown address Crash state: gpsemaphoreclose gxsemaphorefree icclinkcachefinalize...

OSV-2022-39 Stack-buffer-overflow in BZ2_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43564 Crash type: Stack-buffer-overflow READ 1 Crash state: BZ2decompress BZ2bzDecompress ftbzip2filefilloutput...

OSV-2022-24 Null-dereference READ in session_startup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43419 Crash type: Null-dereference READ Crash state: sessionstartup libssh2sessionhandshake ssh2clientfuzzer.cc...

OSV-2021-1764 UNKNOWN READ in read_xref_stream_entries

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42927 Crash type: UNKNOWN READ Crash state: readxrefstreamentries pdfiprocessxrefstream pdfireadxrefstreamdict...

OSV-2021-1763 Stack-buffer-overflow in pdfi_oc_is_ocg_visible

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42908 Crash type: Stack-buffer-overflow WRITE Crash state: pdfiocisocgvisible pdfiopBDC pdfiinterpretstreamoperator...

OSV-2021-1755 Heap-buffer-overflow in ndlz4_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42924 Crash type: Heap-buffer-overflow READ 4 Crash state: ndlz4decompress ndlzdecompress bloscd...

OSV-2021-1724 Segv on unknown address in chunk_obj_alloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42633 Crash type: Segv on unknown address Crash state: chunkobjalloc chunkallocbytes pdfipscriptinterpret...

OSV-2021-1723 Global-buffer-overflow in ps_font_def_func

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42613 Crash type: Global-buffer-overflow READ Crash state: psfontdeffunc pdfipscriptinterpret pdfireadpsfont...

OSV-2021-1707 Negative-size-param in general_endcidrange_func

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42479 Crash type: Negative-size-param Crash state: generalendcidrangefunc cmapendcidrangefunc pdfipscriptinterpret...

OSV-2021-1704 Stack-buffer-overflow in pdfi_create_iccbased

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42460 Crash type: Stack-buffer-overflow WRITE 4 Crash state: pdficreateiccbased pdficreatecolorspacebyarray pdfisetcolorspace...

OSV-2021-1698 Heap-buffer-overflow in chunk_obj_alloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42356 Crash type: Heap-buffer-overflow READ 8 Crash state: chunkobjalloc chunkallocbytes pdfiobjectalloc...

OSV-2021-1693 Global-buffer-overflow in pdfi_fapi_get_glyph

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42310 Crash type: Global-buffer-overflow READ Crash state: pdfifapigetglyph getfapiglyphdata cffslotload...

OSV-2021-1678 Heap-buffer-overflow in flatbuffers::EscapeString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42244 Crash type: Heap-buffer-overflow READ 1 Crash state: flatbuffers::EscapeString flexbuffers::Reference::ToString void flexbuffers::AppendToString...

OSV-2021-1634 Dynamic-stack-buffer-overflow in OutputJsonDNP3SetItem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41487 Crash type: Dynamic-stack-buffer-overflow READ 4 Crash state: OutputJsonDNP3SetItem JsonDNP3LogObjects JsonDNP3LogResponse...

OSV-2021-1580 Heap-buffer-overflow in H5G__node_found

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41011 Crash type: Heap-buffer-overflow READ 15 Crash state: H5Gnodefound H5Bfind H5Gstablookup...

OSV-2021-1463 UNKNOWN READ in helper_be_stw_mmu_armeb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40073 Crash type: UNKNOWN READ Crash state: helperbestwmmuarmeb...

OSV-2021-1453 Heap-buffer-overflow in mrb_funcall_with_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39931 Crash type: Heap-buffer-overflow WRITE 8 Crash state: mrbfuncallwithblock mrbfuncallid mrbequal...

OSV-2021-1408 Heap-buffer-overflow in unpack_16bit_4chan_planar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39532 Crash type: Heap-buffer-overflow WRITE Crash state: unpack16bit4chanplanar exrdecodingrun Imf31::checkCoreFile...

OSV-2021-1406 Heap-buffer-overflow in Imf_3_1::memstream_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39542 Crash type: Heap-buffer-overflow WRITE Crash state: Imf31::memstreamread dispatchread readuncompresseddirect...

OSV-2021-1346 UNKNOWN READ in state_VLC_dec::load_bytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39046 Crash type: UNKNOWN READ Crash state: stateVLCdec::loadbytes stateVLCdec::stateVLCdec htj2kdecode...

OSV-2021-1330 Heap-buffer-overflow in parse_content_length

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38909 Crash type: Heap-buffer-overflow READ 1 Crash state: parsecontentlength gethdrfield parseheaders...

OSV-2021-1235 Heap-buffer-overflow in ih264d_fill_bs1_16x16mb_pslice

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38387 Crash type: Heap-buffer-overflow READ 4 Crash state: ih264dfillbs116x16mbpslice ih264dcomputebsnonmbaffthread ih264drecondeblkslice...

OSV-2021-1229 Heap-buffer-overflow in flatbuffers::JsonPrinter::GenFieldOffset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38371 Crash type: Heap-buffer-overflow READ 4 Crash state: flatbuffers::JsonPrinter::GenFieldOffset flatbuffers::JsonPrinter::GenStruct flatbuffers::GenerateText...

OSV-2021-1218 Heap-buffer-overflow in value_move

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38298 Crash type: Heap-buffer-overflow READ 8 Crash state: valuemove mrbarysplice mrbaryaset...

OSV-2021-1194 Heap-use-after-free in zend_string_release

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38014 Crash type: Heap-use-after-free READ 4 Crash state: zendstringrelease zendclosurefreestorage zendobjectsstoredel...

OSV-2021-1183 UNKNOWN WRITE in draco::DepthFirstTraverser<draco::CornerTable, draco::MeshAttributeIndicesEncodi

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37864 Crash type: UNKNOWN WRITE Crash state: draco::DepthFirstTraverserdraco::CornerTable, draco::MeshAttributeIndicesEncodi draco::MeshTraversalSequencerdraco::DepthFirstTraverserdraco::CornerTable, dra...

OSV-2021-1167 Heap-buffer-overflow in snmp_add_var

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37564 Crash type: Heap-buffer-overflow READ 1 Crash state: snmpaddvar snmpapifuzzer.c...

OSV-2021-1159 UNKNOWN WRITE in hb_bit_set_invertible_t::set

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37425 Crash type: UNKNOWN WRITE Crash state: hbbitsetinvertiblet::set hbsparsesett::set hbsetcopy...

OSV-2021-1139 UNKNOWN READ in exif_mnote_data_apple_load

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37234 Crash type: UNKNOWN READ Crash state: exifmnotedataappleload exifmnotedataload interpretmakernote...

OSV-2021-1076 UNKNOWN READ in ParseXMLElement

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36671 Crash type: UNKNOWN READ Crash state: ParseXMLElement prvTidyParseXMLDocument prvTidyDocParseStream...

OSV-2021-1074 Use-of-uninitialized-value in SkBaseDevice::save

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36647 Crash type: Use-of-uninitialized-value Crash state: SkBaseDevice::save SkCanvas::internalSave SkCanvas::internalSaveLayer...

OSV-2021-904 UNKNOWN READ in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35567 Crash type: UNKNOWN READ Crash state: helpeructracecode...

OSV-2021-897 Heap-buffer-overflow in ZSTD_decompressMultiFrame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35537 Crash type: Heap-buffer-overflow READ Crash state: ZSTDdecompressMultiFrame ZSTDdecompressusingDDict bloscd...

OSV-2021-892 Heap-buffer-overflow in explicit_bzero

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35485 Crash type: Heap-buffer-overflow WRITE Crash state: explicitbzero cryptofree sshdisconnect...

OSV-2021-872 Heap-buffer-overflow in ndpi_set_detected_protocol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35300 Crash type: Heap-buffer-overflow READ 4 Crash state: ndpisetdetectedprotocol ndpiinthttpaddconnection checkcontenttypeandchangeprotocol...

OSV-2021-857 Heap-buffer-overflow in mk_string_copy_substr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35202 Crash type: Heap-buffer-overflow READ Crash state: mkstringcopysubstr mkrconfmetaadd mkrconfread...

OSV-2021-807 Stack-buffer-overflow in DecodeSingleResponse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34713 Crash type: Stack-buffer-overflow WRITE Crash state: DecodeSingleResponse DecodeResponseData DecodeBasicOcspResponse...

OSV-2021-793 Heap-use-after-free in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34584 Crash type: Heap-use-after-free WRITE 8 Crash state: AK::RefPtr ::RefPtr AK::String::String JS::abstractrelation...

OSV-2021-787 Heap-buffer-overflow in string_decoder_getc_utf_8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34533 Crash type: Heap-buffer-overflow READ 1 Crash state: stringdecodergetcutf8 textdecodergetc GetC...

OSV-2021-757 Use-of-uninitialized-value in nn_check_initialized

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34156 Crash type: Use-of-uninitialized-value Crash state: nncheckinitialized nnzero ecgdsasignraw...

OSV-2021-739 Stack-buffer-overflow in flb_sds_cat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34025 Crash type: Stack-buffer-overflow READ Crash state: flbsdscat flbratranslate recordacfuzzer.c...