4483 matches found
OSV-2022-670 Heap-buffer-overflow in dissect_softether_ip_port
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49736 Crash type: Heap-buffer-overflow READ 4 Crash state: dissectsoftetheripport ndpisearchsoftether checkndpidetectionfunc...
OSV-2022-666 Heap-buffer-overflow in fasthuf_decode
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49698 Crash type: Heap-buffer-overflow READ 8 Crash state: fasthufdecode internalhufdecompress internalexrundopiz...
OSV-2022-656 Heap-buffer-overflow in dwg_decode_LWPOLYLINE_private
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49630 Crash type: Heap-buffer-overflow READ 1 Crash state: dwgdecodeLWPOLYLINEprivate dwgdecodeLWPOLYLINE dwgdecodeaddobject...
OSV-2022-655 UNKNOWN WRITE in pdfi_repair_file
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49606 Crash type: UNKNOWN WRITE Crash state: pdfirepairfile pdfireadxrefstreamdict pdfireadxref...
OSV-2022-612 Heap-buffer-overflow in fxGetNextEntity
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49357 Crash type: Heap-buffer-overflow WRITE 1 Crash state: fxGetNextEntity fxGetNextTokenJSXChild fxJSXElement...
OSV-2022-597 Heap-use-after-free in .tmpgt0oOx
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49167 Crash type: Heap-use-after-free READ 8 Crash state: .tmpgt0oOx .tmpgt0oOx wasmtimesetjmp...
OSV-2022-586 Heap-use-after-free in op_pci_write
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49107 Crash type: Heap-use-after-free READ 4 Crash state: oppciwrite genericfuzz fuzz.c...
OSV-2022-538 Memcpy-param-overlap in FT_Stream_TryRead
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48749 Crash type: Memcpy-param-overlap Crash state: FTStreamTryRead bdfloadfont BDFFaceInit...
OSV-2022-534 Heap-buffer-overflow in json_parse
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48736 Crash type: Heap-buffer-overflow READ 1 Crash state: jsonparse fileisjson filebuffer...
OSV-2022-484 Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48043 Crash type: Heap-buffer-overflow READ 4 Crash state: llvm::DataLayout::getIndexedOffsetInType InterpreterStackFrame::ResolveConstantValue InterpreterStackFrame::ResolveConstant...
OSV-2022-456 Null-dereference READ in load_glyph
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47798 Crash type: Null-dereference READ Crash state: loadglyph gsfapiftgetcharrastermetrics gsfapidochar...
OSV-2022-437 Stack-buffer-overflow in sc_asn1_read_tag
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47675 Crash type: Stack-buffer-overflow READ 1 Crash state: scasn1readtag scasn1findtag cardoslistfiles...
OSV-2022-380 Stack-buffer-overflow in sc_asn1_read_tag
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47035 Crash type: Stack-buffer-overflow READ 1 Crash state: scasn1readtag scasn1findtag cardoslistfiles...
OSV-2022-304 Heap-use-after-free in decode_mcu
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46335 Crash type: Heap-use-after-free WRITE 4 Crash state: decodemcu consumedata jpegstartdecompress...
OSV-2022-278 UNKNOWN READ in s_RLE_process
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45992 Crash type: UNKNOWN READ Crash state: sRLEprocess cmdputbits clistcopymono...
OSV-2022-252 Heap-buffer-overflow in grk::PacketLengthMarkers::readPLM
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45622 Crash type: Heap-buffer-overflow READ 1 Crash state: grk::PacketLengthMarkers::readPLM grk::CodeStreamDecompress::processmarker grk::CodeStreamDecompress::readHeaderProcedureImpl...
OSV-2022-220 Stack-buffer-overflow in load_regex_matcher
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45247 Crash type: Stack-buffer-overflow WRITE 1 Crash state: loadregexmatcher cliloadpdb cliload...
OSV-2022-199 Stack-buffer-overflow in check_user_password_preR5
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44983 Crash type: Stack-buffer-overflow READ Crash state: checkuserpasswordpreR5 pdfiinitialiseDecryption pdfisetinputstream...
OSV-2021-1809 Heap-buffer-overflow in ujson.cpython-38-x86_64-linux-gnu.so
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44973 Crash type: Heap-buffer-overflow WRITE 1 Crash state: ujson.cpython-38-x8664-linux-gnu.so ujson.cpython-38-x8664-linux-gnu.so ujson.cpython-38-x8664-linux-gnu.so...
OSV-2022-115 UNKNOWN READ in unescape_string
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44300 Crash type: UNKNOWN READ Crash state: unescapestring parsestring parseobject...
OSV-2022-102 Segv on unknown address in pdfi_array_get
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44151 Crash type: Segv on unknown address Crash state: pdfiarrayget pdfiTJ pdfiinterpretstreamoperator...
OSV-2022-100 Stack-buffer-overflow in sgets
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44160 Crash type: Stack-buffer-overflow WRITE 1 Crash state: sgets pdfireadbytes readxrefentryslow...
OSV-2022-39 Stack-buffer-overflow in BZ2_decompress
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43564 Crash type: Stack-buffer-overflow READ 1 Crash state: BZ2decompress BZ2bzDecompress ftbzip2filefilloutput...
OSV-2022-24 Null-dereference READ in session_startup
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43419 Crash type: Null-dereference READ Crash state: sessionstartup libssh2sessionhandshake ssh2clientfuzzer.cc...
OSV-2021-1764 UNKNOWN READ in read_xref_stream_entries
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42927 Crash type: UNKNOWN READ Crash state: readxrefstreamentries pdfiprocessxrefstream pdfireadxrefstreamdict...
OSV-2021-1755 Heap-buffer-overflow in ndlz4_decompress
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42924 Crash type: Heap-buffer-overflow READ 4 Crash state: ndlz4decompress ndlzdecompress bloscd...
OSV-2021-1723 Global-buffer-overflow in ps_font_def_func
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42613 Crash type: Global-buffer-overflow READ Crash state: psfontdeffunc pdfipscriptinterpret pdfireadpsfont...
OSV-2021-1707 Negative-size-param in general_endcidrange_func
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42479 Crash type: Negative-size-param Crash state: generalendcidrangefunc cmapendcidrangefunc pdfipscriptinterpret...
OSV-2021-1693 Global-buffer-overflow in pdfi_fapi_get_glyph
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42310 Crash type: Global-buffer-overflow READ Crash state: pdfifapigetglyph getfapiglyphdata cffslotload...
OSV-2021-1580 Heap-buffer-overflow in H5G__node_found
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41011 Crash type: Heap-buffer-overflow READ 15 Crash state: H5Gnodefound H5Bfind H5Gstablookup...
OSV-2021-1470 Heap-buffer-overflow in hufDecode
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40091 Crash type: Heap-buffer-overflow READ 1 Crash state: hufDecode internalhufdecompress internalexrundopiz...
OSV-2021-1463 UNKNOWN READ in helper_be_stw_mmu_armeb
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40073 Crash type: UNKNOWN READ Crash state: helperbestwmmuarmeb...
OSV-2021-1453 Heap-buffer-overflow in mrb_funcall_with_block
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39931 Crash type: Heap-buffer-overflow WRITE 8 Crash state: mrbfuncallwithblock mrbfuncallid mrbequal...
OSV-2021-1408 Heap-buffer-overflow in unpack_16bit_4chan_planar
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39532 Crash type: Heap-buffer-overflow WRITE Crash state: unpack16bit4chanplanar exrdecodingrun Imf31::checkCoreFile...
OSV-2021-1406 Heap-buffer-overflow in Imf_3_1::memstream_read
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39542 Crash type: Heap-buffer-overflow WRITE Crash state: Imf31::memstreamread dispatchread readuncompresseddirect...
OSV-2021-1346 UNKNOWN READ in state_VLC_dec::load_bytes
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39046 Crash type: UNKNOWN READ Crash state: stateVLCdec::loadbytes stateVLCdec::stateVLCdec htj2kdecode...
OSV-2021-1330 Heap-buffer-overflow in parse_content_length
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38909 Crash type: Heap-buffer-overflow READ 1 Crash state: parsecontentlength gethdrfield parseheaders...
OSV-2021-1311 Null-dereference READ in unzOpenCurrentFile3
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38873 Crash type: Null-dereference READ Crash state: unzOpenCurrentFile3 unzOpenCurrentFile Assimp::ZipFileInfo::Extract...
OSV-2021-1235 Heap-buffer-overflow in ih264d_fill_bs1_16x16mb_pslice
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38387 Crash type: Heap-buffer-overflow READ 4 Crash state: ih264dfillbs116x16mbpslice ih264dcomputebsnonmbaffthread ih264drecondeblkslice...
OSV-2021-1229 Heap-buffer-overflow in flatbuffers::JsonPrinter::GenFieldOffset
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38371 Crash type: Heap-buffer-overflow READ 4 Crash state: flatbuffers::JsonPrinter::GenFieldOffset flatbuffers::JsonPrinter::GenStruct flatbuffers::GenerateText...
OSV-2021-1218 Heap-buffer-overflow in value_move
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38298 Crash type: Heap-buffer-overflow READ 8 Crash state: valuemove mrbarysplice mrbaryaset...
OSV-2021-1183 UNKNOWN WRITE in draco::DepthFirstTraverser<draco::CornerTable, draco::MeshAttributeIndicesEncodi
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37864 Crash type: UNKNOWN WRITE Crash state: draco::DepthFirstTraverserdraco::CornerTable, draco::MeshAttributeIndicesEncodi draco::MeshTraversalSequencerdraco::DepthFirstTraverserdraco::CornerTable, dra...
OSV-2021-1167 Heap-buffer-overflow in snmp_add_var
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37564 Crash type: Heap-buffer-overflow READ 1 Crash state: snmpaddvar snmpapifuzzer.c...
OSV-2021-1159 UNKNOWN WRITE in hb_bit_set_invertible_t::set
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37425 Crash type: UNKNOWN WRITE Crash state: hbbitsetinvertiblet::set hbsparsesett::set hbsetcopy...
OSV-2021-1139 UNKNOWN READ in exif_mnote_data_apple_load
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37234 Crash type: UNKNOWN READ Crash state: exifmnotedataappleload exifmnotedataload interpretmakernote...
OSV-2021-1120 Heap-use-after-free in on_body
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37023 Crash type: Heap-use-after-free READ 1 Crash state: onbody reqbodysendcomplete runsocket...
OSV-2021-1084 Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36738 Crash type: Heap-buffer-overflow READ 4 Crash state: llvm::DataLayout::getIndexedOffsetInType InterpreterStackFrame::ResolveConstantValue InterpreterStackFrame::ResolveConstant...
OSV-2021-1074 Use-of-uninitialized-value in SkBaseDevice::save
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36647 Crash type: Use-of-uninitialized-value Crash state: SkBaseDevice::save SkCanvas::internalSave SkCanvas::internalSaveLayer...