4483 matches found
OSV-2020-225 Heap-buffer-overflow in dname_pkt_compare
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20308 Crash type: Heap-buffer-overflow READ 1 Crash state: dnamepktcompare scrubnormalize scrubmessage...
OSV-2020-218 Heap-buffer-overflow in __libcpp_strstr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23145 Crash type: Heap-buffer-overflow READ 13 Crash state: libcppstrstr strstr pcpp::SipRequestFirstLine::parseVersion...
OSV-2020-196 Heap-use-after-free in Pe64_r_bin_pe_free
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21630 Crash type: Heap-use-after-free READ 8 Crash state: Pe64rbinpefree rbinfilefree rlistdelete...
OSV-2020-171 Heap-buffer-overflow in ndpi_parse_packet_line_info
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23396 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpiparsepacketlineinfo ndpiintsearchbittorrenttcpzero ndpiintsearchbittorrenttcp...
OSV-2020-142 Heap-use-after-free in ndpi_strncasestr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22816 Crash type: Heap-use-after-free READ 1 Crash state: ndpistrncasestr ndpihttpcheckcontent ndpiinthttpaddconnection...
OSV-2020-121 Heap-buffer-overflow in BEInt<short, 2>::operator short
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21092 Crash type: Heap-buffer-overflow READ 2 Crash state: BEInt::operator short OT::IntType::operator int OT::SegmentMaps::map...
OSV-2020-136 Heap-buffer-overflow in ndpi_netbios_name_interpret
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20823 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpinetbiosnameinterpret ndpiintnetbiosaddconnection checkndpiudpflowfunc...
OSV-2020-112 Heap-buffer-overflow in u8_read_escape_sequence
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22180 Crash type: Heap-buffer-overflow READ 1 Crash state: u8readescapesequence flbunescapestringutf8 logfmtparser...
OSV-2020-107 Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20944 Crash type: Heap-buffer-overflow READ 2 Crash state: BEInt::operator unsigned short OT::IntType::operator unsigned int OT::gvar::getoffset...
OSV-2020-113 Heap-buffer-overflow in vorbis_book_decodev_add
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22207 Crash type: Heap-buffer-overflow READ 4 Crash state: vorbisbookdecodevadd 01inverse res1inverse...
OSV-2020-78 Heap-buffer-overflow in ndpi_check_spotify
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22912 Crash type: Heap-buffer-overflow READ 7 Crash state: ndpicheckspotify ndpisearchspotify checkndpiudpflowfunc...
OSV-2020-97 Use-of-uninitialized-value in file_vprintf
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20702 Crash type: Use-of-uninitialized-value Crash state: filevprintf fileprintf mget...
OSV-2020-57 Stack-buffer-overflow in ot::NetworkData::PrefixTlv::GetPrefixLength
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23267 Crash type: Stack-buffer-overflow READ 1 Crash state: ot::NetworkData::PrefixTlv::GetPrefixLength ot::NetworkData::NetworkData::FindPrefix ot::NetworkData::Leader::Validate...
OSV-2020-59 Heap-buffer-overflow in ndpi_add_connection_as_bittorrent
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20777 Crash type: Heap-buffer-overflow READ Crash state: ndpiaddconnectionasbittorrent ndpiintsearchbittorrenttcpzero checkndpitcpflowfunc...
OSV-2020-49 Heap-buffer-overflow in ndpi_netbios_name_interpret
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21365 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpinetbiosnameinterpret ndpiintnetbiosaddconnection checkndpiudpflowfunc...
OSV-2020-22 Container-overflow in parquet::schema::Unflatten
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20897 Crash type: Container-overflow READ 4 Crash state: parquet::schema::Unflatten parquet::FileMetaData::FileMetaDataImpl::FileMetaDataImpl parquet::FileMetaData::FileMetaData...
OSV-2026-1293 UNKNOWN READ in md_is_link_title
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=561822522 Crash type: UNKNOWN READ Crash state: mdislinktitle mdanalyzeinlines mdprocessnormalblockcontents...
OSV-2026-1239 Security exception in org.apache.lucene.util.ArrayUtil.copyOfSubArray
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=557292360 Crash type: Security exception Crash state: org.apache.lucene.util.ArrayUtil.copyOfSubArray org.apache.lucene.util.BytesRef.deepCopyOf org.apache.lucene.index.Term...
OSV-2026-1064 Heap-buffer-overflow in _wcsnlen
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=533963816 Crash type: Heap-buffer-overflow READ 2 Crash state: wcsnlen railreadunicodestring railreadhighcontrast...
OSV-2026-963 Bad-cast to Ogre::HardwareBuffer from invalid vptr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=526758819 Crash type: Bad-cast Crash state: Bad-cast to Ogre::HardwareBuffer from invalid vptr Ogre::HardwareBuffer::unlockImpl Ogre::HardwareBuffer::unlock...
OSV-2026-846 Bad-cast to AMFColor from AMFMetadata
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=519360629 Crash type: Bad-cast Crash state: Bad-cast to AMFColor from AMFMetadata Assimp::AMFImporter::SPPMaterial::GetColor Assimp::AMFImporter::PostprocessBuildMeshSet...
OSV-2026-791 Segv on unknown address in ___interceptor_strtol
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=515100083 Crash type: Segv on unknown address Crash state: interceptorstrtol processGSV nmeaparse...
OSV-2026-568 Heap-buffer-overflow in ultrahdr::IccHelper::readIccColorGamut
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=501676165 Crash type: Heap-buffer-overflow READ 1 Crash state: ultrahdr::IccHelper::readIccColorGamut ultrahdr::JpegR::decodeJPEGR uhdrdecode...
OSV-2026-150 Null-dereference READ in wasm_runtime_invoke_native
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=478557340 Crash type: Null-dereference READ Crash state: wasmruntimeinvokenative wasminterpcallwasm wasmcallfunction...
OSV-2026-55 Use-of-uninitialized-value in vp9_quantize_fp_avx2
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=475583924 Crash type: Use-of-uninitialized-value Crash state: vp9quantizefpavx2 blockyrd vp9pickintermode...
OSV-2025-959 Heap-buffer-overflow in re_parse_term
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=464349132 Crash type: Heap-buffer-overflow READ 2 Crash state: reparseterm reparsedisjunction reparseterm...
OSV-2025-955 Use-of-uninitialized-value in decoder_context::construct_reference_picture_lists
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=464323256 Crash type: Use-of-uninitialized-value Crash state: decodercontext::constructreferencepicturelists decodercontext::processslicesegmentheader decodercontext::readsliceNAL...
OSV-2025-830 Security exception in java.base/java.lang.AbstractStringBuilder.<init>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=451017447 Crash type: Security exception Crash state: java.base/java.lang.AbstractStringBuilder. java.base/java.lang.StringBuilder. com.ctc.wstx.util.TextBuffer.contentsAsString...
OSV-2025-796 Heap-buffer-overflow in AddGreenToBlueAndRed_AVX2
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=447958064 Crash type: Heap-buffer-overflow WRITE Crash state: AddGreenToBlueAndRedAVX2 VP8LInverseTransform ProcessRows...
OSV-2025-788 Heap-buffer-overflow in int arrow::bit_util::BitReader::GetBatch<int>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=447480433 Crash type: Heap-buffer-overflow READ 8 Crash state: int arrow::bitutil::BitReader::GetBatch auto arrow::util::RleBitPackedDecoder::GetBatch std::1::pair arrow::util::R...
OSV-2025-762 Use-of-uninitialized-value in fuzzer_send
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=445773944 Crash type: Use-of-uninitialized-value Crash state: fuzzersend SendBuffered SendFinished...
OSV-2025-723 Heap-buffer-overflow in processClientServerHello
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=444547710 Crash type: Heap-buffer-overflow READ 2 Crash state: processClientServerHello processtls fuzzquicgetcryptodata.c...
OSV-2025-538 Heap-double-free in policydb_destroy
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=430091583 Crash type: Heap-double-free Crash state: policydbdestroy checkpolicy-fuzzer.c definegenfscontext...
OSV-2025-484 Heap-buffer-overflow in load_protocols_file_fd
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=426164365 Crash type: Heap-buffer-overflow READ 2 Crash state: loadprotocolsfilefd fuzzfilecfgprotocols.c...
OSV-2025-467 Security exception in java.base/java.lang.StringUTF16.newBytesFor
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=424839378 Crash type: Security exception Crash state: java.base/java.lang.StringUTF16.newBytesFor java.base/java.lang.AbstractStringBuilder.inflate java.base/java.lang.AbstractStringBuilder.append...
OSV-2025-465 Heap-buffer-overflow in xmlParsePubidLiteral
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=424613315 Crash type: Heap-buffer-overflow WRITE 1 Crash state: xmlParsePubidLiteral xmlParseExternalID xmlParseNotationDecl...
OSV-2025-408 Heap-buffer-overflow in sav_parse_long_variable_names_record
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=420198855 Crash type: Heap-buffer-overflow READ 1 Crash state: savparselongvariablenamesrecord savparserecordspass2 readstatparsesav...
OSV-2025-267 Stack-buffer-overflow in snap_usedef
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408571331 Crash type: Stack-buffer-overflow WRITE Crash state: snapusedef ljsnappurge ljrecordins...
OSV-2025-264 Security exception in org.joni.Parser.parseCharClass
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408254044 Crash type: Security exception Crash state: org.joni.Parser.parseCharClass org.joni.Lexer.fetchTokenInCC org.joni.Parser.parseCharClass...
OSV-2025-92 Null-dereference READ in session_startup
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=393523566 Crash type: Null-dereference READ Crash state: sessionstartup libssh2sessionhandshake ssh2clientfuzzer.cc...
OSV-2024-1423 Security exception in java.base/java.util.Arrays.copyOfRange
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=391709145 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOfRange org.apache.poi.util.IOUtils.safelyClone org.apache.poi.ddf.EscherMetafileBlip.fillFields...
OSV-2025-16 UNKNOWN READ in png_free_data
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=386860184 Crash type: UNKNOWN READ Crash state: pngfreedata pngdestroyinfostruct pngdestroyreadstruct...
OSV-2025-4 Heap-buffer-overflow in ___interceptor_pthread_create
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=386713390 Crash type: Heap-buffer-overflow READ 8 Crash state: interceptorpthreadcreate...
OSV-2024-1312 Heap-buffer-overflow in jv_string_vfmt
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=378836890 Crash type: Heap-buffer-overflow READ 13 Crash state: jvstringvfmt jvstringfmt jvparsesizedcustomflags...
OSV-2024-1310 Use-of-uninitialized-value in decompress_yuv.cc
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=378750938 Crash type: Use-of-uninitialized-value Crash state: decompressyuv.cc...
OSV-2024-1239 Heap-buffer-overflow in convsamp
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=371659888 Crash type: Heap-buffer-overflow READ 1 Crash state: convsamp forwardDCT compressdata...
OSV-2024-1209 Heap-use-after-free in xmlValidateOneElement
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372547409 Crash type: Heap-use-after-free READ 4 Crash state: xmlValidateOneElement xmlValidateElement api.c...
OSV-2024-1181 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=371233781 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.lang.Exception. java.base/java.lang.RuntimeException...
OSV-2024-1175 Use-of-uninitialized-value in mark_context
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=370775021 Crash type: Use-of-uninitialized-value Crash state: markcontext incrementalgc mrbincrementalgc...