OSV-2022-674 Use-of-uninitialized-value in cdef_filter_block_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49787 Crash type: Use-of-uninitialized-value Crash state: cdeffilterblockc cdeffilterblock8x8c dav1dcdefbrow8bpc...

OSV-2022-661 Heap-buffer-overflow in dissect_softether_ip_port

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49638 Crash type: Heap-buffer-overflow READ 4 Crash state: dissectsoftetheripport ndpisearchsoftether checkndpidetectionfunc...

OSV-2022-626 Heap-buffer-overflow in Write16bitTables

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49461 Crash type: Heap-buffer-overflow READ 2 Crash state: Write16bitTables TypeLUT16Write SaveTags...

OSV-2022-621 Segv on unknown address in mpz_add

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49427 Crash type: Segv on unknown address Crash state: mpzadd mrbbintadd intadd...

OSV-2022-612 Heap-buffer-overflow in fxGetNextEntity

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49357 Crash type: Heap-buffer-overflow WRITE 1 Crash state: fxGetNextEntity fxGetNextTokenJSXChild fxJSXElement...

OSV-2022-590 Heap-use-after-free in .tmpoLlNv4

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49166 Crash type: Heap-use-after-free READ 8 Crash state: .tmpoLlNv4 .tmpoLlNv4 wasmtimesetjmp...

OSV-2022-586 Heap-use-after-free in op_pci_write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49107 Crash type: Heap-use-after-free READ 4 Crash state: oppciwrite genericfuzz fuzz.c...

OSV-2022-543 Index-out-of-bounds in decode_coefs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48816 Crash type: Index-out-of-bounds Crash state: decodecoefs vp9decodeblocktokens decodeblock...

OSV-2022-453 Segv on unknown address in gx_device_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47770 Crash type: Segv on unknown address Crash state: gxdevicefinalize allocrestorestepin dorestore...

OSV-2022-447 Heap-buffer-overflow in ndpi_search_http_tcp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47734 Crash type: Heap-buffer-overflow READ 11 Crash state: ndpisearchhttptcp ndpisearchhttptcpagain ndpidetectionprocesspacket...

OSV-2022-439 Stack-use-after-return in test_update

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47676 Crash type: Stack-use-after-return READ 1 Crash state: testupdate main fuzzpkcs15tool.c...

OSV-2022-417 Heap-buffer-overflow in read_xref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47501 Crash type: Heap-buffer-overflow READ 8 Crash state: readxref pdfireadxref pdfisetinputstream...

OSV-2022-393 Heap-use-after-free in mrb_funcall_with_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47213 Crash type: Heap-use-after-free READ 8 Crash state: mrbfuncallwithblock mrbinstancenew mrbfuncallwithblock...

OSV-2022-386 Invalid-free in change_pin

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47143 Crash type: Invalid-free Crash state: changepin main fuzzpkcs15tool.c...

OSV-2022-354 Segv on unknown address in gs_heap_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46734 Crash type: Segv on unknown address Crash state: gsheapfreeobject chunkfreeobject pdfirepairaddobject...

OSV-2022-347 Heap-buffer-overflow in cli_bcomp_freemeta

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46687 Crash type: Heap-buffer-overflow READ 8 Crash state: clibcompfreemeta clibcompaddpatt readdbparseldbsubsignature...

OSV-2022-319 Heap-buffer-overflow in LoadPSD

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46437 Crash type: Heap-buffer-overflow WRITE 2 Crash state: LoadPSD PSDHandler::read kimgiofuzzer.cc...

OSV-2022-318 UNKNOWN READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46356 Crash type: UNKNOWN READ Crash state: NULL...

OSV-2022-317 Heap-use-after-free in save_marker

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46421 Crash type: Heap-use-after-free WRITE 1 Crash state: savemarker readmarkers consumemarkers...

OSV-2022-310 Heap-use-after-free in jpeg_fill_bit_buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46343 Crash type: Heap-use-after-free WRITE 4 Crash state: jpegfillbitbuffer jpeghuffdecode decodemcu...

OSV-2022-302 Heap-use-after-free in read_markers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46334 Crash type: Heap-use-after-free READ 4 Crash state: readmarkers consumemarkers jpegconsumeinput...

OSV-2022-299 Heap-use-after-free in read_data_compressed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46279 Crash type: Heap-use-after-free READ 4 Crash state: readdatacompressed archivereadformatrarreaddata archivereaddatablock...

OSV-2022-249 Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45591 Crash type: Heap-buffer-overflow READ 4 Crash state: llvm::DataLayout::getIndexedOffsetInType InterpreterStackFrame::ResolveConstantValue InterpreterStackFrame::EvaluateValue...

OSV-2022-244 Heap-buffer-overflow in process_ef

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45552 Crash type: Heap-buffer-overflow WRITE 8 Crash state: processef processblock processdf...

OSV-2022-241 UNKNOWN READ in write_cond_nodes_to_conf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45523 Crash type: UNKNOWN READ Crash state: writecondnodestoconf sepolkernelpolicydbtoconf binpolicy-fuzzer.c...

OSV-2022-232 UNKNOWN READ in pdfi_fapi_get_glyph

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45439 Crash type: UNKNOWN READ Crash state: pdfifapigetglyph getfapiglyphdata cffslotload...

OSV-2022-127 Heap-use-after-free in UA_ServerConfig_clean

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44434 Crash type: Heap-use-after-free READ 8 Crash state: UAServerConfigclean fuzzbinarymessage.cc UAmemoryManagerfree...

OSV-2022-109 UNKNOWN READ in unescape_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44237 Crash type: UNKNOWN READ Crash state: unescapestring parsestring parseobject...

OSV-2022-108 Heap-buffer-overflow in void apply_string<GSUBProxy>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44212 Crash type: Heap-buffer-overflow READ 2 Crash state: void applystring void hbotmapt::apply hbotmapt::substitute...

OSV-2022-87 Heap-use-after-free in zend_std_get_property_ptr_ptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43988 Crash type: Heap-use-after-free READ 8 Crash state: zendstdgetpropertyptrptr zendfetchpropertyaddress ZENDFETCHOBJWSPECCVCONSTHANDLER...

OSV-2022-84 Heap-buffer-overflow in Core::Stream::File::open_path

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43978 Crash type: Heap-buffer-overflow READ Crash state: Core::Stream::File::openpath Core::Stream::File::open Audio::FlacLoaderPlugin::FlacLoaderPlugin...

OSV-2022-40 UNKNOWN READ in md_build_attribute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43587 Crash type: UNKNOWN READ Crash state: mdbuildattribute mdenterleavespana mdprocessnormalblockcontents...

OSV-2022-13 Heap-use-after-free in read_data_compressed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43324 Crash type: Heap-use-after-free READ 4 Crash state: readdatacompressed archivereadformatrarreaddata archivereaddatablock...

OSV-2021-1797 Heap-buffer-overflow in grk::GrkImage::cieLabToRGB

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43161 Crash type: Heap-buffer-overflow WRITE 4 Crash state: grk::GrkImage::cieLabToRGB grk::GrkImage::applyColourManagement grk::CodeStreamDecompress::postProcess...

OSV-2021-1785 Heap-use-after-free in ut_allocator<os_event>::allocate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43059 Crash type: Heap-use-after-free READ 8 Crash state: utallocator::allocate oseventcreate rwlockcreatefunc...

OSV-2021-1780 Heap-use-after-free in zend_jit_fetch_dim_r_helper

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43055 Crash type: Heap-use-after-free READ 4 Crash state: zendjitfetchdimrhelper zero zendexecute...

OSV-2021-1779 Heap-use-after-free in Segment::write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42996 Crash type: Heap-use-after-free READ 1 Crash state: Segment::write Doublewrite::writepages Doublewrite::flushtodisk...

OSV-2021-1768 Heap-buffer-overflow in grk::GrkImage::color_esycc_to_rgb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42958 Crash type: Heap-buffer-overflow READ 16 Crash state: grk::GrkImage::coloresycctorgb grk::GrkImage::colorConvert grkdecompressfuzzer.cpp...

OSV-2021-1753 UNKNOWN READ in names_string_ref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42907 Crash type: UNKNOWN READ Crash state: namesstringref zfontglyphname pdfifapigetglyphnameorcid...

OSV-2021-1740 Stack-buffer-overflow in pdfi_annot_draw_LE_one

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42783 Crash type: Stack-buffer-overflow WRITE Crash state: pdfiannotdrawLEone pdfiannotdrawLE pdfiannotdrawLine...

OSV-2021-1726 UNKNOWN READ in pdfi_dereference

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42616 Crash type: UNKNOWN READ Crash state: pdfidereference pdfiderefloopdetect pdfidictget...

OSV-2021-1719 Heap-buffer-overflow in insert_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42560 Crash type: Heap-buffer-overflow WRITE 8 Crash state: insertfree chunkobjalloc chunkallocbytes...

OSV-2021-1715 Segv on unknown address in sreadbuf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42489 Crash type: Segv on unknown address Crash state: sreadbuf spgetcc sgets...

OSV-2021-1712 Heap-buffer-overflow in ndlz8_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42537 Crash type: Heap-buffer-overflow WRITE Crash state: ndlz8decompress bloscd dojob...

OSV-2021-1679 Heap-buffer-overflow in ap_is_chunked

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42226 Crash type: Heap-buffer-overflow READ 1 Crash state: apischunked fuzzutils.c...

OSV-2021-1674 Heap-buffer-overflow in find_sdp_line_delimiter

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42238 Crash type: Heap-buffer-overflow READ 1 Crash state: findsdplinedelimiter parsemixedcontent parsesdp...

OSV-2021-1671 UNKNOWN READ in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42196 Crash type: UNKNOWN READ Crash state: helpeructracecode...

OSV-2021-1658 Null-dereference READ in istio.io/istio/security/pkg/util.ExtractJwtAud

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42142 Crash type: Null-dereference READ Crash state: istio.io/istio/security/pkg/util.ExtractJwtAud...

OSV-2021-1628 Stack-buffer-overflow in sprint_realloc_hinted_integer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41372 Crash type: Stack-buffer-overflow WRITE 1 Crash state: sprintreallochintedinteger sprintreallocinteger snprintinteger...

OSV-2021-1612 Heap-buffer-overflow in MqttDecode_Props

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41291 Crash type: Heap-buffer-overflow READ 1 Crash state: MqttDecodeProps MqttDecodeDisconnect MqttClientDecodePacket...