OSV-2021-793 Heap-use-after-free in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34584 Crash type: Heap-use-after-free WRITE 8 Crash state: AK::RefPtr ::RefPtr AK::String::String JS::abstractrelation...

OSV-2021-757 Use-of-uninitialized-value in nn_check_initialized

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34156 Crash type: Use-of-uninitialized-value Crash state: nncheckinitialized nnzero ecgdsasignraw...

OSV-2021-729 Global-buffer-overflow in libfsext_inode_read_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33940 Crash type: Global-buffer-overflow READ Crash state: libfsextinodereaddata libfsextinodereadelementdata libfdatavectorgetelementvaluebyindex...

OSV-2021-700 UNKNOWN READ in ReadLEB_u32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33749 Crash type: UNKNOWN READ Crash state: ReadLEBu32 InitElements CompileExtendedOpcode...

OSV-2021-639 Heap-buffer-overflow in blosc_d

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33264 Crash type: Heap-buffer-overflow READ Crash state: bloscd bloscgetitem blosc2getitemctx...

OSV-2021-616 Heap-buffer-overflow in Camellia_Ekeygen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33028 Crash type: Heap-buffer-overflow READ 1 Crash state: CamelliaEkeygen Camelliasetkey cipherhwcamelliainitkey...

OSV-2021-526 Heap-use-after-free in ZSTD_freeDDict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32076 Crash type: Heap-use-after-free READ Crash state: ZSTDfreeDDict blosc2freectx blosc2schunkfree...

OSV-2021-514 UNKNOWN READ in _fini

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31953 Crash type: UNKNOWN READ Crash state: fini...

OSV-2021-509 Heap-buffer-overflow in _estrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31922 Crash type: Heap-buffer-overflow READ Crash state: estrdup exifprocessusercomment exifprocessIFDTAGimpl...

OSV-2021-498 Invalid-free in frame_get_lazychunk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31705 Crash type: Invalid-free Crash state: framegetlazychunk framedecompresschunk blosc2schunkdecompresschunk...

OSV-2021-485 Heap-buffer-overflow in blosc_run_decompression_with_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31585 Crash type: Heap-buffer-overflow READ 4 Crash state: bloscrundecompressionwithcontext blosc2decompressctx framedecompresschunk...

OSV-2021-474 Heap-buffer-overflow in sc_pkcs15emu_oberthur_add_cert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31540 Crash type: Heap-buffer-overflow READ Crash state: scpkcs15emuoberthuraddcert scoberthurparsepublicinfo scpkcs15emuoberthurinit...

OSV-2021-457 Heap-buffer-overflow in unescape_tag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31491 Crash type: Heap-buffer-overflow READ 1 Crash state: unescapetag ircparsemessagetags ircservereventtags...

OSV-2021-450 Global-buffer-overflow in coap_pdu_parse_opt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31479 Crash type: Global-buffer-overflow WRITE 1 Crash state: coappduparseopt coappduparse...

OSV-2021-449 UNKNOWN READ in std::pair<absl::lts_NUMBER_02_25::container_internal::raw_hash_set<absl::lts_NUM

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31393 Crash type: UNKNOWN READ Crash state: std::pair::Compute tensorflow::KernelAndDeviceOp::Run...

OSV-2020-2309 UNKNOWN WRITE in flb_utils_proxy_url_split

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31306 Crash type: UNKNOWN WRITE Crash state: flbutilsproxyurlsplit utilsfuzzer.c...

OSV-2021-445 Global-buffer-overflow in AK::StringView::operator==

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31338 Crash type: Global-buffer-overflow READ 1 Crash state: AK::StringView::operator== = Markdown::Table::parse...

OSV-2021-442 Heap-buffer-overflow in fnv_32a_buf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31301 Crash type: Heap-buffer-overflow READ 1 Crash state: fnv32abuf fonthash asscacheget...

OSV-2021-439 UNKNOWN READ in blosc_d

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31241 Crash type: UNKNOWN READ Crash state: bloscd dojob bloscrundecompressionwithcontext...

OSV-2021-428 Heap-buffer-overflow in frame_get_lazychunk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31189 Crash type: Heap-buffer-overflow READ 4 Crash state: framegetlazychunk framedecompresschunk blosc2schunkdecompresschunk...

OSV-2021-426 Use-of-uninitialized-value in std::__1::__packaged_task_func<std::__1::__bind<grk::mct::decompress_irrev

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31180 Crash type: Use-of-uninitialized-value Crash state: std::1::packagedtaskfuncstd::1::bindgrk::mct::decompressirrev std::1::packagedtaskint ThreadPool::ThreadPool...

OSV-2021-397 Heap-buffer-overflow in Crypto::UnsignedBigInteger::UnsignedBigInteger

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30920 Crash type: Heap-buffer-overflow READ 1 Crash state: Crypto::UnsignedBigInteger::UnsignedBigInteger Crypto::UnsignedBigInteger::importdata Crypto::derdecodeinteger...

OSV-2021-382 Heap-buffer-overflow in frame_get_vlmetalayers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30868 Crash type: Heap-buffer-overflow READ 1 Crash state: framegetvlmetalayers frametoschunk blosc2schunkfrombuffer...

OSV-2021-285 Use-of-uninitialized-value in grk::FileFormat::apply_palette_clr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30273 Crash type: Use-of-uninitialized-value Crash state: grk::FileFormat::applypaletteclr grk::FileFormat::decompress grkdecompress...

OSV-2021-276 Global-buffer-overflow in mode_sense_page

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30219 Crash type: Global-buffer-overflow READ 4 Crash state: modesensepage scsidiskcheckmodeselect modeselectpages...

OSV-2021-262 Heap-buffer-overflow in sc_pkcs15emu_oberthur_add_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30112 Crash type: Heap-buffer-overflow READ Crash state: scpkcs15emuoberthuradddata scoberthurparseprivateinfo scpkcs15emuoberthurinit...

OSV-2021-258 Heap-buffer-overflow in unstripe

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30087 Crash type: Heap-buffer-overflow READ 1 Crash state: unstripe arithuncompressto arithdecode...

OSV-2021-247 Heap-buffer-overflow in blosc_getitem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29976 Crash type: Heap-buffer-overflow READ 1 Crash state: bloscgetitem getcoffset framegetlazychunk...

OSV-2021-228 Heap-buffer-overflow in safe_ltf8_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29837 Crash type: Heap-buffer-overflow READ 1 Crash state: safeltf8get cramvarintdecodeinit cramdecoderinit...

OSV-2021-223 Heap-buffer-overflow in fdilate_1_56

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29819 Crash type: Heap-buffer-overflow READ 4 Crash state: fdilate156 fmorphopgenlow1 pixFMorphopGen1...

OSV-2020-2304 Use-of-uninitialized-value in memory_test

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29731 Crash type: Use-of-uninitialized-value Crash state: memorytest fuzzersend wolfSSHSendPacket...

OSV-2017-140 Heap-buffer-overflow in mprint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1523 Crash type: Heap-buffer-overflow READ 3 Crash state: mprint match filesoftmagic...

OSV-2018-310 Use-of-uninitialized-value in jbig2_arith_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5636 Crash type: Use-of-uninitialized-value Crash state: jbig2arithdecode jbig2decodegenerictemplate0unopt jbig2decodegenericregion...

OSV-2018-288 Use-of-uninitialized-value in jbig2_decode_symbol_dict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9688 Crash type: Use-of-uninitialized-value Crash state: jbig2decodesymboldict jbig2symboldictionary jbig2parsesegment...

OSV-2018-273 Heap-buffer-overflow in ftp_parse_winnt_ls

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7930 Crash type: Heap-buffer-overflow READ 1 Crash state: ftpparsewinntls wgetftplsfuzzer.c...

OSV-2017-126 Bad-cast to const std::__1::__less<unsigned long, unsigned long> *_start

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=606 Crash type: Bad-cast Crash state: Bad-cast to const std::1::less start...

OSV-2018-210 Heap-use-after-free in UA_SecureChannel_deleteMembersCleanup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5499 Crash type: Heap-use-after-free READ 8 Crash state: UASecureChanneldeleteMembersCleanup removeSecureChannelCallback UAServerrunshutdown...

OSV-2018-194 Heap-use-after-free in r_core_task_decref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11359 Crash type: Heap-use-after-free READ 8 Crash state: rcoretaskdecref rlistdelete rlistpurge...

OSV-2018-177 Heap-buffer-overflow in prefixcmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11007 Crash type: Heap-buffer-overflow READ 1 Crash state: prefixcmp gitprefixcmp gitcommitparseraw...

OSV-2018-156 Heap-buffer-overflow in dotnet_parse_us

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11945 Crash type: Heap-buffer-overflow READ 1 Crash state: dotnetparseus dotnetparsecom dotnetload...

OSV-2018-150 Global-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11010 Crash type: Global-buffer-overflow READ 1 Crash state: BEInt::operator unsigned short AAT::ContextualSubtable::drivercontextt::transition void AAT::StateTableDriver::driveAAT::Conte...

OSV-2018-130 Stack-buffer-overflow in parse_tables

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12466 Crash type: Stack-buffer-overflow WRITE 7 Crash state: parsetables processblock douncompressfile...

OSV-2018-100 Heap-buffer-overflow in cff_parser_run

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10869 Crash type: Heap-buffer-overflow WRITE 1 Crash state: cffparserrun cffsubfontload cfffontload...

OSV-2018-74 Heap-use-after-free in yr_re_ast_extract_literal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11753 Crash type: Heap-use-after-free READ 4 Crash state: yrreastextractliteral yrparserwritestring yrparserreducestringdeclaration...

OSV-2018-50 Heap-use-after-free in UA_Session_deleteMembersCleanup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5577 Crash type: Heap-use-after-free WRITE 8 Crash state: UASessiondeleteMembersCleanup removeSessionCallback UAServerrunshutdown...

OSV-2018-47 Heap-buffer-overflow in ycc_rgb_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9471 Crash type: Heap-buffer-overflow WRITE 1 Crash state: yccrgbconvert sepupsample processdatacontextmain...

OSV-2018-29 Heap-buffer-overflow in r_bin_mdmp_get_mem_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10222 Crash type: Heap-buffer-overflow READ 8 Crash state: rbinmdmpgetmeminfo rbinmdmpgetsrwx sections...

OSV-2018-13 Use-of-uninitialized-value in bn_sub_words

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8654 Crash type: Use-of-uninitialized-value Crash state: bnsubwords bnreduceonce bnfrommontgomeryinplace...

OSV-2020-2249 Heap-buffer-overflow in grk::t1_part1::T1Part1::decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28328 Crash type: Heap-buffer-overflow READ Crash state: grk::t1part1::T1Part1::decompress grk::DecompressBlockExec::open grk::T1DecompressScheduler::decompressBlock...

OSV-2020-2244 UNKNOWN READ in cras_system_state_stream_added

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28261 Crash type: UNKNOWN READ Crash state: crassystemstatestreamadded crasrstreamcreate streamlistadd...