4483 matches found
OSV-2020-1417 Index-out-of-bounds in DHT::get_hv_rbg
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23870 Crash type: Index-out-of-bounds Crash state: DHT::gethvrbg DHT::makehvdline DHT::makehvdirs...
OSV-2020-1420 Bad-cast to Sass::PreValue from Sass::Unary_Expression
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15896 Crash type: Bad-cast Crash state: Bad-cast to Sass::PreValue from Sass::UnaryExpression Sass::SharedImpl::SharedImpl Sass::Parser::parseiekeywordarg...
OSV-2020-1410 Use-of-uninitialized-value in float64_squash_input_denormal_aarch64eb
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17032 Crash type: Use-of-uninitialized-value Crash state: float64squashinputdenormalaarch64eb float64tofloat32aarch64eb helpervfpfcvtsdaarch64eb...
OSV-2020-1402 Heap-buffer-overflow in yr_object_set_string
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Heap-buffer-overflow READ Crash state: yrobjectsetstring dexparse dexload...
OSV-2020-1378 Segv on unknown address in clang::Expr::EvaluateKnownConstInt
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20256 Crash type: Segv on unknown address Crash state: clang::Expr::EvaluateKnownConstInt clang::FieldDecl::getBitWidthValue clang::FieldDecl::isZeroLengthBitField...
OSV-2020-1312 Use-of-uninitialized-value in FilterInput8bitWithStride_c
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13004 Crash type: Use-of-uninitialized-value Crash state: FilterInput8bitWithStridec McHorVer20c McHorVer30c...
OSV-2020-1289 Heap-use-after-free in WelsDec::MapColToList0
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13037 Crash type: Heap-use-after-free READ 4 Crash state: WelsDec::MapColToList0 WelsDec::PredBDirectTemporal WelsDec::ParseInterBInfo...
OSV-2020-1274 Heap-buffer-overflow in exif_entry_get_value
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14543 Crash type: Heap-buffer-overflow READ 7 Crash state: exifentrygetvalue contentfunc exifcontentforeachentry...
OSV-2020-1257 Stack-buffer-overflow in readstat_convert
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12579 Crash type: Stack-buffer-overflow WRITE 1 Crash state: readstatconvert dtahandlerow dtahandlerows...
OSV-2020-1240 Use-of-uninitialized-value in jbig2_decode_mmr_line
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17855 Crash type: Use-of-uninitialized-value Crash state: jbig2decodemmrline jbig2decodehalftonemmr jbig2decodegrayscaleimage...
OSV-2020-1185 Global-buffer-overflow in kencodingprober::nsCodingStateMachine::NextState
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12919 Crash type: Global-buffer-overflow READ 4 Crash state: kencodingprober::nsCodingStateMachine::NextState kencodingprober::nsEscCharSetProber::HandleData kencodingprober::nsUniversalDetector::HandleData...
OSV-2020-1187 Heap-buffer-overflow in ndpi_int_check_stun
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18737 Crash type: Heap-buffer-overflow READ 16 Crash state: ndpiintcheckstun ndpisearchstun checkndpiudpflowfunc...
OSV-2020-1153 Heap-buffer-overflow in ih264d_cavlc_4x4res_block_totalcoeff_11to16
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16514 Crash type: Heap-buffer-overflow READ 4 Crash state: ih264dcavlc4x4resblocktotalcoeff11to16 ih264dcavlcparse4x4coeffn0to7 ih264dcavlcparse8x8blockbothavailable...
OSV-2020-1154 Use-of-uninitialized-value in xmlStrlen
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15746 Crash type: Use-of-uninitialized-value Crash state: xmlStrlen xmlStrncat xmlNodeAddContentLen...
OSV-2020-1010 Stack-use-after-return in ihevcd_process_thread
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16912 Crash type: Stack-use-after-return READ 8 Crash state: ihevcdprocessthread startthread...
OSV-2020-993 Stack-buffer-overflow in write_png_comment
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16154 Crash type: Stack-buffer-overflow WRITE Crash state: writepngcomment vipsslistmap2 vipsimagemap...
OSV-2020-982 Use-of-uninitialized-value in pcpp::SSLClientHelloMessage::getSessionIDLength
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23022 Crash type: Use-of-uninitialized-value Crash state: pcpp::SSLClientHelloMessage::getSessionIDLength pcpp::SSLClientHelloMessage::SSLClientHelloMessage pcpp::SSLHandshakeMessage::createHandhakeMessage...
OSV-2020-812 Heap-buffer-overflow in ndpi_netbios_name_interpret
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21809 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpinetbiosnameinterpret ndpiintnetbiosaddconnection checkndpiudpflowfunc...
OSV-2020-709 Heap-double-free in sc_pkcs15_free_object_content
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18890 Crash type: Heap-double-free Crash state: scpkcs15freeobjectcontent scpkcs15freeobject fuzzpkcs15decode.c...
OSV-2020-701 Heap-use-after-free in read_chunks_before_idat
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16266 Crash type: Heap-use-after-free READ Crash state: readchunksbeforeidat getancillary spngdecodedimagesize...
OSV-2020-691 UNKNOWN WRITE in ZSTD_decodeLiteralsBlock
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16541 Crash type: UNKNOWN WRITE Crash state: ZSTDdecodeLiteralsBlock ZSTDdecompressBlock ZSTDdecompressDCtx...
OSV-2020-580 Heap-buffer-overflow in ots::OpenTypeSTAT::Serialize
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12840 Crash type: Heap-buffer-overflow READ 2 Crash state: ots::OpenTypeSTAT::Serialize ProcessGeneric ProcessTTF...
OSV-2020-525 UNKNOWN READ in parse_sec_attr_44
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18693 Crash type: UNKNOWN READ Crash state: parsesecattr44 setcosselectfile scselectfile...
OSV-2020-481 Heap-buffer-overflow in sctp_handle_asconf
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18070 Crash type: Heap-buffer-overflow READ 2 Crash state: sctphandleasconf sctpprocesscontrol sctpcommoninputprocessing...
OSV-2020-425 Heap-buffer-overflow in ihevcd_parse_coding_unit
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17055 Crash type: Heap-buffer-overflow READ 1 Crash state: ihevcdparsecodingunit ihevcdparsecodingquadtree ihevcdparsecodingquadtree...
OSV-2020-354 UNKNOWN READ in ot::Ip6::NetifUnicastAddress::GetNext
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13409 Crash type: UNKNOWN READ Crash state: ot::Ip6::NetifUnicastAddress::GetNext ot::Ip6::Netif::RemoveUnicastAddress ot::Mle::Mle::SetStateDetached...
OSV-2020-144 Heap-use-after-free in int arrow::BitUtil::BitReader::GetBatch<short>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20685 Crash type: Heap-use-after-free WRITE 2 Crash state: int arrow::BitUtil::BitReader::GetBatch parquet::LevelDecoder::Decode parquet::internal::TypedRecordReaderparquet::PhysicalType...
OSV-2020-141 Heap-use-after-free in pixcmapDestroy
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22110 Crash type: Heap-use-after-free READ 8 Crash state: pixcmapDestroy colorquantfuzzer.cc pixcmapDestroy...
OSV-2020-92 Heap-buffer-overflow in ndpi_parse_packet_line_info
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22169 Crash type: Heap-buffer-overflow READ 2 Crash state: ndpiparsepacketlineinfo ndpisearchmailsmtptcp checkndpitcpflowfunc...
OSV-2020-38 Heap-buffer-overflow in OGRFeatureFormatDateTimeBuffer
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23417 Crash type: Heap-buffer-overflow WRITE 2 Crash state: OGRFeatureFormatDateTimeBuffer OGRFeature::GetFieldAsString OGRMemLayer::AlterFieldDefn...
OSV-2026-1101 Security exception in com.google.re2j.Machine$Queue.<init>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=540908715 Crash type: Security exception Crash state: com.google.re2j.Machine$Queue. com.google.re2j.Machine. com.google.re2j.RE2.doExecute...
OSV-2026-344 UNKNOWN READ in void Assimp::Blender::ConvertDispatcher<float>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=488752792 Crash type: UNKNOWN READ Crash state: void Assimp::Blender::ConvertDispatcher void Assimp::Blender::Structure::ReadFieldArray void Assimp::Blender::Structure::Convert...
OSV-2026-144 Use-of-uninitialized-value in initFilter
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=478301104 Crash type: Use-of-uninitialized-value Crash state: initFilter ffswsinitsinglecontext mpswsreinit...
OSV-2026-122 Use-of-uninitialized-value in rtcm2_unpack
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=477971098 Crash type: Use-of-uninitialized-value Crash state: rtcm2unpack rtcm104v2analyze gpsdpoll...
OSV-2026-21 Use-of-uninitialized-value in processTLSBlock
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=474015854 Crash type: Use-of-uninitialized-value Crash state: processTLSBlock ndpisearchdtls ndpisearchtlswrapper...
OSV-2025-871 UNKNOWN READ in ojph::local::param_cod::~param_cod
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=456837230 Crash type: UNKNOWN READ Crash state: ojph::local::paramcod::paramcod ojph::local::paramcod::paramcod ojph::local::paramcod::paramcod...
OSV-2025-834 Heap-buffer-overflow in std::__1::pair<int, arrow::util::RleBitPackedParser::ControlFlow> arrow::util::R
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=451150486 Crash type: Heap-buffer-overflow READ 3 Crash state: std::1::pair arrow::util::R arrow::util::RleBitPackedDecoder::GetBatch auto parquet::DictByteArrayDecoderImpl::DecodeArrowDense...
OSV-2025-767 UNKNOWN READ in dcd_int_handler
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=445845231 Crash type: UNKNOWN READ Crash state: dcdinthandler fuzz.cc...
OSV-2025-615 Index-out-of-bounds in hevc_get_picture_size
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437760137 Crash type: Index-out-of-bounds Crash state: hevcgetpicturesize ParseNALBlock PacketizeParse...
OSV-2025-613 Heap-buffer-overflow in check_sync_pes
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437653047 Crash type: Heap-buffer-overflow READ Crash state: checksyncpes Demux demuxprocessstream...
OSV-2025-485 Use-of-uninitialized-value in pcpp::IDnsResource::decodeName
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=426843906 Crash type: Use-of-uninitialized-value Crash state: pcpp::IDnsResource::decodeName pcpp::IDnsResource::IDnsResource pcpp::DnsLayer::parseResources...
OSV-2025-461 Heap-buffer-overflow in xmlParsePubidLiteral
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=424229869 Crash type: Heap-buffer-overflow WRITE 1 Crash state: xmlParsePubidLiteral xmlParseExternalID xmlParseDocTypeDecl...
OSV-2025-442 Security exception in org.jsoup.parser.HtmlTreeBuilder.process
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=422516687 Crash type: Security exception Crash state: org.jsoup.parser.HtmlTreeBuilder.process org.jsoup.parser.HtmlTreeBuilderState$8.process org.jsoup.parser.TreeBuilder.currentElement...
OSV-2025-433 Null-dereference READ in _libssh2_packet_add
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=422217191 Crash type: Null-dereference READ Crash state: libssh2packetadd fullpacket libssh2transportread...
OSV-2025-373 Heap-use-after-free in aiMesh::~aiMesh
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=417905428 Crash type: Heap-use-after-free READ 8 Crash state: aiMesh::aiMesh aiScene::aiScene Assimp::BaseProcess::ExecuteOnScene...
OSV-2025-354 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=416762645 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement java.base/jdk.internal.misc.Unsafe.weakCompareAndSetInt...
OSV-2025-258 Global-buffer-overflow in parseExtraField
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408025088 Crash type: Global-buffer-overflow READ 1 Crash state: parseExtraField KZip::openArchive KArchive::open...
OSV-2025-249 Heap-use-after-free in lj_strfmt_pushvf
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=407592872 Crash type: Heap-use-after-free READ 2 Crash state: ljstrfmtpushvf luapushfstring luaLloadfilex...
OSV-2025-226 UNKNOWN READ in extract_sess_version
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=404844413 Crash type: UNKNOWN READ Crash state: extractsessversion parsesdpsession parsemixedcontent...