OSV-2021-1425 Heap-buffer-overflow in fr_dns_label_to_value_box

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39689 Crash type: Heap-buffer-overflow READ 1 Crash state: frdnslabeltovaluebox decodevaluetrampoline frstructfromnetwork...

OSV-2021-1418 Heap-buffer-overflow in spvTextEncodeOperand

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39637 Crash type: Heap-buffer-overflow READ 4 Crash state: spvTextEncodeOperand spvTextEncodeOperand spvTextEncodeOpcode...

OSV-2021-1380 Negative-size-param in ntfs_attr_walk_special

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39317 Crash type: Negative-size-param Crash state: ntfsattrwalkspecial tskfsattrwalk ntfsprocattrseq...

OSV-2021-1361 Heap-buffer-overflow in MqttClient_DecodePacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39103 Crash type: Heap-buffer-overflow WRITE 1 Crash state: MqttClientDecodePacket MqttClientWaitType MqttClientSubscribe...

OSV-2021-1135 Heap-use-after-free in prvTidyInsertedToken

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37196 Crash type: Heap-use-after-free READ 8 Crash state: prvTidyInsertedToken prvTidyGetToken prvTidyoldParseInline...

OSV-2021-1109 UNKNOWN READ in mrb_check_frozen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36930 Crash type: UNKNOWN READ Crash state: mrbcheckfrozen mrbstrmodifykeepascii mrbstrmodify...

OSV-2021-1079 Stack-use-after-return in aio_bh_dequeue

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36690 Crash type: Stack-use-after-return READ 8 Crash state: aiobhdequeue aiobhpoll aiodispatch...

OSV-2021-1027 Index-out-of-bounds in sd_read_byte

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36240 Crash type: Index-out-of-bounds Crash state: sdreadbyte sdbusreaddata sdhcireadblockfromcard...

OSV-2021-909 Heap-buffer-overflow in OT::CPALV1Tail::serialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35672 Crash type: Heap-buffer-overflow READ 2 Crash state: OT::CPALV1Tail::serialize OT::CPAL::subset bool trysubset...

OSV-2021-454 Heap-buffer-overflow in irc_parse_message_tags

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31443 Crash type: Heap-buffer-overflow READ 8 Crash state: ircparsemessagetags ircservereventtags signalemitreal...

OSV-2021-362 Heap-use-after-free in DestroyPicBuff

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30770 Crash type: Heap-use-after-free WRITE 4 Crash state: DestroyPicBuff WelsRequestMem SyncPictureResolutionExt...

OSV-2017-154 Heap-buffer-overflow in TetrahedralInterpFloat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=852 Crash type: Heap-buffer-overflow READ 4 Crash state: TetrahedralInterpFloat LUTeval16 CachedXFORM...

OSV-2018-85 Heap-buffer-overflow in put_8tap_scaled_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11378 Crash type: Heap-buffer-overflow READ 2 Crash state: put8tapscaledc put8tapsharpscaledc mc...

OSV-2017-16 Heap-buffer-overflow in file_strncmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=750 Crash type: Heap-buffer-overflow READ 1 Crash state: filestrncmp magiccheck match...

OSV-2021-69 Uncaught exception in fuzz_loader.pkg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29519 Crash type: Uncaught exception Crash state: fuzzloader.pkg fuzzloader.pkg fuzzloader.pkg...

OSV-2018-43 Heap-buffer-overflow in OT::post::accelerator_t::cmp_gids

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11263 Crash type: Heap-buffer-overflow READ Crash state: OT::post::acceleratort::cmpgids sortrcmpswap sortrsimple...

OSV-2018-42 Heap-buffer-overflow in tap_type_find

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8159 Crash type: Heap-buffer-overflow READ 12 Crash state: taptypefind gsttypefindfactorycallfunction gsttypefindhelperfordata...

OSV-2021-36 Use-of-uninitialized-value in grk::mct::decompress_irrev

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29413 Crash type: Use-of-uninitialized-value Crash state: grk::mct::decompressirrev grk::TileProcessor::mctdecompress grk::TileProcessor::decompresstilet1...

OSV-2020-2243 Heap-buffer-overflow in grk::BitIO::bytein

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28313 Crash type: Heap-buffer-overflow READ 1 Crash state: grk::BitIO::bytein grk::BitIO::read grk::BitIO::getnumpasses...

OSV-2020-2112 Heap-buffer-overflow in ccr_handle_message_from_client

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26739 Crash type: Heap-buffer-overflow READ Crash state: ccrhandlemessagefromclient crasrclientbufferfromclient rclientmessage.cc...

OSV-2020-1864 Heap-use-after-free in grk::TileProcessor::~TileProcessor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26008 Crash type: Heap-use-after-free READ 8 Crash state: grk::TileProcessor::TileProcessor grk::CodeStream::decompresstiles grk::CodeStream::dodecompress...

OSV-2020-1755 Use-of-uninitialized-value in void intra_prediction_angular<unsigned char>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25650 Crash type: Use-of-uninitialized-value Crash state: void intrapredictionangular void decodeintrapredictioninternal decodeintraprediction...

OSV-2020-1711 Use-of-uninitialized-value in void transform_idct_add<unsigned char>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25448 Crash type: Use-of-uninitialized-value Crash state: void transformidctadd transform4x4add8fallback void accelerationfunctions::transformadd...

OSV-2020-1644 Segv on unknown address in clang::Sema::PushDeclContext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25059 Crash type: Segv on unknown address Crash state: clang::Sema::PushDeclContext clang::Sema::ActOnStartDelayedMemberDeclarations clang::Parser::ParseLexedPragmas...

OSV-2020-1583 Segv on unknown address in clang::Preprocessor::LexHeaderName

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24668 Crash type: Segv on unknown address Crash state: clang::Preprocessor::LexHeaderName clang::Preprocessor::HandleIncludeDirective clang::Preprocessor::HandleDirective...

OSV-2020-1536 Segv on unknown address in GetValueFromLinkedList

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20923 Crash type: Segv on unknown address Crash state: GetValueFromLinkedList Magick::throwException Magick::Image::read...

OSV-2020-1534 Use-of-uninitialized-value in void transform_idct_add<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23918 Crash type: Use-of-uninitialized-value Crash state: void transformidctadd transform8x8add16fallback void accelerationfunctions::transformadd...

OSV-2020-1498 Segv on unknown address in llvm::llvm_unreachable_internal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21075 Crash type: Segv on unknown address Crash state: llvm::llvmunreachableinternal clang::Sema::CheckAbsoluteValueFunction clang::Sema::CheckFunctionCall...

OSV-2020-1490 Segv on unknown address in HasAccess

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19085 Crash type: Segv on unknown address Crash state: HasAccess IsAccessible CheckEffectiveAccess...

OSV-2020-1488 Segv on unknown address in llvm::llvm_unreachable_internal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20787 Crash type: Segv on unknown address Crash state: llvm::llvmunreachableinternal findDefaultInitializer checkDuplicateDefaultInit...

OSV-2020-1480 Heap-buffer-overflow in yr_object_set_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Heap-buffer-overflow READ 15 Crash state: yrobjectsetstring dexparse dexload...

OSV-2020-1481 Heap-buffer-overflow in load_encoded_method

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Heap-buffer-overflow READ 4 Crash state: loadencodedmethod dexparse dexload...

OSV-2020-1473 Segv on unknown address in LValue::addUnsizedArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19704 Crash type: Segv on unknown address Crash state: LValue::addUnsizedArray PointerExprEvaluator::VisitCastExpr clang::StmtVisitorBase::Visit...

OSV-2020-1469 Segv on unknown address in clang::Sema::ActOnTag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19182 Crash type: Segv on unknown address Crash state: clang::Sema::ActOnTag clang::Parser::ParseEnumSpecifier clang::Parser::ParseDeclarationSpecifiers...

OSV-2020-1461 Heap-buffer-overflow in yr_object_set_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Heap-buffer-overflow READ 6 Crash state: yrobjectsetstring dexparse dexload...

OSV-2020-1443 Segv on unknown address in clang::Sema::ActOnCapScopeReturnStmt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20420 Crash type: Segv on unknown address Crash state: clang::Sema::ActOnCapScopeReturnStmt clang::Sema::BuildReturnStmt clang::Sema::ActOnReturnStmt...

OSV-2020-1422 Segv on unknown address in llvm::APInt::trunc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21207 Crash type: Segv on unknown address Crash state: llvm::APInt::trunc AnalyzeBitFieldAssignment clang::InitializationSequence::Perform...

OSV-2020-1404 Use-of-uninitialized-value in LosslessReduceDepthOK

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22581 Crash type: Use-of-uninitialized-value Crash state: LosslessReduceDepthOK ReadOneMNGImage ReadMNGImage...

OSV-2020-1396 Segv on unknown address in llvm::llvm_unreachable_internal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23571 Crash type: Segv on unknown address Crash state: llvm::llvmunreachableinternal clang::Expr::HasSideEffects clang::Expr::HasSideEffects...

OSV-2020-1385 Segv on unknown address in clang::Parser::TryAnnotateCXXScopeToken

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21077 Crash type: Segv on unknown address Crash state: clang::Parser::TryAnnotateCXXScopeToken clang::Parser::TryParsePtrOperatorSeq clang::Parser::TryParseDeclarator...

OSV-2020-1383 Container-overflow in grk::T2Decode::read_packet_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24427 Crash type: Container-overflow READ 8 Crash state: grk::T2Decode::readpacketheader grk::T2Decode::decodepacket grk::T2Decode::decodepackets...

OSV-2020-1308 Heap-use-after-free in Interpreter::evaluate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15846 Crash type: Heap-use-after-free READ 4 Crash state: Interpreter::evaluate Interpreter::manifestJson Interpreter::evaluate...

OSV-2020-1230 Heap-buffer-overflow in to_u32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16734 Crash type: Heap-buffer-overflow READ 1 Crash state: tou32 fuzzgettlvcomn fuzzaddmimepart...

OSV-2020-1206 Use-of-uninitialized-value in Sass::Prelexer::quoted_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15890 Crash type: Use-of-uninitialized-value Crash state: Sass::Prelexer::quotedstring char const Sass::Prelexer::nongreedy& Sass::Parser::lookaheadforvalue...

OSV-2020-1117 Heap-buffer-overflow in arrow::internal::CountSetBits

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20575 Crash type: Heap-buffer-overflow READ 8 Crash state: arrow::internal::CountSetBits arrow::Array::nullcount arrow::internal::ValidateArray...

OSV-2020-1009 Heap-buffer-overflow in mu::ParserBase::ParseCmdCodeBulk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23123 Crash type: Heap-buffer-overflow READ 8 Crash state: mu::ParserBase::ParseCmdCodeBulk mu::ParserBase::ParseString setevalfuzzer.cc...

OSV-2020-931 Use-of-uninitialized-value in Sass::Prelexer::quoted_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15890 Crash type: Use-of-uninitialized-value Crash state: Sass::Prelexer::quotedstring char const Sass::Prelexer::sequence& Sass::Prelexer::restringuriopen...

OSV-2020-913 Heap-buffer-overflow in sas_read4

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12576 Crash type: Heap-buffer-overflow READ 4 Crash state: sasread4 sas7bdatparsepagepass1 sas7bdatparsemetapagespass1...

OSV-2020-898 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23866 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

OSV-2020-895 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24030 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...