OSV-2022-207 Uncaught exception in com.github.javaparser.GeneratedJavaParser.Expression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45131 Crash type: Uncaught exception Crash state: com.github.javaparser.GeneratedJavaParser.Expression java.base/java.nio.CharBuffer.wrap java.base/sun.nio.cs.StreamDecoder.implRead...

OSV-2022-197 Heap-buffer-overflow in doemit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44978 Crash type: Heap-buffer-overflow WRITE 8 Crash state: doemit doinsert pere...

OSV-2022-96 Heap-buffer-overflow in sequence_compression_api.c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44122 Crash type: Heap-buffer-overflow WRITE 16 Crash state: sequencecompressionapi.c...

OSV-2022-80 Null-dereference READ in gstate_clone_core

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43989 Crash type: Null-dereference READ Crash state: gstateclonecore gsgsave gsoutputpage...

OSV-2021-1570 Heap-buffer-overflow in bfd_putl32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40919 Crash type: Heap-buffer-overflow WRITE 1 Crash state: bfdputl32 bpfelfgenericreloc bfdperformrelocation...

OSV-2021-1553 Segv on unknown address in bfd_getl16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40809 Crash type: Segv on unknown address Crash state: bfdgetl16 bfdmipselfrelocunshuffle bfdmipself32gprel16reloc...

OSV-2021-1524 Heap-buffer-overflow in Canvas5Structure::NIBDecoder::decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40619 Crash type: Heap-buffer-overflow READ 1 Crash state: Canvas5Structure::NIBDecoder::decode Canvas5Structure::decodeZone5 Canvas5Parser::decode...

OSV-2021-1234 Heap-buffer-overflow in ndr_push_array_uint8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38480 Crash type: Heap-buffer-overflow READ 2 Crash state: ndrpusharrayuint8 ndrpushnbtrdatadata ndrpushnbtrdata...

OSV-2021-1195 Heap-buffer-overflow in trim_leading

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38048 Crash type: Heap-buffer-overflow READ 1 Crash state: trimleading parsecontacts contactparser...

OSV-2021-1145 Use-after-poison in JS::Reference::put_value

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37312 Crash type: Use-after-poison READ 8 Crash state: JS::Reference::putvalue JS::AssignmentExpression::execute JS::ExpressionStatement::execute...

OSV-2021-1078 Heap-buffer-overflow in prvTidygrowStack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36694 Crash type: Heap-buffer-overflow WRITE Crash state: prvTidygrowStack prvTidypush CleanSpaces...

OSV-2021-1048 Stack-buffer-overflow in INDEX_ORDERLY_RAM_Marshal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36476 Crash type: Stack-buffer-overflow READ 4 Crash state: INDEXORDERLYRAMMarshal PERSISTENTALLMarshal TPM2PersistentAllStore...

OSV-2021-962 Heap-use-after-free in Segment::write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36050 Crash type: Heap-use-after-free READ 1 Crash state: Segment::write Doublewrite::writepages Doublewrite::flushtodisk...

OSV-2021-928 UNKNOWN WRITE in g_array_append_vals

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35890 Crash type: UNKNOWN WRITE Crash state: garrayappendvals gbytearrayappend fubytearrayappendbytes...

OSV-2021-901 Stack-use-after-return in __readlink

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35565 Crash type: Stack-use-after-return WRITE 8 Crash state: readlink v9fscoreadlink v9fsreadlink...

OSV-2021-791 UNKNOWN READ in std::__1::__tree<std::__1::__value_type<Json::Value::CZString, Json::Value>, std

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34531 Crash type: UNKNOWN READ Crash state: std::1::tree, std std::1::mapJson::Value::CZString, Json::Value, std::1::lessJson::Value::CZ Json::Value::begin...

OSV-2021-778 UNKNOWN READ in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34457 Crash type: UNKNOWN READ Crash state: helpeructracecode...

OSV-2021-696 UNKNOWN READ in ntlm_decode_type2_target

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33720 Crash type: UNKNOWN READ Crash state: ntlmdecodetype2target Curlauthdecodentlmtype2message Curlsaslcontinue...

OSV-2021-675 Segv on unknown address in lxc_conf_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33551 Crash type: Segv on unknown address Crash state: lxcconffree lxccontainerfree lxccontainerput...

OSV-2021-618 Heap-buffer-overflow in OT::AnchorFormat1* hb_serialize_context_t::embed<OT::AnchorFormat1>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33031 Crash type: Heap-buffer-overflow READ 6 Crash state: OT::AnchorFormat1 hbserializecontextt::embed OT::AnchorFormat1::copy OT::Anchor::subset...

OSV-2021-284 UNKNOWN READ in _fini

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30296 Crash type: UNKNOWN READ Crash state: fini...

OSV-2021-270 Heap-use-after-free in cil_destroy_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30234 Crash type: Heap-use-after-free READ 4 Crash state: cildestroyblock cildestroydata ciltreenodedestroy...

OSV-2021-38 Heap-buffer-overflow in my_casedn_str_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29433 Crash type: Heap-buffer-overflow READ 2 Crash state: mycasednstrutf8 LEXUSER::init MYSQLparse...

OSV-2020-2095 Heap-buffer-overflow in grk::Subband::Subband

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26589 Crash type: Heap-buffer-overflow READ 1 Crash state: grk::Subband::Subband grk::TileComponent::subbandIntersectsAOI grk::T2Decompress::decompresspackets...

OSV-2020-2090 Heap-buffer-overflow in grk::Subband::Subband

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26500 Crash type: Heap-buffer-overflow READ 1 Crash state: grk::Subband::Subband grk::TileComponent::subbandIntersectsAOI grk::T2Decompress::decompresspackets...

OSV-2020-2011 Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26215 Crash type: Null-dereference READ Crash state: NULL...

OSV-2020-1944 Use-of-uninitialized-value in RenderMVGContent

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26073 Crash type: Use-of-uninitialized-value Crash state: RenderMVGContent DrawCompositeMask RenderMVGContent...

OSV-2020-1739 Index-out-of-bounds in tsk_img_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25580 Crash type: Index-out-of-bounds Crash state: tskimgread tskvsreadblock macloadtable...

OSV-2020-1645 Use-of-uninitialized-value in std::__1::char_traits<char>::length

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25076 Crash type: Use-of-uninitialized-value Crash state: std::1::chartraits::length std::1::basicstring, std::1::allocatorch Magick::formatExceptionMessage...

OSV-2020-1572 UNKNOWN WRITE in sarrayAddString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24617 Crash type: UNKNOWN WRITE Crash state: sarrayAddString gplotAddPlot numaQuantizeCrossingsByWidth...

OSV-2020-1494 Segv on unknown address in FindDeclaringClass

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20893 Crash type: Segv on unknown address Crash state: FindDeclaringClass diagnoseBadDirectAccess CheckEffectiveAccess...

OSV-2020-1479 Segv on unknown address in clang::Preprocessor::AnnotatePreviousCachedTokens

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19064 Crash type: Segv on unknown address Crash state: clang::Preprocessor::AnnotatePreviousCachedTokens clang::Parser::TryAnnotateTypeOrScopeTokenAfterScopeSpec clang::Parser::TryAnnotateTypeOrScopeToken...

OSV-2020-1456 Segv on unknown address in clang::SourceManager::getFileIDLoaded

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19205 Crash type: Segv on unknown address Crash state: clang::SourceManager::getFileIDLoaded clang::SourceManager::isAtEndOfImmediateMacroExpansion clang::Lexer::isAtEndOfMacroExpansion...

OSV-2020-1444 Heap-buffer-overflow in void mc_chroma<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22678 Crash type: Heap-buffer-overflow READ 2 Crash state: void mcchroma generateinterpredictionsamples decodepredictionunit...

OSV-2020-1428 Heap-buffer-overflow in yr_object_set_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Heap-buffer-overflow READ 10 Crash state: yrobjectsetstring dexparse dexload...

OSV-2020-1413 Segv on unknown address in clang::Decl::AccessDeclContextSanity

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19071 Crash type: Segv on unknown address Crash state: clang::Decl::AccessDeclContextSanity clang::Sema::SetMemberAccessSpecifier clang::Sema::ActOnTag...

OSV-2020-1416 Segv on unknown address in clang::Decl::AccessDeclContextSanity

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19117 Crash type: Segv on unknown address Crash state: clang::Decl::AccessDeclContextSanity LookupDirect clang::Sema::LookupQualifiedName...

OSV-2020-1406 Use-of-uninitialized-value in LibRaw::parse_fuji_compressed_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21671 Crash type: Use-of-uninitialized-value Crash state: LibRaw::parsefujicompressedheader LibRaw::opendatastream LibRaw::openfile...

OSV-2020-1394 Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23605 Crash type: Index-out-of-bounds Crash state: LibRaw::ahdinterpolaterandbinrgbandconverttocielab LibRaw::ahdinterpolaterandbandconverttocielab LibRaw::ahdinterpolate...

OSV-2020-1384 Segv on unknown address in llvm::llvm_unreachable_internal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19652 Crash type: Segv on unknown address Crash state: llvm::llvmunreachableinternal clang::operator clang::Sema::SetMemberAccessSpecifier...

OSV-2020-1367 Use-of-uninitialized-value in void intra_prediction_angular<unsigned char>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23615 Crash type: Use-of-uninitialized-value Crash state: void intrapredictionangular void decodeintrapredictioninternal decodeintraprediction...

OSV-2020-1273 Use-of-uninitialized-value in psscan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21302 Crash type: Use-of-uninitialized-value Crash state: psscan documentload spectrereadfuzzer.c...

OSV-2020-998 Heap-buffer-overflow in hts_md5_update

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20694 Crash type: Heap-buffer-overflow READ Crash state: htsmd5update cramdecodeslice cramnextslice...

OSV-2020-1003 Heap-buffer-overflow in Sass::Prelexer::quoted_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15890 Crash type: Heap-buffer-overflow READ 1 Crash state: Sass::Prelexer::quotedstring char const Sass::Prelexer::sequence& char const Sass::Parser::lex&...

OSV-2020-909 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23960 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

OSV-2020-757 Heap-buffer-overflow in cras_channel_remix_conv_create

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23612 Crash type: Heap-buffer-overflow READ 4 Crash state: craschannelremixconvcreate audiothreadconfigglobalremix ccrhandlemessagefromclient...

OSV-2020-448 Heap-use-after-free in read_chunks_before_idat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16051 Crash type: Heap-use-after-free READ 2 Crash state: readchunksbeforeidat getancillary spngdecodedimagesize...

OSV-2020-442 Heap-buffer-overflow in CRYPTO_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17715 Crash type: Heap-buffer-overflow READ 14 Crash state: CRYPTOstrdup X509V3addvalue i2vGENERALNAME...

OSV-2020-102 Heap-use-after-free in vips_buf_vappendf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20843 Crash type: Heap-use-after-free READ 2 Crash state: vipsbufvappendf vipsverror vipserror...

OSV-2020-26 UNKNOWN READ in parquet::DictDecoderImpl<parquet::PhysicalType<

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21567 Crash type: UNKNOWN READ Crash state: parquet::DictDecoderImplparquet::PhysicalType parquet::ColumnReaderImplBaseparquet::PhysicalType parquet::ColumnReaderImplBaseparquet::PhysicalType...