OSV-2021-1553 Segv on unknown address in bfd_getl16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40809 Crash type: Segv on unknown address Crash state: bfdgetl16 bfdmipselfrelocunshuffle bfdmipself32gprel16reloc...

OSV-2021-1195 Heap-buffer-overflow in trim_leading

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38048 Crash type: Heap-buffer-overflow READ 1 Crash state: trimleading parsecontacts contactparser...

OSV-2021-928 UNKNOWN WRITE in g_array_append_vals

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35890 Crash type: UNKNOWN WRITE Crash state: garrayappendvals gbytearrayappend fubytearrayappendbytes...

OSV-2021-778 UNKNOWN READ in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34457 Crash type: UNKNOWN READ Crash state: helpeructracecode...

OSV-2020-1739 Index-out-of-bounds in tsk_img_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25580 Crash type: Index-out-of-bounds Crash state: tskimgread tskvsreadblock macloadtable...

OSV-2020-567 Heap-buffer-overflow in _iri_unescape_inline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14449 Crash type: Heap-buffer-overflow READ 1 Crash state: iriunescapeinline wgetiriparse init...

OSV-2020-442 Heap-buffer-overflow in CRYPTO_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17715 Crash type: Heap-buffer-overflow READ 14 Crash state: CRYPTOstrdup X509V3addvalue i2vGENERALNAME...

OSV-2020-102 Heap-use-after-free in vips_buf_vappendf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20843 Crash type: Heap-use-after-free READ 2 Crash state: vipsbufvappendf vipsverror vipserror...

OSV-2020-26 UNKNOWN READ in parquet::DictDecoderImpl<parquet::PhysicalType<

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21567 Crash type: UNKNOWN READ Crash state: parquet::DictDecoderImplparquet::PhysicalType parquet::ColumnReaderImplBaseparquet::PhysicalType parquet::ColumnReaderImplBaseparquet::PhysicalType...

OSV-2026-1070 UNKNOWN READ in bytes1_char_at

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=538179114 Crash type: UNKNOWN READ Crash state: bytes1charat unicodewordleft unicodeatboundary...

OSV-2026-1043 Index-out-of-bounds in impd_drc_gen_instructions_derived_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=531676895 Crash type: Index-out-of-bounds Crash state: impddrcgeninstructionsderiveddata impdparsedrcconfig impddrcinit...

OSV-2026-1018 Heap-buffer-overflow in decode_reason_code_and_cc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=530730549 Crash type: Heap-buffer-overflow READ 1 Crash state: decodereasoncodeandcc decodensmprovidetokenresp decodensmprovidetokenrespfuzzer.cc...

OSV-2026-1016 Heap-buffer-overflow in decode_query_device_identification_resp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=530569583 Crash type: Heap-buffer-overflow READ 1 Crash state: decodequerydeviceidentificationresp decodequerydeviceidentificationrespfuzzer.cc...

OSV-2026-112 Use-of-uninitialized-value in PrintSERPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=477681214 Crash type: Use-of-uninitialized-value Crash state: PrintSERPacket garminserparse gpsdpoll...

OSV-2025-564 Heap-buffer-overflow in ndpi_match_host_subprotocol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=432880859 Crash type: Heap-buffer-overflow READ 2 Crash state: ndpimatchhostsubprotocol checkcontenttypeandchangeprotocol processrequest...

OSV-2025-271 Use-of-uninitialized-value in luaS_new

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=409585559 Crash type: Use-of-uninitialized-value Crash state: luaSnew auxsetstr luaLrequiref...

OSV-2024-764 Use-of-uninitialized-value in _cupsStrAlloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69562 Crash type: Use-of-uninitialized-value Crash state: cupsStrAlloc ippReadIO fuzzipp.c...

OSV-2024-523 Stack-buffer-overflow in findstrings

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69357 Crash type: Stack-buffer-overflow WRITE 1 Crash state: findstrings searchstringsupdate cmdmeta...

OSV-2024-391 Security exception in org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68324 Crash type: Security exception Crash state: org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII...

OSV-2023-1121 Security exception in org.apache.poi.util.LZWDecompresser.decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63925 Crash type: Security exception Crash state: org.apache.poi.util.LZWDecompresser.decompress org.apache.poi.util.LZWDecompresser.decompress org.apache.poi.hdgf.streams.CompressedStreamStore.decompress...

OSV-2023-1002 Heap-buffer-overflow in iasecc_parse_get_tlv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63163 Crash type: Heap-buffer-overflow READ Crash state: iaseccparsegettlv iaseccparsedocp iaseccsdoparsedata...

OSV-2023-839 Global-buffer-overflow in iusace_quantize_lines

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62261 Crash type: Global-buffer-overflow READ 4 Crash state: iusacequantizelines iusacequantizespec iusacefdencode...

OSV-2023-604 Segv on unknown address in ucl_object_free_internal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60789 Crash type: Segv on unknown address Crash state: uclobjectfreeinternal uclparserfree ucladdstringfuzzer.c...

OSV-2023-472 Heap-buffer-overflow in TestFuzzCommonAssistanceParseFileBuffer.c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59682 Crash type: Heap-buffer-overflow WRITE Crash state: TestFuzzCommonAssistanceParseFileBuffer.c...

OSV-2023-286 Heap-buffer-overflow in _dwarf_memcpy_noswap_bytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57766 Crash type: Heap-buffer-overflow READ 4 Crash state: dwarfmemcpynoswapbytes dwarfextractstringoffsetviastroffsets dwarfformstring...

OSV-2023-86 UNKNOWN READ in isvce_cabac_flush

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56137 Crash type: UNKNOWN READ Crash state: isvcecabacflush isvcecabacencodeterminate isvceentropy...

OSV-2022-1086 UNKNOWN READ in cli_ole2_extract

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52639 Crash type: UNKNOWN READ Crash state: cliole2extract cliscanole2 climagicscan...

OSV-2022-914 Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51492 Crash type: Security exception Crash state: com.github.javaparser.ast.validator.TreeVisitorValidator.accept com.github.javaparser.metamodel.BaseNodeMetaModel.getDeclaredPropertyMetaModels...

OSV-2022-708 UNKNOWN READ in kh_resize_ucl_hash_node

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50120 Crash type: UNKNOWN READ Crash state: khresizeuclhashnode khputuclhashnode uclhashinsert...

OSV-2022-496 Heap-buffer-overflow in pdfi_dict_get_no_store_R_inner

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48167 Crash type: Heap-buffer-overflow READ Crash state: pdfidictgetnostoreRinner pdfidictgetnostoreRkey pdfifindresource...

OSV-2022-478 Segv on unknown address

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48005 Crash type: Segv on unknown address Crash state: NULL...

OSV-2022-406 Heap-buffer-overflow in ucl_object_dtor_unref_single

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47339 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectdtorunrefsingle uclobjectdtorunref uclhashdestroy...

OSV-2022-381 Heap-buffer-overflow in lwan_h2_huffman_decode_for_fuzzing

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46990 Crash type: Heap-buffer-overflow READ 8 Crash state: lwanh2huffmandecodeforfuzzing h2huffmanfuzzer.cc...

OSV-2022-378 UNKNOWN READ in fp_cmp_mag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47009 Crash type: UNKNOWN READ Crash state: fpcmpmag crtmgrtrustlistlookup crtmgradd...

OSV-2022-348 Heap-buffer-overflow in doemit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46692 Crash type: Heap-buffer-overflow WRITE 8 Crash state: doemit doinsert pere...

OSV-2022-261 Segv on unknown address in flb_ra_create

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45659 Crash type: Segv on unknown address Crash state: flbracreate recordacfuzzer.c...

OSV-2022-53 Heap-buffer-overflow in mem_true24_fill_rectangle

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43688 Crash type: Heap-buffer-overflow WRITE 4 Crash state: memtrue24fillrectangle gxdcpurefillrectangle gxdefaultfillpage...

OSV-2021-1691 UNKNOWN READ in kh_resize_ucl_hash_node

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42323 Crash type: UNKNOWN READ Crash state: khresizeuclhashnode khputuclhashnode uclhashinsert...

OSV-2021-1563 Global-buffer-overflow in xstrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40915 Crash type: Global-buffer-overflow READ 1 Crash state: xstrdup scanfilteredsymbols scanallsymbols...

OSV-2021-1500 Heap-buffer-overflow in parse_microsoft_mangled_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40342 Crash type: Heap-buffer-overflow READ 1 Crash state: parsemicrosoftmangledname microsoftdemangle rbindemanglemsvc...

OSV-2021-1495 Use-of-uninitialized-value in key_fuzz_target

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40381 Crash type: Use-of-uninitialized-value Crash state: keyfuzztarget std::1::function::funcvoid function.h...

OSV-2021-1224 Heap-buffer-overflow in srtp_stream_init_keys

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38359 Crash type: Heap-buffer-overflow READ Crash state: srtpstreaminitkeys srtpstreaminit srtpaddstream...

OSV-2021-1184 UNKNOWN READ in ucl_array_append

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37885 Crash type: UNKNOWN READ Crash state: uclarrayappend uclobjectcopyinternal uclobjectcopy...

OSV-2021-671 Heap-buffer-overflow in av1_cdef_init_fb_row_mt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33511 Crash type: Heap-buffer-overflow READ 8 Crash state: av1cdefinitfbrowmt av1cdeffbrow cdefsbrowworkerhook...

OSV-2021-572 Global-buffer-overflow in mode_sense_page

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32538 Crash type: Global-buffer-overflow READ 4 Crash state: modesensepage scsidiskcheckmodeselect modeselectpages...

OSV-2021-493 Heap-buffer-overflow in encode_3dsolid

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31657 Crash type: Heap-buffer-overflow READ 4 Crash state: encode3dsolid dwgencodeREGIONprivate dwgencodeREGION...

OSV-2021-480 UNKNOWN READ in std::__Fuzzer::basic_filebuf<char, std::__Fuzzer::char_traits<char> >::setbuf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31578 Crash type: UNKNOWN READ Crash state: std::Fuzzer::basicfilebuf ::setbuf std::Fuzzer::basicfilebuf ::basicfil...

OSV-2021-419 Heap-buffer-overflow in input_osc_parse_colour

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31106 Crash type: Heap-buffer-overflow READ 1 Crash state: inputoscparsecolour inputosc11 inputexitosc...

OSV-2017-102 Use-of-uninitialized-value in match

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1065 Crash type: Use-of-uninitialized-value Crash state: match filesoftmagic mget...

OSV-2020-2299 Heap-buffer-overflow in ato16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29103 Crash type: Heap-buffer-overflow READ 1 Crash state: ato16 TLSXCSRParse TLSXParse...