OSV-2022-709 Heap-buffer-overflow in dissect_softether_host_fqdn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50105 Crash type: Heap-buffer-overflow READ 10 Crash state: dissectsoftetherhostfqdn ndpisearchsoftether checkndpidetectionfunc...

OSV-2022-342 Heap-buffer-overflow in sc_pkcs15init_delete_by_path

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46653 Crash type: Heap-buffer-overflow READ 1 Crash state: scpkcs15initdeletebypath scpkcs15initstoredata scpkcs15initstoredataobject...

OSV-2021-1610 Heap-buffer-overflow in mk_rconf_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41275 Crash type: Heap-buffer-overflow READ 1 Crash state: mkrconfread mkrconfreadglob mkrconfread...

OSV-2021-1104 Heap-buffer-overflow in ap_escape_path_segment_buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36882 Crash type: Heap-buffer-overflow WRITE 1 Crash state: apescapepathsegmentbuffer fuzzutils.c...

OSV-2021-361 Stack-buffer-overflow in add_file

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30774 Crash type: Stack-buffer-overflow WRITE Crash state: addfile strfilenamecb handleoption...

OSV-2018-216 Heap-buffer-overflow in token_stream_prepare

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9806 Crash type: Heap-buffer-overflow READ 1 Crash state: tokenstreamprepare tokenstreampeekstring tokenstreamconsume...

OSV-2020-1749 Stack-use-after-return in ucl_include_file_single

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25622 Crash type: Stack-use-after-return READ 6 Crash state: uclincludefilesingle uclincludefile uclincludecommon...

OSV-2020-1589 UNKNOWN READ in RegisterSetjmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24695 Crash type: UNKNOWN READ Crash state: RegisterSetjmp wasmtimeruntime::traphandlers::CallThreadState::with::hada2d3d104ef56de wasmtime::func::invokewasmandcatchtraps::h25a8cbd9f03c9a30...

OSV-2020-1528 Use-of-uninitialized-value in PushColormapIndex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10379 Crash type: Use-of-uninitialized-value Crash state: PushColormapIndex SyncImage WriteOnePNGImage...

OSV-2020-1470 Segv on unknown address in clang::Sema::getCurBlock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19622 Crash type: Segv on unknown address Crash state: clang::Sema::getCurBlock clang::Sema::makeTypoCorrectionConsumer clang::Sema::CorrectTypoDelayed...

OSV-2020-1462 Segv on unknown address in clang::Sema::SetCtorInitializers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19136 Crash type: Segv on unknown address Crash state: clang::Sema::SetCtorInitializers clang::Sema::DefineImplicitDefaultConstructor clang::Sema::runWithSufficientStackSpace...

OSV-2020-1446 Segv on unknown address in clang::Sema::CreateOverloadedBinOp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19567 Crash type: Segv on unknown address Crash state: clang::Sema::CreateOverloadedBinOp BuildOverloadedBinOp clang::Sema::BuildBinOp...

OSV-2020-1369 Segv on unknown address in clang::Expr::skipRValueSubobjectAdjustments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23669 Crash type: Segv on unknown address Crash state: clang::Expr::skipRValueSubobjectAdjustments visitLocalsRetainedByInitializer clang::Sema::checkInitializerLifetime...

OSV-2020-1368 Segv on unknown address in clang::LookupResult::sanity

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19683 Crash type: Segv on unknown address Crash state: clang::LookupResult::sanity clang::Sema::HandleDeclarator clang::Sema::ActOnDeclarator...

OSV-2020-1129 Heap-buffer-overflow in rt_read_handler

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12572 Crash type: Heap-buffer-overflow WRITE Crash state: rtreadhandler savreadvariablemissingvalues savreadvariablerecord...

OSV-2026-1302 Heap-use-after-free in unregister_sysORTable_by_session

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=563134244 Crash type: Heap-use-after-free READ 8 Crash state: unregistersysORTablebysession closeagentxsession handlemasteragentxpacket...

OSV-2024-1428 Use-of-uninitialized-value in next_uint16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=393742176 Crash type: Use-of-uninitialized-value Crash state: nextuint16 ntskeprocessreceive FuzzServer.c...

OSV-2023-92 UNKNOWN READ in var_Create

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56141 Crash type: UNKNOWN READ Crash state: varCreate Open genericstart...

OSV-2021-906 Heap-buffer-overflow in orbit_object_utils::ElfFileImpl<llvm::object::ELFType<

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35617 Crash type: Heap-buffer-overflow READ 4 Crash state: orbitobjectutils::ElfFileImplllvm::object::ELFType orbitobjectutils::CreateElfFile orbitobjectutils::CreateElfFileFromBuffer...

OSV-2020-2193 Heap-buffer-overflow in sctp_process_init

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27900 Crash type: Heap-buffer-overflow READ 8 Crash state: sctpprocessinit sctpprocesscontrol sctpcommoninputprocessing...

OSV-2020-1993 Heap-buffer-overflow in ojph::local::rev_fetch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26166 Crash type: Heap-buffer-overflow READ 4 Crash state: ojph::local::revfetch ojph::local::ojphdecodecodeblock grk::t1ht::T1HT::decompress...

OSV-2020-1513 Segv on unknown address in bool EvaluateComparisonBinaryOperator<IntExprEvaluator::VisitBinaryOperator

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23836 Crash type: Segv on unknown address Crash state: bool EvaluateComparisonBinaryOperator::Visit...

OSV-2020-1411 Segv on unknown address in clang::Sema::getCurLambda

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19243 Crash type: Segv on unknown address Crash state: clang::Sema::getCurLambda clang::Sema::ActOnFinishFullExpr clang::Sema::ActOnExprStmt...

OSV-2020-1346 UNKNOWN WRITE in StatsIncr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21508 Crash type: UNKNOWN WRITE Crash state: StatsIncr AppLayerHandleUdp FlowWorker...

OSV-2026-1084 UNKNOWN READ in bytes1_char_at

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=536956124 Crash type: UNKNOWN READ Crash state: bytes1charat basicmatch dobestfuzzymatch...

OSV-2022-1166 Use-of-uninitialized-value in TLSDecodeHandshakeHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53209 Crash type: Use-of-uninitialized-value Crash state: TLSDecodeHandshakeHello SSLv3ParseHandshakeType SSLDecode...

OSV-2022-564 Heap-buffer-overflow in sc_pkcs15_allocate_object_content

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48940 Crash type: Heap-buffer-overflow READ 4 Crash state: scpkcs15allocateobjectcontent scpkcs15pincacheadd scpkcs15verifypinwithsessionpin...

OSV-2021-1578 UNKNOWN READ in filter_symbols

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40970 Crash type: UNKNOWN READ Crash state: filtersymbols displayrelfile displayfile...

OSV-2026-1041 Heap-buffer-overflow in Assimp::ObjExporter::indexMap<Assimp::ObjExporter::vertexData, Assimp::ObjExport

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=531365119 Crash type: Heap-buffer-overflow WRITE 12 Crash state: Assimp::ObjExporter::indexMapAssimp::ObjExporter::vertexData, Assimp::ObjExport Assimp::ObjExporter::WriteGeometryFile Assimp::ObjExporter::ObjExporter...

OSV-2023-142 Heap-buffer-overflow in pdf14_preserve_backdrop

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56544 Crash type: Heap-buffer-overflow WRITE Crash state: pdf14preservebackdrop pdf14pushtransparencygroup pdf14begintransparencygroup...

OSV-2020-1270 Heap-buffer-overflow in SSLv3ParseHandshakeType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21478 Crash type: Heap-buffer-overflow WRITE 1 Crash state: SSLv3ParseHandshakeType SSLv3ParseHandshakeProtocol SSLv3Decode...

OSV-2020-1590 Heap-buffer-overflow in ft_smooth_overlap_spans

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24726 Crash type: Heap-buffer-overflow READ 1 Crash state: ftsmoothoverlapspans graysweep grayconvertglyph...

OSV-2026-374 Security exception in org.apache.poi.ss.formula.FormulaParser.additiveExpression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=490896964 Crash type: Security exception Crash state: org.apache.poi.ss.formula.FormulaParser.additiveExpression org.apache.poi.ss.formula.FormulaParser.concatExpression...