OSV-2021-1577 Heap-buffer-overflow in apreq_header_attribute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40985 Crash type: Heap-buffer-overflow READ 1 Crash state: apreqheaderattribute createmultipartcontext apreqparsemultipart...

OSV-2021-1576 Heap-buffer-overflow in __bpf_object__open

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40957 Crash type: Heap-buffer-overflow WRITE 8 Crash state: bpfobjectopen bpfobjectopenmem bpf-object-fuzzer.c...

OSV-2021-1575 Heap-buffer-overflow in bfd_getl16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40967 Crash type: Heap-buffer-overflow READ 1 Crash state: bfdgetl16 parsemodule bfdvmsfindnearestline...

OSV-2021-1570 Heap-buffer-overflow in bfd_putl32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40919 Crash type: Heap-buffer-overflow WRITE 1 Crash state: bfdputl32 bpfelfgenericreloc bfdperformrelocation...

OSV-2021-1568 Heap-use-after-free in MqttDecode_Props

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40904 Crash type: Heap-use-after-free READ 1 Crash state: MqttDecodeProps MqttDecodeDisconnect MqttClientDecodePacket...

OSV-2021-1565 Memcpy-param-overlap in parquet::DeltaByteArrayDecoder::GetInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40902 Crash type: Memcpy-param-overlap Crash state: parquet::DeltaByteArrayDecoder::GetInternal parquet::DeltaByteArrayDecoder::DecodeArrow parquet::internal::ByteArrayChunkedRecordReader::ReadValuesSpaced...

OSV-2021-1564 Heap-buffer-overflow in bfd_getl32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40908 Crash type: Heap-buffer-overflow READ 1 Crash state: bfdgetl32 bfdmipselfsectionfromshdr bfdsectionfromshdr...

OSV-2021-1563 Global-buffer-overflow in xstrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40915 Crash type: Global-buffer-overflow READ 1 Crash state: xstrdup scanfilteredsymbols scanallsymbols...

OSV-2021-1562 Heap-buffer-overflow in __bpf_object__open

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40868 Crash type: Heap-buffer-overflow WRITE 4 Crash state: bpfobjectopen bpfobjectopenmem bpf-object-fuzzer.c...

OSV-2021-1559 Heap-buffer-overflow in ih264d_mark_err_slice_skip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40851 Crash type: Heap-buffer-overflow WRITE 4 Crash state: ih264dmarkerrsliceskip ih264dvideodecode ih264dapifunction...

OSV-2021-1554 UNKNOWN READ in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40797 Crash type: UNKNOWN READ Crash state: helpeructracecode...

OSV-2021-1553 Segv on unknown address in bfd_getl16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40809 Crash type: Segv on unknown address Crash state: bfdgetl16 bfdmipselfrelocunshuffle bfdmipself32gprel16reloc...

OSV-2021-1549 Uncaught exception in com.google.gson.internal.bind.TypeAdapters$27.read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40830 Crash type: Uncaught exception Crash state: com.google.gson.internal.bind.TypeAdapters$27.read java.base/java.lang.StringUTF16.compress java.base/java.lang.String...

OSV-2021-1546 Heap-buffer-overflow in pn_buffer_append

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40748 Crash type: Heap-buffer-overflow READ Crash state: pnbufferappend pnidatainternnode pnidecoderdecodevalue...

OSV-2021-1540 Heap-buffer-overflow in consume_list

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40723 Crash type: Heap-buffer-overflow READ 1 Crash state: consumelist pnamqpdecodeDqEoQBIoIe pnmessagedecode...

OSV-2021-1527 UNKNOWN READ in exif_mnote_data_canon_load

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40623 Crash type: UNKNOWN READ Crash state: exifmnotedatacanonload exifmnotedataload interpretmakernote...

OSV-2021-1526 Global-buffer-overflow in fr_unix_time_from_tm

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40600 Crash type: Global-buffer-overflow READ 2 Crash state: frunixtimefromtm frunixtimefromstr frvalueboxfromsubstr...

OSV-2021-1524 Heap-buffer-overflow in Canvas5Structure::NIBDecoder::decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40619 Crash type: Heap-buffer-overflow READ 1 Crash state: Canvas5Structure::NIBDecoder::decode Canvas5Structure::decodeZone5 Canvas5Parser::decode...

OSV-2021-1521 Heap-buffer-overflow in exif_data_load_data_content

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40617 Crash type: Heap-buffer-overflow READ 4 Crash state: exifdataloaddatacontent exifdataloaddata exifloadergetdata...

OSV-2021-1518 UNKNOWN READ in bool OT::OffsetTo<OT::ClipBox, OT::IntType<unsigned int, 3u>, true>::serialize_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40540 Crash type: UNKNOWN READ Crash state: bool OT::OffsetTo, true::serializec OT::ClipList::serializecliprecords OT::ClipList::subset...

OSV-2021-1515 Heap-use-after-free in std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<std::__1::basic_

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40507 Crash type: Heap-use-after-free READ 1 Crash state: std::1::pairstd::1::treeiteratorstd::1::valuetypestd::1::basic dd::Propertiesimpl::set dd::eatpairs...

OSV-2021-1514 Container-overflow in m3d_load

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40535 Crash type: Container-overflow READ 1 Crash state: m3dload Assimp::M3DWrapper::M3DWrapper Assimp::M3DImporter::InternReadFile...

OSV-2021-1510 Heap-buffer-overflow in WriteRingBuffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40449 Crash type: Heap-buffer-overflow WRITE Crash state: WriteRingBuffer BrotliDecoderDecompressStream jxl::JxlBoxContentDecoder::Process...

OSV-2021-1509 Heap-buffer-overflow in handle_gets

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40455 Crash type: Heap-buffer-overflow READ Crash state: handlegets climbox cliscanmail...

OSV-2021-1507 Heap-buffer-overflow in handle_gets

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40452 Crash type: Heap-buffer-overflow READ 2 Crash state: handlegets uudecodeFile cliuuencode...

OSV-2021-1505 Heap-buffer-overflow in asn_build_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40429 Crash type: Heap-buffer-overflow READ Crash state: asnbuildstring snmpv3packetbuild snmpbuild...

OSV-2021-1502 Heap-buffer-overflow in asn_realloc_rbuild_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40431 Crash type: Heap-buffer-overflow READ Crash state: asnreallocrbuildstring snmpv3scopedPDUheaderreallocrbuild snmpv3packetreallocrbuild...

OSV-2021-1500 Heap-buffer-overflow in parse_microsoft_mangled_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40342 Crash type: Heap-buffer-overflow READ 1 Crash state: parsemicrosoftmangledname microsoftdemangle rbindemanglemsvc...

OSV-2021-1496 Heap-buffer-overflow in jxl::JxlBoxContentDecoder::Process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40396 Crash type: Heap-buffer-overflow WRITE 1 Crash state: jxl::JxlBoxContentDecoder::Process JxlDecoderProcessInput djxlfuzzer.cc...

OSV-2021-1495 Use-of-uninitialized-value in key_fuzz_target

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40381 Crash type: Use-of-uninitialized-value Crash state: keyfuzztarget std::1::function::funcvoid function.h...

OSV-2021-1493 Global-buffer-overflow in fb_label_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40368 Crash type: Global-buffer-overflow WRITE 1 Crash state: fblabelname readasourcefile performanassemblypass...

OSV-2021-1489 UNKNOWN READ in __bpf_object__open

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40317 Crash type: UNKNOWN READ Crash state: bpfobjectopen bpfobjectopenmem bpf-object-fuzzer.c...

OSV-2021-1488 Use-of-uninitialized-value in ExtractDestination

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40298 Crash type: Use-of-uninitialized-value Crash state: ExtractDestination ScriptPubKeyToUniv TxToUniv...

OSV-2021-1482 Heap-buffer-overflow in generic_unpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40234 Crash type: Heap-buffer-overflow READ 2 Crash state: genericunpack exrdecodingrun Imf31::checkCoreFile...

OSV-2021-1479 Heap-buffer-overflow in hufDecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40231 Crash type: Heap-buffer-overflow READ 1 Crash state: hufDecode internalhufdecompress internalexrundopiz...

OSV-2021-1478 Uncaught exception in com.alibaba.fastjson.parser.DefaultJSONParser.parseObject

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40208 Crash type: Uncaught exception Crash state: com.alibaba.fastjson.parser.DefaultJSONParser.parseObject java.base/java.util.HashMap.tableSizeFor java.base/java.util.HashMap...

OSV-2021-1477 UNKNOWN WRITE in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40161 Crash type: UNKNOWN WRITE Crash state: QtPrivate::QCommonArrayOps::growAppend QPainterPath::addPath QPathClipper::intersect...

OSV-2021-1476 Heap-buffer-overflow in processClientServerHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40160 Crash type: Heap-buffer-overflow READ 2 Crash state: processClientServerHello processTLSBlock ndpisearchtlsudp...

OSV-2021-1475 Heap-buffer-overflow in derive_spatial_luma_vector_prediction

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40107 Crash type: Heap-buffer-overflow READ 1 Crash state: derivespatiallumavectorprediction filllumamotionvectorpredictors motionvectorsandrefindices...

OSV-2021-1473 Global-buffer-overflow in fr_unix_time_from_tm

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40118 Crash type: Global-buffer-overflow READ 2 Crash state: frunixtimefromtm frunixtimefromstr frvalueboxfromstr...

OSV-2021-1472 UNKNOWN WRITE in h3NeighborRotations

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40106 Crash type: UNKNOWN WRITE Crash state: h3NeighborRotations h3fuzzer.c...

OSV-2021-1470 Heap-buffer-overflow in hufDecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40091 Crash type: Heap-buffer-overflow READ 1 Crash state: hufDecode internalhufdecompress internalexrundopiz...

OSV-2021-1463 UNKNOWN READ in helper_be_stw_mmu_armeb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40073 Crash type: UNKNOWN READ Crash state: helperbestwmmuarmeb...

OSV-2021-1458 Global-buffer-overflow in fr_base16_decode_nstd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39986 Crash type: Global-buffer-overflow READ 1 Crash state: frbase16decodenstd frvalueboxfromstr utildecodeproto...

OSV-2021-1457 Heap-buffer-overflow in generic_unpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39996 Crash type: Heap-buffer-overflow READ 4 Crash state: genericunpack exrdecodingrun Imf31::checkCoreFile...

OSV-2021-1455 Heap-buffer-overflow in mrb_funcall_with_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39940 Crash type: Heap-buffer-overflow WRITE 8 Crash state: mrbfuncallwithblock mrbfuncallargv constget...

OSV-2021-1454 Uncaught exception in org.jsoup.parser.HtmlTreeBuilder.process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39939 Crash type: Uncaught exception Crash state: org.jsoup.parser.HtmlTreeBuilder.process org.jsoup.parser.HtmlTreeBuilderState$9.process org.jsoup.parser.HtmlTreeBuilder.process...

OSV-2021-1453 Heap-buffer-overflow in mrb_funcall_with_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39931 Crash type: Heap-buffer-overflow WRITE 8 Crash state: mrbfuncallwithblock mrbfuncallid mrbequal...

OSV-2021-1452 Heap-buffer-overflow in mrb_funcall_with_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39937 Crash type: Heap-buffer-overflow WRITE 8 Crash state: mrbfuncallwithblock mrbinstancenew mrbfuncallwithblock...

OSV-2021-1451 Heap-buffer-overflow in Imf_3_1::memstream_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39936 Crash type: Heap-buffer-overflow WRITE 1 Crash state: Imf31::memstreamread dispatchread readuncompresseddirect...