OSV-2021-1450 UNKNOWN READ in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39944 Crash type: UNKNOWN READ Crash state: helpeructracecode...

OSV-2021-1448 Heap-buffer-overflow in mrb_vm_exec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39947 Crash type: Heap-buffer-overflow WRITE 8 Crash state: mrbvmexec mrbvmrun mrbtoprun...

OSV-2021-1449 UNKNOWN WRITE in void QtPrivate::QPodArrayOps<QPainterPath::Element>::emplace<QPainterPath::Eleme

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39957 Crash type: UNKNOWN WRITE Crash state: void QtPrivate::QPodArrayOps::emplaceQPainterPath::Eleme QPainterPath::lineTo QOutlineMapper::clipElements...

OSV-2021-1447 UNKNOWN READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39900 Crash type: UNKNOWN READ Crash state: NULL...

OSV-2021-1445 Heap-buffer-overflow in mk_rconf_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39853 Crash type: Heap-buffer-overflow READ 1 Crash state: mkrconfread mkrconfreadglob mkrconfread...

OSV-2021-1442 Heap-use-after-free in find_es_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39842 Crash type: Heap-use-after-free READ 4 Crash state: findesheader analyzechunk probestream...

OSV-2021-1440 Heap-buffer-overflow in internal_huf_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39836 Crash type: Heap-buffer-overflow READ 1 Crash state: internalhufdecompress internalexrundopiz defaultdecompresschunk...

OSV-2021-1437 Heap-buffer-overflow in unpack_32bit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39799 Crash type: Heap-buffer-overflow WRITE 4 Crash state: unpack32bit exrdecodingrun Imf31::checkCoreFile...

OSV-2021-1430 Heap-buffer-overflow in diagnosticInfoOrder

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39741 Crash type: Heap-buffer-overflow READ 8 Crash state: diagnosticInfoOrder structureOrder UAorder...

OSV-2021-1429 Heap-buffer-overflow in unpack_16bit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39737 Crash type: Heap-buffer-overflow WRITE 2 Crash state: unpack16bit exrdecodingrun Imf31::checkCoreFile...

OSV-2021-1427 Global-buffer-overflow in fr_base16_decode_nstd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39699 Crash type: Global-buffer-overflow READ 1 Crash state: frbase16decodenstd frvalueboxfromstr frpairvaluefromstr...

OSV-2021-1425 Heap-buffer-overflow in fr_dns_label_to_value_box

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39689 Crash type: Heap-buffer-overflow READ 1 Crash state: frdnslabeltovaluebox decodevaluetrampoline frstructfromnetwork...

OSV-2021-1423 Heap-buffer-overflow in fr_struct_from_network

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39660 Crash type: Heap-buffer-overflow READ 1 Crash state: frstructfromnetwork frstructfromnetwork decoderecord...

OSV-2021-1422 Heap-buffer-overflow in fr_dns_label_uncompressed_length

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39657 Crash type: Heap-buffer-overflow READ 1 Crash state: frdnslabeluncompressedlength decodevaluetrampoline frstructfromnetwork...

OSV-2021-1420 Heap-buffer-overflow in unpack_16bit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39623 Crash type: Heap-buffer-overflow WRITE Crash state: unpack16bit exrdecodingrun Imf31::checkCoreFile...

OSV-2021-1418 Heap-buffer-overflow in spvTextEncodeOperand

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39637 Crash type: Heap-buffer-overflow READ 4 Crash state: spvTextEncodeOperand spvTextEncodeOperand spvTextEncodeOpcode...

OSV-2021-1417 Heap-buffer-overflow in openhtj2k::T1OpenHTJ2K::decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39632 Crash type: Heap-buffer-overflow WRITE 4 Crash state: openhtj2k::T1OpenHTJ2K::decompress std::1::packagedtaskfuncstd::1::bindgrk::T1DecompressScheduler::deco std::1::packagedtaskint...

OSV-2021-1415 Heap-buffer-overflow in Imf_3_1::memstream_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39616 Crash type: Heap-buffer-overflow READ 8 Crash state: Imf31::memstreamread dispatchread exrreadscanlinechunkinfo...

OSV-2021-1414 Heap-buffer-overflow in internal_huf_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39601 Crash type: Heap-buffer-overflow READ 1 Crash state: internalhufdecompress internalexrundopiz defaultdecompresschunk...

OSV-2021-1413 UNKNOWN READ in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39559 Crash type: UNKNOWN READ Crash state: helpeructracecode...

OSV-2021-1410 Heap-buffer-overflow in generic_unpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39571 Crash type: Heap-buffer-overflow WRITE 4 Crash state: genericunpack exrdecodingrun Imf31::checkCoreFile...

OSV-2021-1409 Heap-buffer-overflow in unpack_16bit_4chan_planar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39538 Crash type: Heap-buffer-overflow WRITE 2 Crash state: unpack16bit4chanplanar exrdecodingrun Imf31::checkCoreFile...

OSV-2021-1408 Heap-buffer-overflow in unpack_16bit_4chan_planar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39532 Crash type: Heap-buffer-overflow WRITE Crash state: unpack16bit4chanplanar exrdecodingrun Imf31::checkCoreFile...

OSV-2021-1406 Heap-buffer-overflow in Imf_3_1::memstream_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39542 Crash type: Heap-buffer-overflow WRITE Crash state: Imf31::memstreamread dispatchread readuncompresseddirect...

OSV-2021-1400 Heap-buffer-overflow in unpack_16bit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39472 Crash type: Heap-buffer-overflow WRITE Crash state: unpack16bit exrdecodingrun Imf31::checkCoreFile...

OSV-2021-1395 Heap-buffer-overflow in Op_YCbCr_to_RGB<unsigned char>::convert_colorspace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39373 Crash type: Heap-buffer-overflow READ Crash state: OpYCbCrtoRGB::convertcolorspace heif::ColorConversionPipeline::convertimage heif::convertcolorspace...

OSV-2021-1394 Use-after-poison in JS::Reference::put_value

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39379 Crash type: Use-after-poison READ 8 Crash state: JS::Reference::putvalue JS::AssignmentExpression::execute JS::ExpressionStatement::execute...

OSV-2021-1392 Container-overflow in std::__1::__function::__func<uWS::TemplatedApp<false>&& uWS::TemplatedApp<false>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39354 Crash type: Container-overflow READ 1 Crash state: std::1::function::func&& uWS::TemplatedApp uWS::TopicTree::publish ofats::anydetail::handlertraitsvoid, uWS::WebSocketfalse, true, test...

OSV-2021-1390 Container-overflow in std::__1::__function::__func<uWS::TemplatedApp<false>&& uWS::TemplatedApp<false>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39348 Crash type: Container-overflow READ 1 Crash state: std::1::function::func&& uWS::TemplatedApp uWS::WebSocketfalse, true, test uWS::WebSocketfalse, true, test...

OSV-2021-1389 Negative-size-param in Imf_3_1::memstream_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39329 Crash type: Negative-size-param Crash state: Imf31::memstreamread dispatchread exrreadscanlinechunkinfo...

OSV-2021-1387 Container-overflow in std::__1::__function::__func<LLVMFuzzerTestOneInput::$_0, std::__1::allocator<LL

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39335 Crash type: Container-overflow READ 1 Crash state: std::1::function::func, std:: std::1::function::funcLLVMFuzzerTestOneInput::$1, std::1::allocatorLL...

OSV-2021-1386 Container-overflow in std::__1::__function::__func<uWS::TemplatedApp<true>&& uWS::TemplatedApp<true>::

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39355 Crash type: Container-overflow READ 1 Crash state: std::1::function::func&& uWS::TemplatedApp:: uWS::TopicTree::publish uWS::TemplatedApp::publish...

OSV-2021-1385 Heap-buffer-overflow in Assimp::BaseImporter::ConvertToUTF8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39339 Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::BaseImporter::ConvertToUTF8 Assimp::BaseImporter::TextFileToBuffer Assimp::OpenGEX::OpenGEXImporter::InternReadFile...

OSV-2021-1384 UNKNOWN WRITE in rapidjson::PrettyWriter<rapidjson::GenericStringBuffer<rapidjson::UTF8<char>, ra

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39337 Crash type: UNKNOWN WRITE Crash state: rapidjson::PrettyWriter, ra bool rapidjson::GenericValue, rapidjson::MemoryPoolAllocat bool rapidjson::GenericValue, rapidjson::MemoryPoolAllocat...

OSV-2021-1381 Heap-buffer-overflow in OT::MathValueRecord::copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39225 Crash type: Heap-buffer-overflow READ 4 Crash state: OT::MathValueRecord::copy OT::MathGlyphAssembly::subset OT::MathGlyphConstruction::subset...

OSV-2021-1380 Negative-size-param in ntfs_attr_walk_special

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39317 Crash type: Negative-size-param Crash state: ntfsattrwalkspecial tskfsattrwalk ntfsprocattrseq...

OSV-2021-1378 Container-overflow in std::__1::__function::__func<LLVMFuzzerTestOneInput::$_0, std::__1::allocator<LL

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39263 Crash type: Container-overflow READ 1 Crash state: std::1::function::funcLLVMFuzzerTestOneInput::$0, std::1::allocatorLL std::1::function::funcLLVMFuzzerTestOneInput::$1, std::1::allocatorLL function.h...

OSV-2021-1373 Global-buffer-overflow in vte_write_debug

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39313 Crash type: Global-buffer-overflow READ 1 Crash state: vtewritedebug csidevattr doaction...

OSV-2021-1371 Heap-use-after-free in dispatch_print_error

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39212 Crash type: Heap-use-after-free READ 6 Crash state: dispatchprinterror internalexrparseheader exrstartread...

OSV-2021-1370 Heap-buffer-overflow in OT::MathGlyphConstruction::subset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39211 Crash type: Heap-buffer-overflow READ 2 Crash state: OT::MathGlyphConstruction::subset OT::MathVariants::subset OT::MATH::subset...

OSV-2021-1368 Stack-buffer-overflow in dispatch_print_error

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39196 Crash type: Stack-buffer-overflow READ Crash state: dispatchprinterror internalexrparseheader exrstartread...

OSV-2021-1367 Uncaught exception in org.jsoup.parser.HtmlTreeBuilderState$18.process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39164 Crash type: Uncaught exception Crash state: org.jsoup.parser.HtmlTreeBuilderState$18.process org.jsoup.parser.HtmlTreeBuilder.process org.jsoup.parser.HtmlTreeBuilderState$7.process...

OSV-2021-1361 Heap-buffer-overflow in MqttClient_DecodePacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39103 Crash type: Heap-buffer-overflow WRITE 1 Crash state: MqttClientDecodePacket MqttClientWaitType MqttClientSubscribe...

OSV-2021-1358 Heap-buffer-overflow in MqttClient_DecodePacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39094 Crash type: Heap-buffer-overflow READ 8 Crash state: MqttClientDecodePacket MqttClientWaitType MqttClientPingex...

OSV-2021-1354 Stack-buffer-underflow in InterpretPhoneme

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39042 Crash type: Stack-buffer-underflow READ 8 Crash state: InterpretPhoneme InterpretPhoneme2 CalcLengths...

OSV-2021-1353 Heap-buffer-overflow in MqttClient_DecodePacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39056 Crash type: Heap-buffer-overflow WRITE 1 Crash state: MqttClientDecodePacket MqttClientWaitType MqttClientUnsubscribe...

OSV-2021-1352 UNKNOWN READ in MqttProps_Free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39070 Crash type: UNKNOWN READ Crash state: MqttPropsFree MqttClientUnsubscribe wolfMQTTFuzzer::unsubscribe...

OSV-2021-1349 Heap-buffer-overflow in MqttClient_DecodePacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39083 Crash type: Heap-buffer-overflow WRITE 1 Crash state: MqttClientDecodePacket MqttClientWaitType MqttClientConnect...

OSV-2021-1348 Heap-buffer-overflow in MqttDecode_Disconnect

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39053 Crash type: Heap-buffer-overflow WRITE 1 Crash state: MqttDecodeDisconnect MqttClientDecodePacket MqttClientWaitType...

OSV-2021-1347 Invalid-free in generic specialization <Swift.Int> of Swift.Array.subscript.getter :

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39049 Crash type: Invalid-free Crash state: generic specialization of Swift.Array.subscript.getter : SwiftProtobuf. SwiftProtobuf.GoogleProtobufTimestamp.decodeJSON...