OSV-2021-1346 UNKNOWN READ in state_VLC_dec::load_bytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39046 Crash type: UNKNOWN READ Crash state: stateVLCdec::loadbytes stateVLCdec::stateVLCdec htj2kdecode...

OSV-2021-1344 Heap-buffer-overflow in openhtj2k::T1OpenHTJ2K::decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39021 Crash type: Heap-buffer-overflow WRITE 4 Crash state: openhtj2k::T1OpenHTJ2K::decompress std::1::packagedtaskfuncstd::1::bindgrk::T1DecompressScheduler::deco std::1::packagedtaskint...

OSV-2021-1343 Heap-buffer-overflow in get_next_owned_entity

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38994 Crash type: Heap-buffer-overflow READ 8 Crash state: getnextownedentity dwgwritedxfb llvmfuzz.c...

OSV-2021-1340 Heap-buffer-overflow in mrb_vm_exec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38989 Crash type: Heap-buffer-overflow READ 1 Crash state: mrbvmexec mrbvmrun mrbtoprun...

OSV-2021-1338 Uncaught exception in org.jsoup.parser.HtmlTreeBuilder.process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38982 Crash type: Uncaught exception Crash state: org.jsoup.parser.HtmlTreeBuilder.process org.jsoup.parser.HtmlTreeBuilderState$18.process org.jsoup.parser.HtmlTreeBuilder.process...

OSV-2021-1333 Heap-buffer-overflow in pe_get_section_full_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38952 Crash type: Heap-buffer-overflow READ 1 Crash state: pegetsectionfullname peload yrmodulesload...

OSV-2021-1332 Invalid-free in swift_unexpectedError

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38951 Crash type: Invalid-free Crash state: swiftunexpectedError FuzzJSON.FuzzJSON...

OSV-2021-1330 Heap-buffer-overflow in parse_content_length

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38909 Crash type: Heap-buffer-overflow READ 1 Crash state: parsecontentlength gethdrfield parseheaders...

OSV-2021-1326 Heap-buffer-overflow in my_ismbchar_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38923 Crash type: Heap-buffer-overflow READ 2 Crash state: myismbcharutf8 checkcolumnname getvariable...

OSV-2021-1322 Heap-buffer-overflow in cdf_read_property_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38898 Crash type: Heap-buffer-overflow READ Crash state: cdfreadpropertyinfo cdfunpacksummaryinfo cdfchecksummaryinfo...

OSV-2021-1319 Heap-buffer-overflow in geos::operation::valid::PolygonNode::isInteriorSegment

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38922 Crash type: Heap-buffer-overflow READ 8 Crash state: geos::operation::valid::PolygonNode::isInteriorSegment geos::operation::valid::PolygonTopologyAnalyzer::isSegmentInRing...

OSV-2021-1317 Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38824 Crash type: Use-of-uninitialized-value Crash state: std::1::basicostream & std::1::putcha ostream std::1::basicostream & std::1::putcha...

OSV-2021-1316 Stack-buffer-overflow in Assimp::ZipArchiveIOSystem::Implement::MapArchive

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38870 Crash type: Stack-buffer-overflow READ Crash state: Assimp::ZipArchiveIOSystem::Implement::MapArchive Assimp::ZipArchiveIOSystem::getFileList Assimp::D3MF::D3MFOpcPackage::D3MFOpcPackage...

OSV-2021-1314 Use-of-uninitialized-value in LoadBinarySchema

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38817 Crash type: Use-of-uninitialized-value Crash state: LoadBinarySchema dotest flatbuffersmonsterfuzzer.cc...

OSV-2021-1312 Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38808 Crash type: Use-of-uninitialized-value Crash state: std::1::basicostream & std::1::putcha printjson fuzzdump.cpp...

OSV-2021-1311 Null-dereference READ in unzOpenCurrentFile3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38873 Crash type: Null-dereference READ Crash state: unzOpenCurrentFile3 unzOpenCurrentFile Assimp::ZipFileInfo::Extract...

OSV-2021-1310 Heap-use-after-free in hb_resolve_overflows

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38878 Crash type: Heap-use-after-free READ 4 Crash state: hbresolveoverflows repack hbsubsetorfail...

OSV-2021-1309 Heap-buffer-overflow in ext2fs_dinode_copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38872 Crash type: Heap-buffer-overflow READ Crash state: ext2fsdinodecopy ext2fsinodewalk tskfsmetawalk...

OSV-2021-1305 Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38831 Crash type: Use-of-uninitialized-value Crash state: std::1::basicostream & std::1::putcha S2LatLng::ToPoint s2textformat::ParsePoints...

OSV-2021-1301 Use-of-uninitialized-value in std::__1::__hash_iterator<std::__1::__hash_node<std::__1::__hash_value_type<std:

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38823 Crash type: Use-of-uninitialized-value Crash state: std::1::hashiteratorstd::1::hashnodestd::1::hashvaluetypestd: opencensus::tags::TagKeyRegistry::Register opencensus::tags::TagKey::Register...

OSV-2021-1300 UNKNOWN READ in get_body

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38750 Crash type: UNKNOWN READ Crash state: getbody parsesdp fuzzparsemsg.c...

OSV-2021-1287 Use-of-uninitialized-value in piex::image_type_recognition::ContainsNikonSignatures

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38799 Crash type: Use-of-uninitialized-value Crash state: piex::imagetyperecognition::ContainsNikonSignatures piex::imagetyperecognition::NefTypeChecker::IsMyType piex::imagetyperecognition::RecognizeRawImageTypeLite...

OSV-2021-1275 Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38785 Crash type: Use-of-uninitialized-value Crash state: std::1::basicostream & std::1::putcha S2LogMessage::S2LogMessage S2ContainsVertexQuery::ContainsSign...

OSV-2021-1269 Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38777 Crash type: Use-of-uninitialized-value Crash state: std::1::basicostream & std::1::putcha S2LaxPolylineShape::Init S2LaxPolylineShape::S2LaxPolylineShape...

OSV-2021-1266 UNKNOWN WRITE in void AK::BumpAllocator<true, 2097152ul>::for_each_chunk<AK::UniformBumpAllocator

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38701 Crash type: UNKNOWN WRITE Crash state: void AK::BumpAllocator::foreachchunk::BumpAllocatedLinkedList regex::Matcher::execute...

OSV-2021-1262 Heap-buffer-overflow in H5O__chunk_deserialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38686 Crash type: Heap-buffer-overflow READ 1 Crash state: H5Ochunkdeserialize H5Ocachechkdeserialize H5Cprotect...

OSV-2021-1261 UNKNOWN READ in kh_get_ucl_hash_node

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38660 Crash type: UNKNOWN READ Crash state: khgetuclhashnode uclhashsearch uclinherithandler...

OSV-2021-1258 Bad-cast to SplashPattern from invalid vptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38669 Crash type: Bad-cast Crash state: Bad-cast to SplashPattern from invalid vptr SplashState::SplashState Splash::restoreState...

OSV-2021-1257 Stack-buffer-overflow in GRIBDataset::Open

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38610 Crash type: Stack-buffer-overflow READ 1 Crash state: GRIBDataset::Open GDALOpenEx GDALOpen...

OSV-2021-1250 Segv on unknown address in ft_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38635 Crash type: Segv on unknown address Crash state: ftfree ftmemfree cffcmapunicodedone...

OSV-2021-1249 Heap-buffer-overflow in int flatbuffers::ReadScalar<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38578 Crash type: Heap-buffer-overflow READ 4 Crash state: int flatbuffers::ReadScalar flatbuffers::Table::GetVTable flatbuffers::Table::GetOptionalFieldOffset...

OSV-2021-1246 Heap-buffer-overflow in FSE_writeNCount_generic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38553 Crash type: Heap-buffer-overflow WRITE 1 Crash state: FSEwriteNCountgeneric FSEwriteNCount ZSTDbuildCTable...

OSV-2021-1245 Heap-buffer-overflow in ucl_object_dtor_unref_single

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38550 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectdtorunrefsingle uclobjectdtorunref uclhashdestroy...

OSV-2021-1241 Heap-buffer-overflow in wabt::string_view::compare

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38404 Crash type: Heap-buffer-overflow READ 6 Crash state: wabt::stringview::compare wabt::ReadBinary wabt::ReadBinaryIr...

OSV-2021-1239 Heap-buffer-overflow in stbi__load_and_postprocess_8bit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38394 Crash type: Heap-buffer-overflow READ 2 Crash state: stbiloadandpostprocess8bit stbimage.h...

OSV-2021-1238 UNKNOWN READ in cdf_read_property_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38393 Crash type: UNKNOWN READ Crash state: cdfreadpropertyinfo cdfunpacksummaryinfo cdfchecksummaryinfo...

OSV-2021-1237 Heap-buffer-overflow in ih264d_parse_decode_slice

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38482 Crash type: Heap-buffer-overflow READ 4 Crash state: ih264dparsedecodeslice ih264dparsenalunit ih264dvideodecode...

OSV-2021-1236 UNKNOWN READ in icu_70::UCharsTrie::branchNext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38390 Crash type: UNKNOWN READ Crash state: icu70::UCharsTrie::branchNext icu70::UCharsTrie::firstForCodePoint icu70::CollationIterator::nextCE32FromContraction...

OSV-2021-1235 Heap-buffer-overflow in ih264d_fill_bs1_16x16mb_pslice

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38387 Crash type: Heap-buffer-overflow READ 4 Crash state: ih264dfillbs116x16mbpslice ih264dcomputebsnonmbaffthread ih264drecondeblkslice...

OSV-2021-1234 Heap-buffer-overflow in ndr_push_array_uint8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38480 Crash type: Heap-buffer-overflow READ 2 Crash state: ndrpusharrayuint8 ndrpushnbtrdatadata ndrpushnbtrdata...

OSV-2021-1231 Heap-buffer-overflow in padding

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38439 Crash type: Heap-buffer-overflow READ Crash state: padding sgrmixc lrstripe...

OSV-2021-1230 UNKNOWN READ in helper_ret_stb_mmu_x86_64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38438 Crash type: UNKNOWN READ Crash state: helperretstbmmux8664 resumeallvcpusx8664 vmstartx8664...

OSV-2021-1229 Heap-buffer-overflow in flatbuffers::JsonPrinter::GenFieldOffset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38371 Crash type: Heap-buffer-overflow READ 4 Crash state: flatbuffers::JsonPrinter::GenFieldOffset flatbuffers::JsonPrinter::GenStruct flatbuffers::GenerateText...

OSV-2021-1228 Heap-buffer-overflow in backup_lpf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38369 Crash type: Heap-buffer-overflow READ Crash state: backuplpf dav1dlrcopylpf16bpc dav1dfiltersbrowdeblockrows16bpc...

OSV-2021-1227 Heap-buffer-overflow in blosclz_compress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38313 Crash type: Heap-buffer-overflow WRITE 1 Crash state: blosclzcompress bloscc dojob...

OSV-2021-1224 Heap-buffer-overflow in srtp_stream_init_keys

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38359 Crash type: Heap-buffer-overflow READ Crash state: srtpstreaminitkeys srtpstreaminit srtpaddstream...

OSV-2021-1222 Invalid-free in swift_unexpectedError

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38323 Crash type: Invalid-free Crash state: swiftunexpectedError SwiftProtobuf.TextFormatEncodingVisitor.visitRepeatedMessageFieldA where A: Swi merged protocol witness for SwiftProtobuf.Visitor.visitRepeatedEnumFieldA where...

OSV-2021-1221 Heap-buffer-overflow in parse_via_param

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38307 Crash type: Heap-buffer-overflow READ 1 Crash state: parseviaparam parsevia gethdrfield...

OSV-2021-1218 Heap-buffer-overflow in value_move

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38298 Crash type: Heap-buffer-overflow READ 8 Crash state: valuemove mrbarysplice mrbaryaset...

OSV-2021-1217 Heap-use-after-free in ZEND_FETCH_OBJ_R_SPEC_CV_CONST_INLINE_HANDLER

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38297 Crash type: Heap-use-after-free READ 8 Crash state: ZENDFETCHOBJRSPECCVCONSTINLINEHANDLER ZENDFETCHOBJRSPECCVCONSTHANDLER fuzzerexecuteex...