OSV-2021-231 Heap-buffer-overflow in int32_get_blk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29855 Crash type: Heap-buffer-overflow READ 1 Crash state: int32getblk cramreadSAMhdr cramdopen...

OSV-2021-229 Heap-buffer-overflow in cram_xpack_decode_init

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29827 Crash type: Heap-buffer-overflow WRITE 4 Crash state: cramxpackdecodeinit cramdecoderinit cramdecodecompressionheader...

OSV-2021-228 Heap-buffer-overflow in safe_ltf8_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29837 Crash type: Heap-buffer-overflow READ 1 Crash state: safeltf8get cramvarintdecodeinit cramdecoderinit...

OSV-2021-223 Heap-buffer-overflow in fdilate_1_56

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29819 Crash type: Heap-buffer-overflow READ 4 Crash state: fdilate156 fmorphopgenlow1 pixFMorphopGen1...

OSV-2021-222 Heap-buffer-overflow in arith_uncompress_to

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29792 Crash type: Heap-buffer-overflow READ 1 Crash state: arithuncompressto cramuncompressblock cramreadSAMhdr...

OSV-2021-221 Heap-buffer-overflow in blosc_d

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29816 Crash type: Heap-buffer-overflow READ 4 Crash state: bloscd bloscgetitem bloscgetitem...

OSV-2021-220 Heap-buffer-overflow in rans_uncompress_to_4x16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29795 Crash type: Heap-buffer-overflow READ 1 Crash state: ransuncompressto4x16 ransuncompress4x16 cramuncompressblock...

OSV-2021-219 UNKNOWN READ in H5HG__cache_heap_deserialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29759 Crash type: UNKNOWN READ Crash state: H5HGcacheheapdeserialize H5Cloadentry H5Cprotect...

OSV-2021-218 Heap-buffer-overflow in H5F_addr_decode_len

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29776 Crash type: Heap-buffer-overflow READ 1 Crash state: H5Faddrdecodelen H5Faddrdecode H5Gentdecode...

OSV-2020-2304 Use-of-uninitialized-value in memory_test

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29731 Crash type: Use-of-uninitialized-value Crash state: memorytest fuzzersend wolfSSHSendPacket...

OSV-2021-213 Heap-use-after-free in ZSTD_freeDDict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29705 Crash type: Heap-use-after-free READ Crash state: ZSTDfreeDDict blosc2freectx blosc2schunkfree...

OSV-2021-212 Heap-buffer-overflow in pdf_get_xref_entry

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29728 Crash type: Heap-buffer-overflow READ 4 Crash state: pdfgetxrefentry pdfcacheobject pdfresolveindirect...

OSV-2021-211 Heap-use-after-free in __libcpp_strpbrk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29698 Crash type: Heap-use-after-free READ 2 Crash state: libcppstrpbrk strpbrk tesseract::Tesseract::oneellconflict...

OSV-2020-2303 Use-of-uninitialized-value in Splash::pipeRunSimpleXBGR8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29651 Crash type: Use-of-uninitialized-value Crash state: Splash::pipeRunSimpleXBGR8 Splash::drawSpan Splash::fillWithPattern...

OSV-2021-207 Heap-buffer-overflow in blosc_getitem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29613 Crash type: Heap-buffer-overflow READ 1 Crash state: bloscgetitem getcoffset framegetlazychunk...

OSV-2021-205 Heap-use-after-free in lua_closeslot

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29610 Crash type: Heap-use-after-free WRITE 1 Crash state: luacloseslot luaLtraceback msghandler...

OSV-2021-204 Heap-buffer-overflow in WelsDec::NeedErrorCon

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29604 Crash type: Heap-buffer-overflow READ 1 Crash state: WelsDec::NeedErrorCon WelsDec::CheckAndFinishLastPic WelsDecodeBs...

OSV-2021-203 Memcpy-param-overlap in flatview_write_continue

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29586 Crash type: Memcpy-param-overlap Crash state: flatviewwritecontinue flatviewwrite addressspacewrite...

OSV-2016-7 Heap-buffer-overflow in mcopy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=153 Crash type: Heap-buffer-overflow READ 1 Crash state: mcopy mget match...

OSV-2017-167 Global-buffer-overflow in vte_write_debug

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=457 Crash type: Global-buffer-overflow READ 1 Crash state: vtewritedebug doaction parsedata...

OSV-2016-6 UNKNOWN READ in mprint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=144 Crash type: UNKNOWN READ Crash state: mprint match filesoftmagic...

OSV-2017-161 Global-buffer-overflow in vte_write_debug

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=449 Crash type: Global-buffer-overflow READ 1 Crash state: vtewritedebug doexecute doaction...

OSV-2016-4 Global-buffer-overflow in vte_write_debug

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=174 Crash type: Global-buffer-overflow READ 1 Crash state: vtewritedebug doexecute doaction...

OSV-2016-5 Global-buffer-overflow in vte_write_debug

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=182 Crash type: Global-buffer-overflow READ 1 Crash state: vtewritedebug doaction parsedata...

OSV-2017-159 Global-buffer-overflow in vte_write_debug

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=182 Crash type: Global-buffer-overflow READ 1 Crash state: vtewritedebug doaction parsedata...

OSV-2016-3 UNKNOWN READ in file_regexec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=143 Crash type: UNKNOWN READ Crash state: fileregexec magiccheck match...

OSV-2017-157 Global-buffer-overflow in vte_write_debug

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=744 Crash type: Global-buffer-overflow READ 1 Crash state: vtewritedebug dotrans tsmvteinput...

OSV-2018-459 Use-of-uninitialized-value in lex_white

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5632 Crash type: Use-of-uninitialized-value Crash state: lexwhite pdflex pdfprocessstream...

OSV-2018-457 Heap-buffer-overflow in xstrndup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8033 Crash type: Heap-buffer-overflow READ 11 Crash state: xstrndup geturlscss wgetcssfuzzer.c...

OSV-2017-154 Heap-buffer-overflow in TetrahedralInterpFloat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=852 Crash type: Heap-buffer-overflow READ 4 Crash state: TetrahedralInterpFloat LUTeval16 CachedXFORM...

OSV-2018-454 Use-of-uninitialized-value in fz_expand_indexed_pixmap

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5645 Crash type: Use-of-uninitialized-value Crash state: fzexpandindexedpixmap fzdecompimagefromstream compressedimagegetpixmap...

OSV-2018-451 Use-of-uninitialized-value in jbig2_huffman_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9682 Crash type: Use-of-uninitialized-value Crash state: jbig2huffmanget jbig2decodesymboldict jbig2symboldictionary...

OSV-2018-448 Use-of-uninitialized-value in CachedXFORM4to3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5623 Crash type: Use-of-uninitialized-value Crash state: CachedXFORM4to3 cmsDoTransform fzlcmstransformpixmap...

OSV-2018-446 Use-of-uninitialized-value in fz_drop_key_storable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5879 Crash type: Use-of-uninitialized-value Crash state: fzdropkeystorable fzdropcolorspacecontext fzdropcontext...

OSV-2018-441 Stack-buffer-underflow in ps_index

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9970 Crash type: Stack-buffer-underflow READ 8 Crash state: psindex psrun evalpostscriptfunc...

OSV-2018-428 UNKNOWN READ in jbig2_decode_mmr_init

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9681 Crash type: UNKNOWN READ Crash state: jbig2decodemmrinit jbig2decodegenericmmr jbig2decodesymboldict...

OSV-2017-144 Global-buffer-overflow in csnStreamDissector

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1436 Crash type: Global-buffer-overflow READ 2 Crash state: csnStreamDissector csnStreamDissector csnStreamDissector...

OSV-2018-426 UNKNOWN READ in jpx_read_image

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8866 Crash type: UNKNOWN READ Crash state: jpxreadimage fzloadjpx pdfloadjpx...

OSV-2018-422 Use-of-uninitialized-value in cf2_glyphpath_pushPrevElem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5659 Crash type: Use-of-uninitialized-value Crash state: cf2glyphpathpushPrevElem cf2glyphpathcurveTo cf2interpT2CharString...

OSV-2018-417 UNKNOWN READ in boost::sub_match<std::__1::__wrap_iter<char const*> >::sub_match

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9539 Crash type: UNKNOWN READ Crash state: boost::submatch ::submatch ZNSt316vectorIN5boost9submatchINS11wrapiterIPKcEEEENS9allocatorIS7EEE1 boost::matchresults, std::1::allocatorboo...

OSV-2018-408 Use-of-uninitialized-value in fz_is_empty_irect

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5865 Crash type: Use-of-uninitialized-value Crash state: fzisemptyirect fzintersectirect fzdrawclippath...

OSV-2018-413 Use-of-uninitialized-value in fz_adjust_ft_glyph_width

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5596 Crash type: Use-of-uninitialized-value Crash state: fzadjustftglyphwidth doftrenderglyph fzrenderftglyph...

OSV-2018-414 Use-of-uninitialized-value in jbig2_immediate_generic_region

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9680 Crash type: Use-of-uninitialized-value Crash state: jbig2immediategenericregion jbig2parsesegment jbig2datain...

OSV-2017-140 Heap-buffer-overflow in mprint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1523 Crash type: Heap-buffer-overflow READ 3 Crash state: mprint match filesoftmagic...

OSV-2018-389 UNKNOWN READ in boost::re_detail_NUMBER::basic_regex_creator<char, boost::regex_traits<char, boo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6708 Crash type: UNKNOWN READ Crash state: boost::redetailNUMBER::basicregexcreatorchar, boost::regextraitschar, boo boost::redetailNUMBER::basicregexcreatorchar, boost::regextraitschar, boo...

OSV-2018-388 Use-of-uninitialized-value in MatShaperEval16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5748 Crash type: Use-of-uninitialized-value Crash state: MatShaperEval16 PrecalculatedXFORM cmsDoTransform...

OSV-2018-384 Use-of-uninitialized-value in template_affine_N_lerp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5616 Crash type: Use-of-uninitialized-value Crash state: templateaffineNlerp paintaffinelerpdasa0 fzpaintimageimp...

OSV-2018-369 Negative-size-param in get_urls_css

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8032 Crash type: Negative-size-param Crash state: geturlscss wgetcssfuzzer.c...

OSV-2018-367 Use-of-uninitialized-value in cf2_glyphpath_lineTo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8323 Crash type: Use-of-uninitialized-value Crash state: cf2glyphpathlineTo cf2glyphpathcloseOpenPath cf2glyphpathmoveTo...

OSV-2018-368 Use-of-uninitialized-value in evict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5666 Crash type: Use-of-uninitialized-value Crash state: evict fzemptystore fzdropstorecontext...