4483 matches found
OSV-2018-362 Use-of-uninitialized-value in fz_unpack_tile
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11022 Crash type: Use-of-uninitialized-value Crash state: fzunpacktile fzdecompimagefromstream compressedimagegetpixmap...
OSV-2018-358 Use-of-uninitialized-value in jbig2_arith_bytein
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9677 Crash type: Use-of-uninitialized-value Crash state: jbig2arithbytein jbig2arithnew jbig2decodepatterndict...
OSV-2018-347 Heap-use-after-free in fz_drop_key_storable
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5521 Crash type: Heap-use-after-free READ 4 Crash state: fzdropkeystorable fzdropdefaultcolorspaces fzdrawdropdevice...
OSV-2018-335 Null-dereference READ
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10888 Crash type: Null-dereference READ Crash state: NULL...
OSV-2020-2301 Heap-buffer-overflow in H5MM_xstrdup
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29553 Crash type: Heap-buffer-overflow READ Crash state: H5MMxstrdup H5Genttolink H5Gnodeiterate...
OSV-2018-332 UNKNOWN READ in template_affine_color_N_lerp
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6522 Crash type: UNKNOWN READ Crash state: templateaffinecolorNlerp paintaffinecolorlerpN fzpaintimageimp...
OSV-2018-310 Use-of-uninitialized-value in jbig2_arith_decode
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5636 Crash type: Use-of-uninitialized-value Crash state: jbig2arithdecode jbig2decodegenerictemplate0unopt jbig2decodegenericregion...
OSV-2017-138 Heap-use-after-free in gnutls_x509_crl_deinit
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1304 Crash type: Heap-use-after-free READ 8 Crash state: gnutlsx509crldeinit gnutlspkcs12simpleparse start...
OSV-2018-303 UNKNOWN READ in _gcry_aes_cbc_enc
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6336 Crash type: UNKNOWN READ Crash state: gcryaescbcenc cmacwrite gcryciphercmacauthenticate...
OSV-2018-301 Use-of-uninitialized-value in fz_paint_triangle
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5641 Crash type: Use-of-uninitialized-value Crash state: fzpainttriangle dopainttri fzprocessshadetype4...
OSV-2018-300 Use-of-uninitialized-value in fz_unpack_tile
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8326 Crash type: Use-of-uninitialized-value Crash state: fzunpacktile fzdecompimagefromstream compressedimagegetpixmap...
OSV-2018-291 Use-of-uninitialized-value in pdf_lex
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5610 Crash type: Use-of-uninitialized-value Crash state: pdflex pdfloadcmap pdfloadembeddedcmap...
OSV-2018-293 Use-of-uninitialized-value in pdf_load_version
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5496 Crash type: Use-of-uninitialized-value Crash state: pdfloadversion pdfinitdocument pdfopendocumentwithstream...
OSV-2017-134 Heap-buffer-overflow in cdf_file_property_info
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1064 Crash type: Heap-buffer-overflow READ 1 Crash state: cdffilepropertyinfo cdffilesummaryinfo cdfchecksummaryinfo...
OSV-2018-288 Use-of-uninitialized-value in jbig2_decode_symbol_dict
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9688 Crash type: Use-of-uninitialized-value Crash state: jbig2decodesymboldict jbig2symboldictionary jbig2parsesegment...
OSV-2018-284 Stack-buffer-overflow in pdf_lookup_cmap_full
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5494 Crash type: Stack-buffer-overflow WRITE 4 Crash state: pdflookupcmapfull pdfremapcmaprange pdfremapcmap...
OSV-2018-280 Heap-buffer-overflow in xstrdup
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7931 Crash type: Heap-buffer-overflow READ Crash state: xstrdup ftpparsewinntls wgetftplsfuzzer.c...
OSV-2018-279 Use-of-uninitialized-value in fz_drop_hash_table
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5609 Crash type: Use-of-uninitialized-value Crash state: fzdrophashtable fzfincachedcolorconverter fzpaintshade...
OSV-2018-274 Use-of-uninitialized-value in pdf_lex
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5600 Crash type: Use-of-uninitialized-value Crash state: pdflex pdfprocessstream pdfprocesscontents...
OSV-2018-273 Heap-buffer-overflow in ftp_parse_winnt_ls
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7930 Crash type: Heap-buffer-overflow READ 1 Crash state: ftpparsewinntls wgetftplsfuzzer.c...
OSV-2017-131 Heap-buffer-overflow in mprint
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1516 Crash type: Heap-buffer-overflow READ 2 Crash state: mprint match filesoftmagic...
OSV-2021-184 Heap-buffer-overflow in H5HL__fl_deserialize
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29580 Crash type: Heap-buffer-overflow READ 1 Crash state: H5HLfldeserialize H5HLcachedatablockdeserialize H5Cloadentry...
OSV-2018-255 Heap-use-after-free in add_range
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5492 Crash type: Heap-use-after-free READ 4 Crash state: addrange pdfmaprangetorange pdfparsebfrange...
OSV-2018-256 Use-of-uninitialized-value in cf2_glyphpath_lineTo
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5782 Crash type: Use-of-uninitialized-value Crash state: cf2glyphpathlineTo cf2interpT2CharString cf2getGlyphOutline...
OSV-2018-252 Heap-use-after-free in fz_fin_cached_color_converter
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5604 Crash type: Heap-use-after-free READ 8 Crash state: fzfincachedcolorconverter fzpaintshade fzdrawfillshade...
OSV-2017-126 Bad-cast to const std::__1::__less<unsigned long, unsigned long> *_start
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=606 Crash type: Bad-cast Crash state: Bad-cast to const std::1::less start...
OSV-2018-247 Heap-use-after-free in fz_drop_key_storable
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5513 Crash type: Heap-use-after-free READ 4 Crash state: fzdropkeystorable fzdropcolorspacecontext fzdropcontext...
OSV-2018-245 Use-of-uninitialized-value in fz_keep_imp
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6837 Crash type: Use-of-uninitialized-value Crash state: fzkeepimp pdfcopypatterngstate pdfshowpattern...
OSV-2018-237 Use-of-uninitialized-value in sfnt_open_font
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5603 Crash type: Use-of-uninitialized-value Crash state: sfntopenfont sfntinitface ttfaceinit...
OSV-2017-120 Global-buffer-overflow in csnStreamDissector
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1571 Crash type: Global-buffer-overflow READ 2 Crash state: csnStreamDissector csnStreamDissector csnStreamDissector...
OSV-2017-121 Global-buffer-overflow in vte_write_debug
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8923 Crash type: Global-buffer-overflow READ 1 Crash state: vtewritedebug dotrans tsmvteinput...
OSV-2018-233 Use-of-uninitialized-value in _cmsReadHeader
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5936 Crash type: Use-of-uninitialized-value Crash state: cmsReadHeader cmsOpenProfileFromMemTHR fzlcmsinitprofile...
OSV-2017-119 Stack-buffer-overflow in ot::MeshCoP::CommissionerSessionIdTlv::GetCommissionerSessionId
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3376 Crash type: Stack-buffer-overflow READ 2 Crash state: ot::MeshCoP::CommissionerSessionIdTlv::GetCommissionerSessionId ot::NetworkData::Leader::HandleCommissioningSet ot::Coap::Coap::ProcessReceivedRequest...
OSV-2017-116 Use-after-poison in rawspeed::OrfDecoder::decodeCompressed
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3012 Crash type: Use-after-poison WRITE 2 Crash state: rawspeed::OrfDecoder::decodeCompressed rawspeed::OrfDecoder::decodeRawInternal rawspeed::RawDecoder::decodeRaw...
OSV-2017-117 Use-of-uninitialized-value in CharToWide
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4290 Crash type: Use-of-uninitialized-value Crash state: CharToWide Archive::GetComment Archive::ViewComment...
OSV-2021-175 Heap-buffer-overflow in H5MM_memcpy
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29545 Crash type: Heap-buffer-overflow WRITE Crash state: H5MMmemcpy H5Dscattermem H5Dscatgathread...
OSV-2017-114 Use-of-uninitialized-value in __gxx_personality_v0
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4310 Crash type: Use-of-uninitialized-value Crash state: gxxpersonalityv0 UnwindRaiseException ErrorHandler::Throw...
OSV-2017-109 Use-of-uninitialized-value in Unpack::MakeDecodeTables
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4298 Crash type: Use-of-uninitialized-value Crash state: Unpack::MakeDecodeTables Unpack::ReadTables20 Unpack::Unpack20...
OSV-2017-108 Heap-use-after-free in nl::wpantund::SpinelNCPInstance::should_filter_address
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4459 Crash type: Heap-use-after-free READ 6 Crash state: nl::wpantund::SpinelNCPInstance::shouldfilteraddress nl::wpantund::SpinelNCPInstance::handlencpspinelvalueinserted nl::wpantund::SpinelNCPInstance::handlencpspinelcallba...
OSV-2017-113 Use-of-uninitialized-value in CommandData::IsProcessFile
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4411 Crash type: Use-of-uninitialized-value Crash state: CommandData::IsProcessFile CmdExtract::ExtractCurrentFile CmdExtract::ExtractArchive...
OSV-2017-110 Use-of-uninitialized-value in ExtractUnixLink30
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4309 Crash type: Use-of-uninitialized-value Crash state: ExtractUnixLink30 ExtractSymlink CmdExtract::ExtractCurrentFile...
OSV-2021-169 Heap-buffer-overflow in H5O__cont_decode
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29549 Crash type: Heap-buffer-overflow READ 1 Crash state: H5Ocontdecode H5Ochunkdeserialize H5Ocachedeserialize...
OSV-2017-106 Use-of-uninitialized-value in getrn
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2601 Crash type: Use-of-uninitialized-value Crash state: getrn lhretrieve intthreadgetitem...
OSV-2017-104 Heap-buffer-overflow in Unpack::CopyString
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4373 Crash type: Heap-buffer-overflow WRITE 1 Crash state: Unpack::CopyString Unpack::Unpack5 CmdExtract::ExtractCurrentFile...
OSV-2017-100 Use-of-uninitialized-value in Archive::ConvertAttributes
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4272 Crash type: Use-of-uninitialized-value Crash state: Archive::ConvertAttributes CmdExtract::ExtractCurrentFile CmdExtract::ExtractArchive...
OSV-2017-102 Use-of-uninitialized-value in match
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1065 Crash type: Use-of-uninitialized-value Crash state: match filesoftmagic mget...
OSV-2017-101 Heap-double-free in ExtensionObject_deleteMembers
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4345 Crash type: Heap-double-free Crash state: ExtensionObjectdeleteMembers UAdeleteMembers UAdecodeBinary...
OSV-2017-93 Use-of-uninitialized-value in CharToWideMap
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4285 Crash type: Use-of-uninitialized-value Crash state: CharToWideMap CharToWide Archive::GetComment...
OSV-2017-95 Use-of-uninitialized-value in Archive::GetComment
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4410 Crash type: Use-of-uninitialized-value Crash state: Archive::GetComment Archive::ViewComment CmdExtract::ExtractArchive...