OSV-2017-97 Use-after-poison in rawspeed::unroll_loop_t<void rawspeed::LJpegDecompressor::decodeN<4>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4451 Crash type: Use-after-poison WRITE 2 Crash state: rawspeed::unrollloopt void rawspeed::LJpegDecompressor::decodeN rawspeed::AbstractLJpegDecompressor::decode...

OSV-2017-90 Use-of-uninitialized-value in ComprDataIO::UnpRead

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4283 Crash type: Use-of-uninitialized-value Crash state: ComprDataIO::UnpRead Unpack::UnpReadBuf Unpack::Unpack15...

OSV-2017-91 UNKNOWN READ in spinel_datatype_vunpack_

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4790 Crash type: UNKNOWN READ Crash state: spineldatatypevunpack spineldatatypeunpack nl::wpantund::SpinelNCPInstance::handlencpspinelvalueinserted...

OSV-2021-162 Segv on unknown address in Mat_H5ReadNextReferenceData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29540 Crash type: Segv on unknown address Crash state: MatH5ReadNextReferenceData MatVarRead73 ReadData...

OSV-2017-84 Heap-buffer-overflow in macho_handle_segment_64_be

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4382 Crash type: Heap-buffer-overflow READ 8 Crash state: machohandlesegment64be machoparsefile64be machoload...

OSV-2017-83 Heap-buffer-overflow in idn2_lookup_u8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2262 Crash type: Heap-buffer-overflow READ 4 Crash state: idn2lookupu8 pslidnatoASCII addpunycodeifneeded...

OSV-2017-79 Heap-buffer-overflow in fuzz_read_callback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4785 Crash type: Heap-buffer-overflow WRITE Crash state: fuzzreadcallback Curlfillreadbuffer readwriteupload...

OSV-2017-78 Negative-size-param in UA_SecureChannel_processChunk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3609 Crash type: Negative-size-param Crash state: UASecureChannelprocessChunk processCompleteChunk UAConnectionprocessChunks...

OSV-2021-159 UNKNOWN READ in htp_connp_RES_FINALIZE

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29551 Crash type: UNKNOWN READ Crash state: htpconnpRESFINALIZE htpconnpresdata fuzzhtp.c...

OSV-2017-76 Use-of-uninitialized-value in Archive::ConvertFileHeader

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4279 Crash type: Use-of-uninitialized-value Crash state: Archive::ConvertFileHeader Archive::ReadHeader15 Archive::ReadHeader...

OSV-2017-73 UNKNOWN READ in rawspeed::MosDecoder::decodeRawInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2479 Crash type: UNKNOWN READ Crash state: rawspeed::MosDecoder::decodeRawInternal rawspeed::RawDecoder::decodeRaw start...

OSV-2017-72 Use-of-uninitialized-value in _gnutls_mpi_dprint_size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1494 Crash type: Use-of-uninitialized-value Crash state: gnutlsmpidprintsize wrapnettlepkencrypt gnutlsgenrsaclientkx...

OSV-2017-71 Use-of-uninitialized-value in wcsncatz

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4350 Crash type: Use-of-uninitialized-value Crash state: wcsncatz Archive::ProcessExtra50 Archive::ReadHeader50...

OSV-2017-69 Use-of-uninitialized-value in IsRelativeSymlinkSafe

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4409 Crash type: Use-of-uninitialized-value Crash state: IsRelativeSymlinkSafe ExtractUnixLink30 ExtractSymlink...

OSV-2021-152 Stack-buffer-overflow in ot::NetworkData::ServerTlv::GetServer16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5878 Crash type: Stack-buffer-overflow READ 2 Crash state: ot::NetworkData::ServerTlv::GetServer16 ot::NetworkData::Leader::RlocLookup ot::NetworkData::Leader::RegisterNetworkData...

OSV-2017-67 Heap-buffer-overflow in OSS_FUZZ_png_combine_row

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3608 Crash type: Heap-buffer-overflow WRITE Crash state: OSSFUZZpngcombinerow OSSFUZZpngreadrow start...

OSV-2017-66 UNKNOWN READ in cfree

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4561 Crash type: UNKNOWN READ Crash state: cfree copyAttributeIntoNode UAServereditNode...

OSV-2017-65 Use-of-uninitialized-value in Archive::GetComment

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4275 Crash type: Use-of-uninitialized-value Crash state: Archive::GetComment Archive::ViewComment CmdExtract::ExtractArchive...

OSV-2017-64 Use-of-uninitialized-value in SetExtraInfo20

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4408 Crash type: Use-of-uninitialized-value Crash state: SetExtraInfo20 CmdExtract::ExtractCurrentFile CmdExtract::ExtractArchive...

OSV-2017-61 Heap-buffer-overflow in opj_mct_decode_real

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3305 Crash type: Heap-buffer-overflow READ 4 Crash state: opjmctdecodereal opjtcdmctdecode opjtcddecodetile...

OSV-2017-62 Use-of-uninitialized-value in gnutls_memset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1493 Crash type: Use-of-uninitialized-value Crash state: gnutlsmemset deinitkeys gnutlshandshakeinternalstateclear...

OSV-2017-59 Heap-buffer-overflow in nlohmann::basic_json<std::__1::map, std::__1::vector, std::__1::basic_string<cha

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=381 Crash type: Heap-buffer-overflow READ 1 Crash state: nlohmann::basicjsonstd::1::map, std::1::vector, std::1::basicstringcha nlohmann::basicjsonstd::1::map, std::1::vector, std::1::basicstringcha...

OSV-2021-147 Use-of-uninitialized-value in gnutls_ocsp_resp_get_status

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1492 Crash type: Use-of-uninitialized-value Crash state: gnutlsocsprespgetstatus gnutlsocsprespimport start...

OSV-2017-58 Heap-use-after-free in UA_Array_copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4300 Crash type: Heap-use-after-free READ Crash state: UAArraycopy copynoInit NodeIdcopy...

OSV-2017-55 Heap-double-free in ExtensionObject_deleteMembers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4296 Crash type: Heap-double-free Crash state: ExtensionObjectdeleteMembers UAArraydelete ArraydecodeBinary...

OSV-2021-145 Heap-buffer-overflow in H5O_dtype_decode_helper

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29536 Crash type: Heap-buffer-overflow READ 1 Crash state: H5Odtypedecodehelper H5Odtypedecode H5Odtypeshareddecode...

OSV-2017-54 Use-of-uninitialized-value in macho_parse_file_32_be

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4375 Crash type: Use-of-uninitialized-value Crash state: machoparsefile32be machoload yrmodulesload...

OSV-2021-144 Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7171 Crash type: Use-of-uninitialized-value Crash state: rawspeed::RawImageData::checkMemIsInitialized Cr2Decompressor.cpp rawspeed::alignedMalloc...

OSV-2017-53 Stack-buffer-overflow in _psl_idna_toASCII

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2600 Crash type: Stack-buffer-overflow READ Crash state: pslidnatoASCII addpunycodeifneeded pslloadfp...

OSV-2016-1 UNKNOWN READ in mprint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=282 Crash type: UNKNOWN READ Crash state: mprint match filesoftmagic...

OSV-2021-141 Use-of-uninitialized-value in H5G__traverse_real

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29546 Crash type: Use-of-uninitialized-value Crash state: H5Gtraversereal H5Gtraverse H5Glocinfo...

OSV-2017-52 Use-of-uninitialized-value in mcopy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2242 Crash type: Use-of-uninitialized-value Crash state: mcopy mget match...

OSV-2017-48 Heap-buffer-overflow in Operation_addNode_finish

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4183 Crash type: Heap-buffer-overflow READ 8 Crash state: OperationaddNodefinish ServiceAddNode UAServerprocessServiceOperations...

OSV-2017-42 Heap-use-after-free in UA_Array_copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4346 Crash type: Heap-use-after-free READ 2 Crash state: UAArraycopy copynoInit NodeIdcopy...

OSV-2017-41 Heap-buffer-overflow in OSS_FUZZ_png_combine_row

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3606 Crash type: Heap-buffer-overflow WRITE 4 Crash state: OSSFUZZpngcombinerow OSSFUZZpngreadrow start...

OSV-2017-39 Use-of-uninitialized-value in IsRelativeSymlinkSafe

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4308 Crash type: Use-of-uninitialized-value Crash state: IsRelativeSymlinkSafe ExtractUnixLink30 ExtractSymlink...

OSV-2017-35 Heap-buffer-overflow in opj_dwt_decode_partial_tile

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3125 Crash type: Heap-buffer-overflow READ Crash state: opjdwtdecodepartialtile opjtcddwtdecode opjtcddecodetile...

OSV-2017-33 Use-of-uninitialized-value in __cxxabiv1::scan_eh_tab

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4307 Crash type: Use-of-uninitialized-value Crash state: cxxabiv1::scanehtab gxxpersonalityv0 UnwindRaiseException...

OSV-2018-231 Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5843 Crash type: Use-of-uninitialized-value Crash state: rawspeed::RawImageData::checkMemIsInitialized rawspeed::RawDecoder::decodeRaw rawspeed::alignedMalloc...

OSV-2018-230 Heap-buffer-overflow in rtsp_rtp_readwrite

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7105 Crash type: Heap-buffer-overflow READ 1 Crash state: rtsprtpreadwrite readwritedata Curlreadwrite...

OSV-2017-29 Heap-use-after-free in UInt32_encodeBinary

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4764 Crash type: Heap-use-after-free WRITE 4 Crash state: UInt32encodeBinary UAencodeBinaryInternal UAencodeBinary...

OSV-2018-227 Heap-buffer-overflow in rawspeed::TableLookUp::setTable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5256 Crash type: Heap-buffer-overflow WRITE 2 Crash state: rawspeed::TableLookUp::setTable rawspeed::RawImageData::setTable rawspeed::DngDecoder::handleMetadata...

OSV-2018-228 Heap-buffer-overflow in g_variant_serialiser_is_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9828 Crash type: Heap-buffer-overflow READ 1 Crash state: gvariantserialiserisstring gvariantserialiserisobjectpath gvariantserialisedisnormal...

OSV-2018-226 Heap-buffer-overflow in pcf_get_encodings

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9561 Crash type: Heap-buffer-overflow READ 1 Crash state: pcfgetencodings pcfloadfont PCFFaceInit...

OSV-2018-224 UNKNOWN READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8353 Crash type: UNKNOWN READ Crash state: NULL...

OSV-2021-120 Heap-use-after-free in UA_SecureChannel_deleteMembersCleanup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5652 Crash type: Heap-use-after-free READ 8 Crash state: UASecureChanneldeleteMembersCleanup UASecureChannelManagerdeleteMembers UAServerdelete...

OSV-2018-219 UNKNOWN READ in pcf_get_encodings

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9527 Crash type: UNKNOWN READ Crash state: pcfgetencodings pcfloadfont PCFFaceInit...

OSV-2018-222 Heap-buffer-overflow in resip::ParseBuffer::qVal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6713 Crash type: Heap-buffer-overflow READ 1 Crash state: resip::ParseBuffer::qVal resip::QValueParameter::QValueParameter resip::QValueParameter::decode...

OSV-2017-24 Heap-buffer-overflow in pnm_type_find

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4039 Crash type: Heap-buffer-overflow READ 1 Crash state: pnmtypefind gsttypefindfactorycallfunction gsttypefindhelperfordata...

OSV-2017-25 Use-of-uninitialized-value in ToPercent

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4512 Crash type: Use-of-uninitialized-value Crash state: ToPercent Archive::ReadHeader15 Archive::ReadHeader...