OSV-2018-3 Heap-buffer-overflow in git__strntol64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11194 Crash type: Heap-buffer-overflow READ 1 Crash state: gitstrntol64 gitstrntol32 gitsignatureparse...

OSV-2018-2 Heap-buffer-overflow in git_buf_vprintf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11004 Crash type: Heap-buffer-overflow READ 13 Crash state: gitbufvprintf giterrset gitstrntol32...

OSV-2018-1 Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10897 Crash type: Heap-buffer-overflow READ 1 Crash state: BEInt::operator unsigned short AAT::StateTable ::sanitize AAT::KerxSubTableFormat1::sanitize...

OSV-2021-41 Heap-buffer-overflow in BaseMemStream<char const>::getChar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29460 Crash type: Heap-buffer-overflow READ 1 Crash state: BaseMemStream::getChar Object::streamGetChar Lexer::getChar...

OSV-2021-40 Heap-buffer-overflow in rijndaelDecrypt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29454 Crash type: Heap-buffer-overflow READ 1 Crash state: rijndaelDecrypt aes256cbcdecrypt checkuserpassword...

OSV-2021-39 Heap-buffer-overflow in dotnet_parse_tilde_2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29419 Crash type: Heap-buffer-overflow READ 2 Crash state: dotnetparsetilde2 dotnetparsetilde dotnetparsecom...

OSV-2021-38 Heap-buffer-overflow in my_casedn_str_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29433 Crash type: Heap-buffer-overflow READ 2 Crash state: mycasednstrutf8 LEXUSER::init MYSQLparse...

OSV-2021-36 Use-of-uninitialized-value in grk::mct::decompress_irrev

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29413 Crash type: Use-of-uninitialized-value Crash state: grk::mct::decompressirrev grk::TileProcessor::mctdecompress grk::TileProcessor::decompresstilet1...

OSV-2021-37 Heap-buffer-overflow in WelsDec::CopyRectBlock4Cols

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29431 Crash type: Heap-buffer-overflow READ 16 Crash state: WelsDec::CopyRectBlock4Cols WelsDec::GetColocatedMb WelsDec::PredMvBDirectSpatial...

OSV-2021-32 Heap-use-after-free in igraph_vector_ptr_size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29408 Crash type: Heap-use-after-free READ 8 Crash state: igraphvectorptrsize igraphgmltreedestroy igraphigmlparsedatadestroy...

OSV-2021-31 Heap-buffer-overflow in TTF::be_u16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29338 Crash type: Heap-buffer-overflow READ 1 Crash state: TTF::beu16 TTF::Font::loadfromoffset TTF::Font::loadfrommemory...

OSV-2021-27 Heap-buffer-overflow in ZSTD_createDDict_advanced

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29369 Crash type: Heap-buffer-overflow READ Crash state: ZSTDcreateDDictadvanced ZSTDcreateDDict bloscrundecompressionwithcontext...

OSV-2021-25 Heap-use-after-free in igraph_read_graph_gml

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29377 Crash type: Heap-use-after-free READ 8 Crash state: igraphreadgraphgml readgmlfuzzer.c igraphigmldestroyattrs...

OSV-2021-23 UNKNOWN READ in blosc_getitem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29287 Crash type: UNKNOWN READ Crash state: bloscgetitem getcoffset framegetlazychunk...

OSV-2021-22 UNKNOWN READ in frame_get_metalayers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29280 Crash type: UNKNOWN READ Crash state: framegetmetalayers blosc2frametoschunk blosc2schunkopensframe...

OSV-2021-21 Segv on unknown address in frame_get_lazychunk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29295 Crash type: Segv on unknown address Crash state: framegetlazychunk framedecompresschunk blosc2schunkdecompresschunk...

OSV-2021-16 Stack-buffer-overflow in JS::Heap::gather_conservative_roots

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29266 Crash type: Stack-buffer-overflow READ 8 Crash state: JS::Heap::gatherconservativeroots JS::Heap::gatherroots JS::Heap::collectgarbage...

OSV-2021-12 Heap-buffer-overflow in read_bits_16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29221 Crash type: Heap-buffer-overflow READ 1 Crash state: readbits16 decodenumber douncompressblock...

OSV-2021-10 Heap-buffer-overflow in sp_tohex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29185 Crash type: Heap-buffer-overflow WRITE 1 Crash state: sptohex sptoradix cryptofuzz::module::wolfCryptbignum::Bignum::baseConversion...

OSV-2021-8 Heap-buffer-overflow in ldl_he_p

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29181 Crash type: Heap-buffer-overflow READ 4 Crash state: ldlhep ldnhep flatviewwritecontinue...

OSV-2021-7 UNKNOWN READ in blosc_d

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29171 Crash type: UNKNOWN READ Crash state: bloscd dojob bloscrundecompressionwithcontext...

OSV-2021-2 Heap-buffer-overflow in Imf_2_5::FastHufDecoder::decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29106 Crash type: Heap-buffer-overflow READ 2 Crash state: Imf25::FastHufDecoder::decode Imf25::hufUncompress Imf25::PizCompressor::uncompress...

OSV-2020-2299 Heap-buffer-overflow in ato16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29103 Crash type: Heap-buffer-overflow READ 1 Crash state: ato16 TLSXCSRParse TLSXParse...

OSV-2020-2298 UNKNOWN READ in ndpi_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29081 Crash type: UNKNOWN READ Crash state: ndpifree ndpifreeflow fuzzprocesspacket.c...

OSV-2020-2297 Heap-double-free in WelsCommon::WelsFree

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29073 Crash type: Heap-double-free Crash state: WelsCommon::WelsFree WelsCommon::CMemoryAlign::WelsFree WelsDec::FreePicture...

OSV-2020-2291 Heap-buffer-overflow in dotnet_parse_tilde_2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28981 Crash type: Heap-buffer-overflow READ 2 Crash state: dotnetparsetilde2 dotnetparsetilde dotnetparsecom...

OSV-2020-2285 Bad-cast to pcpp::Layer from invalid vptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28945 Crash type: Bad-cast Crash state: Bad-cast to pcpp::Layer from invalid vptr pcpp::IDnsResource::getRawData pcpp::DnsResource::getDataLength...

OSV-2020-2276 Negative-size-param in tcos_decipher

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28768 Crash type: Negative-size-param Crash state: tcosdecipher scdecipher usekey...

OSV-2020-2274 Heap-buffer-overflow in McCopyWidthEq4_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28769 Crash type: Heap-buffer-overflow READ 4 Crash state: McCopyWidthEq4c McCopysse2 McChromassse3...

OSV-2020-2273 Stack-buffer-overflow in perfetto::trace_processor::MemoryTrackerSnapshotParser::EmitRows

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28766 Crash type: Stack-buffer-overflow READ 4 Crash state: perfetto::traceprocessor::MemoryTrackerSnapshotParser::EmitRows perfetto::traceprocessor::MemoryTrackerSnapshotParser::GenerateGraphFromRawNode...

OSV-2020-2264 Stack-buffer-overflow in ot::IsValidUtf8String

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28682 Crash type: Stack-buffer-overflow READ 1 Crash state: ot::IsValidUtf8String ot::MeshCoP::NetworkNameTlv::IsValid ot::MeshCoP::Tlv::IsValid...

OSV-2020-2263 Heap-buffer-overflow in McChromaWithFragMv_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28639 Crash type: Heap-buffer-overflow READ 1 Crash state: McChromaWithFragMvc McChromassse3 WelsDec::BaseMC...

OSV-2020-2259 Stack-buffer-overflow in ot::MeshCoP::ChannelMaskEntry::GetMask

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28556 Crash type: Stack-buffer-overflow READ 4 Crash state: ot::MeshCoP::ChannelMaskEntry::GetMask ot::MeshCoP::ChannelMaskTlv::GetChannelMask ot::MeshCoP::Dataset::ConvertTo...

OSV-2020-2258 Heap-buffer-overflow in grk::t1_part1::T1Part1::decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28505 Crash type: Heap-buffer-overflow READ Crash state: grk::t1part1::T1Part1::decompress grk::DecompressBlockExec::open grk::T1DecompressScheduler::decompressBlock...

OSV-2020-2254 Stack-use-after-return in insert_pin

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28383 Crash type: Stack-use-after-return READ 1 Crash state: insertpin detectidkey scpkcs15emutcosinitex...

OSV-2020-2253 Global-buffer-overflow in g_date_time_get_ymd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28477 Crash type: Global-buffer-overflow READ 2 Crash state: gdatetimegetymd gdatetimegetyear gdatetimeformatutf8...

OSV-2020-2251 Heap-buffer-overflow in blosc_run_decompression_with_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28392 Crash type: Heap-buffer-overflow READ 1 Crash state: bloscrundecompressionwithcontext blosc2decompressctx framedecompresschunk...

OSV-2020-2250 Heap-buffer-overflow in grk::t1_part1::T1Part1::decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28415 Crash type: Heap-buffer-overflow READ 12 Crash state: grk::t1part1::T1Part1::decompress grk::DecompressBlockExec::open grk::T1DecompressScheduler::decompressBlock...

OSV-2020-2249 Heap-buffer-overflow in grk::t1_part1::T1Part1::decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28328 Crash type: Heap-buffer-overflow READ Crash state: grk::t1part1::T1Part1::decompress grk::DecompressBlockExec::open grk::T1DecompressScheduler::decompressBlock...

OSV-2020-2247 Stack-buffer-overflow in ot::MeshCoP::ChannelMaskEntryBase::GetEntrySize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28315 Crash type: Stack-buffer-overflow READ 1 Crash state: ot::MeshCoP::ChannelMaskEntryBase::GetEntrySize ot::MeshCoP::ChannelMaskEntryBase::GetNext ot::MeshCoP::ChannelMaskBaseTlv::IsValid...

OSV-2020-2246 Heap-use-after-free in check_connection

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28254 Crash type: Heap-use-after-free READ 6 Crash state: checkconnection fuzzcheckconnection httpfuzzer.c...

OSV-2020-2245 Heap-buffer-overflow in Pl_ASCII85Decoder::write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28262 Crash type: Heap-buffer-overflow WRITE 1 Crash state: PlASCII85Decoder::write PlAESPDF::flush PlAESPDF::finish...

OSV-2020-2244 UNKNOWN READ in cras_system_state_stream_added

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28261 Crash type: UNKNOWN READ Crash state: crassystemstatestreamadded crasrstreamcreate streamlistadd...

OSV-2020-2243 Heap-buffer-overflow in grk::BitIO::bytein

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28313 Crash type: Heap-buffer-overflow READ 1 Crash state: grk::BitIO::bytein grk::BitIO::read grk::BitIO::getnumpasses...

OSV-2020-2242 Heap-buffer-overflow in tinfl_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28285 Crash type: Heap-buffer-overflow READ 1 Crash state: tinfldecompress mzinflate flbgzipuncompress...

OSV-2020-2241 Heap-buffer-overflow in mk_string_copy_substr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28277 Crash type: Heap-buffer-overflow READ Crash state: mkstringcopysubstr mkrconfmetaadd mkrconfread...

OSV-2020-2240 Heap-buffer-overflow in process_chunked_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28265 Crash type: Heap-buffer-overflow READ 1 Crash state: processchunkeddata processdata fuzzprocessdata...

OSV-2020-2239 Heap-buffer-overflow in flb_http_do

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28256 Crash type: Heap-buffer-overflow WRITE 1 Crash state: flbhttpdo httpfuzzer.c...

OSV-2020-2238 Heap-buffer-overflow in dotnet_parse_tilde_2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28253 Crash type: Heap-buffer-overflow READ Crash state: dotnetparsetilde2 dotnetparsetilde dotnetparsecom...

OSV-2020-2233 Heap-buffer-overflow in flb_sds_cat_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28222 Crash type: Heap-buffer-overflow READ 1 Crash state: flbsdscatutf8 flbmsgpackgelfvalue flbmsgpacktogelf...