OSV-2020-2130 Use-of-uninitialized-value in memory_test

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27020 Crash type: Use-of-uninitialized-value Crash state: memorytest fuzzersend SendBuffered...

OSV-2020-2129 Heap-double-free in wmem_simple_free_all

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26952 Crash type: Heap-double-free Crash state: wmemsimplefreeall wmemleavepacketscope fuzzshark.c...

OSV-2020-2128 Heap-use-after-free in pixChangeRefcount

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26967 Crash type: Heap-use-after-free READ 4 Crash state: pixChangeRefcount pixFree pixDestroy...

OSV-2020-2126 Heap-buffer-overflow in ndpi_workflow_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26880 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpiworkflowprocesspacket fuzzndpireader.c...

OSV-2020-2124 UNKNOWN READ in jsoncharutils.h

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26859 Crash type: UNKNOWN READ Crash state: jsoncharutils.h...

OSV-2020-2122 Heap-buffer-overflow in void parquet::internal::DefRepLevelsToListInfo<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26829 Crash type: Heap-buffer-overflow WRITE 1 Crash state: void parquet::internal::DefRepLevelsToListInfo parquet::internal::DefRepLevelsToBitmap parquet::arrow::StructReader::BuildArray...

OSV-2020-2121 Use-of-uninitialized-value in WelsDec::BaseMC

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26861 Crash type: Use-of-uninitialized-value Crash state: WelsDec::BaseMC WelsDec::GetInterBPred WelsDec::WelsMbInterPrediction...

OSV-2020-2119 UNKNOWN READ in numberparsing.h

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26858 Crash type: UNKNOWN READ Crash state: numberparsing.h...

OSV-2020-2117 Heap-buffer-overflow in flb_msgpack_gelf_value_ext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26851 Crash type: Heap-buffer-overflow READ 1 Crash state: flbmsgpackgelfvalueext flbmsgpacktogelf flbmsgpackrawtogelf...

OSV-2020-2115 Use-of-uninitialized-value in DeblockChromaLt42_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26758 Crash type: Use-of-uninitialized-value Crash state: DeblockChromaLt42c DeblockChromaLt4V2c WelsDec::FilteringEdgeChromaH...

OSV-2020-2112 Heap-buffer-overflow in ccr_handle_message_from_client

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26739 Crash type: Heap-buffer-overflow READ Crash state: ccrhandlemessagefromclient crasrclientbufferfromclient rclientmessage.cc...

OSV-2020-2108 Stack-buffer-overflow in simdjson::internal::decimal_right_shift

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26773 Crash type: Stack-buffer-overflow READ 1 Crash state: simdjson::internal::decimalrightshift simdjson::internal::adjustedmantissa simdjson::internal::computefloatsimdjson simdjson::internal::adjustedmantissa...

OSV-2020-2107 Heap-buffer-overflow in WelsDec::ParseIntra4x4Mode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26723 Crash type: Heap-buffer-overflow WRITE 1 Crash state: WelsDec::ParseIntra4x4Mode WelsDec::WelsActualDecodeMbCavlcISlice WelsDec::WelsDecodeMbCavlcISlice...

OSV-2020-2106 UNKNOWN READ in grk::SparseBuffer<6u, 6u>::read_or_write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26702 Crash type: UNKNOWN READ Crash state: grk::SparseBuffer::readorwrite grk::SparseBuffer::read bool grk::decompresspartialtile...

OSV-2020-2103 Use-of-uninitialized-value in tinfl_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26682 Crash type: Use-of-uninitialized-value Crash state: tinfldecompress mzinflate mzuncompress2...

OSV-2020-2101 Heap-buffer-overflow in lduw_he_p

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26691 Crash type: Heap-buffer-overflow READ 2 Crash state: lduwhep ldnhep flatviewwritecontinue...

OSV-2020-2100 Bad-cast to pcpp::IDnsResource from invalid vptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26669 Crash type: Bad-cast Crash state: Bad-cast to pcpp::IDnsResource from invalid vptr pcpp::DnsLayer::parseResources pcpp::DnsLayer::DnsLayer...

OSV-2020-2099 Heap-buffer-overflow in decode_chars

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26674 Crash type: Heap-buffer-overflow WRITE 1 Crash state: decodechars decodefont processtext...

OSV-2020-2098 Use-of-uninitialized-value in std::__1::__function::__func<LLVMFuzzerTestOneInput::$_0, std::__1::allocator<LL

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26617 Crash type: Use-of-uninitialized-value Crash state: std::1::function::funcLLVMFuzzerTestOneInput::$0, std::1::allocatorLL functional std::1::function::funcLLVMFuzzerTestOneInput::$0, std::1::allocatorLL...

OSV-2020-2097 Use-of-uninitialized-value in WelsCommon::CMemoryAlign::~CMemoryAlign

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26612 Crash type: Use-of-uninitialized-value Crash state: WelsCommon::CMemoryAlign::CMemoryAlign WelsCommon::CMemoryAlign::CMemoryAlign WelsDec::CWelsDecoder::UninitDecoderCtx...

OSV-2020-2095 Heap-buffer-overflow in grk::Subband::Subband

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26589 Crash type: Heap-buffer-overflow READ 1 Crash state: grk::Subband::Subband grk::TileComponent::subbandIntersectsAOI grk::T2Decompress::decompresspackets...

OSV-2020-2094 Heap-buffer-overflow in flb_utils_time_to_seconds

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26593 Crash type: Heap-buffer-overflow READ 1 Crash state: flbutilstimetoseconds utilsfuzzer.c...

OSV-2020-2093 Heap-buffer-overflow in ExpandPictureChroma_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26570 Crash type: Heap-buffer-overflow WRITE 8 Crash state: ExpandPictureChromac ExpandReferencingPicture WelsDec::WelsCheckAndRecoverForFutureDecoding...

OSV-2020-2092 Heap-buffer-overflow in RsaPad_PSS

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26567 Crash type: Heap-buffer-overflow WRITE Crash state: RsaPadPSS wcRsaPadex RsaPublicEncryptEx...

OSV-2020-2091 UNKNOWN READ in WelsDec::WelsMarkAsRef

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26533 Crash type: UNKNOWN READ Crash state: WelsDec::WelsMarkAsRef WelsDec::MarkECFrameAsRef WelsDec::CheckAndFinishLastPic...

OSV-2020-2090 Heap-buffer-overflow in grk::Subband::Subband

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26500 Crash type: Heap-buffer-overflow READ 1 Crash state: grk::Subband::Subband grk::TileComponent::subbandIntersectsAOI grk::T2Decompress::decompresspackets...

OSV-2020-2087 Heap-buffer-overflow in blosc_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26442 Crash type: Heap-buffer-overflow WRITE 1 Crash state: bloscc dojob blosccompresscontext...

OSV-2020-2086 Bad-cast to QPaintDevice from invalid vptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26457 Crash type: Bad-cast Crash state: Bad-cast to QPaintDevice from invalid vptr QImage::operator= XCFImageFormat::readXCF...

OSV-2020-2085 UNKNOWN READ in decoder_fuzzer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26428 Crash type: UNKNOWN READ Crash state: decoderfuzzer...

OSV-2020-2084 UNKNOWN READ in WelsCommon::WelsMalloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26420 Crash type: UNKNOWN READ Crash state: WelsCommon::WelsMalloc WelsCommon::CMemoryAlign::WelsMalloc WelsCommon::CMemoryAlign::WelsMallocz...

OSV-2020-2083 Heap-buffer-overflow in clean_path

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26424 Crash type: Heap-buffer-overflow READ Crash state: cleanpath ParseScpCommand DoScpRequest...

OSV-2020-2081 UNKNOWN READ in presym_sym2name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26400 Crash type: UNKNOWN READ Crash state: presymsym2name sym2namelen mrbsymnamelen...

OSV-2020-2080 Heap-buffer-overflow in coap_opt_length

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26371 Crash type: Heap-buffer-overflow READ 1 Crash state: coapoptlength coappduparseopt coappduparse...

OSV-2020-2078 Heap-buffer-overflow in WelsDec::UpdateP16x16RefIdx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26389 Crash type: Heap-buffer-overflow WRITE 2 Crash state: WelsDec::UpdateP16x16RefIdx WelsDec::PredBDirectTemporal WelsDec::ParseInterBInfo...

OSV-2020-2077 UNKNOWN READ in WelsCommon::WelsFree

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26347 Crash type: UNKNOWN READ Crash state: WelsCommon::WelsFree WelsCommon::CMemoryAlign::WelsFree WelsDec::FreePicture...

OSV-2020-2076 Use-of-uninitialized-value in UpdateDecStatNoFreezingInfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26346 Crash type: Use-of-uninitialized-value Crash state: UpdateDecStatNoFreezingInfo UpdateDecStat WelsDec::DecodeFrameConstruction...

OSV-2020-2075 Heap-use-after-free in flb_parser_decoder_list_destroy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26345 Crash type: Heap-use-after-free READ 8 Crash state: flbparserdecoderlistdestroy parserfuzzer.c flbfree...

OSV-2020-2074 UNKNOWN READ in WelsDec::WelsMarkAsRef

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26356 Crash type: UNKNOWN READ Crash state: WelsDec::WelsMarkAsRef WelsDec::MarkECFrameAsRef WelsDec::CheckAndFinishLastPic...

OSV-2020-2072 Heap-buffer-overflow in _conv_num

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26327 Crash type: Heap-buffer-overflow READ 1 Crash state: convnum flbstrptime flbstrptime...

OSV-2020-2071 Heap-buffer-overflow in flb_log_print

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26325 Crash type: Heap-buffer-overflow READ Crash state: flblogprint flbparsertypecast logfmtparser...

OSV-2020-2070 Heap-buffer-overflow in wolfSSH_accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26332 Crash type: Heap-buffer-overflow READ 5 Crash state: wolfSSHaccept server.c...

OSV-2020-2069 UNKNOWN READ in grk::SparseBuffer<6u, 6u>::read_or_write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26322 Crash type: UNKNOWN READ Crash state: grk::SparseBuffer::readorwrite grk::SparseBuffer::read bool grk::decodepartialtile...

OSV-2020-2068 Heap-buffer-overflow in WelsDec::Update8x8RefIdx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26328 Crash type: Heap-buffer-overflow WRITE 1 Crash state: WelsDec::Update8x8RefIdx WelsDec::ParseInterBMotionInfoCabac WelsDec::WelsDecodeMbCabacBSliceBaseMode0...

OSV-2020-2067 Heap-buffer-overflow in WelsDec::DecodeCurrentAccessUnit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26302 Crash type: Heap-buffer-overflow WRITE Crash state: WelsDec::DecodeCurrentAccessUnit WelsDec::ConstructAccessUnit WelsDecodeBs...

OSV-2020-2066 Heap-buffer-overflow in encoded_to_buf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26304 Crash type: Heap-buffer-overflow WRITE 1 Crash state: encodedtobuf flbutilswritestr msgpack2json...

OSV-2020-2065 Use-of-uninitialized-value in WelsDec::NeedErrorCon

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26291 Crash type: Use-of-uninitialized-value Crash state: WelsDec::NeedErrorCon WelsDec::CheckAndFinishLastPic WelsDecodeBs...

OSV-2020-2064 Heap-buffer-overflow in WelsDec::DoErrorConSliceCopy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26285 Crash type: Heap-buffer-overflow WRITE 8 Crash state: WelsDec::DoErrorConSliceCopy WelsDec::ImplementErrorCon WelsDec::CheckAndFinishLastPic...

OSV-2020-2063 Heap-buffer-overflow in WelsDec::WelsDecodeMbCavlcBSlice

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26296 Crash type: Heap-buffer-overflow WRITE 16 Crash state: WelsDec::WelsDecodeMbCavlcBSlice WelsDec::WelsDecodeSlice WelsDec::DecodeCurrentAccessUnit...

OSV-2020-2062 Heap-buffer-overflow in WelsDec::WelsDecodeMbCabacISliceBaseMode0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26303 Crash type: Heap-buffer-overflow WRITE 4 Crash state: WelsDec::WelsDecodeMbCabacISliceBaseMode0 WelsDec::WelsDecodeMbCabacISlice WelsDec::WelsDecodeSlice...

OSV-2020-2061 Heap-buffer-overflow in WelsDec::WelsCheckAndRecoverForFutureDecoding

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26301 Crash type: Heap-buffer-overflow WRITE Crash state: WelsDec::WelsCheckAndRecoverForFutureDecoding WelsDec::WelsInitRefList WelsDec::InitRefPicList...