OSV-2020-2060 Heap-buffer-overflow in fp_to_unsigned_bin_at_pos

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26295 Crash type: Heap-buffer-overflow WRITE 1 Crash state: fptounsignedbinatpos fptounsignedbin mptounsignedbin...

OSV-2020-2056 Heap-use-after-free in destroy_op_array

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24567 Crash type: Heap-use-after-free READ 4 Crash state: destroyoparray fuzzerdorequest fuzzerdorequestfrombuffer...

OSV-2020-2054 Stack-buffer-overflow in void put_epel_hv_fallback<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26280 Crash type: Stack-buffer-overflow READ 2 Crash state: void putepelhvfallback accelerationfunctions::puthevcepelh void mcchroma...

OSV-2020-2045 Use-of-uninitialized-value in WelsDec::GetColocatedMb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26272 Crash type: Use-of-uninitialized-value Crash state: WelsDec::GetColocatedMb WelsDec::PredBDirectTemporal WelsDec::WelsDecodeMbCavlcBSlice...

OSV-2020-2042 UNKNOWN WRITE in pb_release_single_field

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22329 Crash type: UNKNOWN WRITE Crash state: pbreleasesinglefield pbrelease pbdecode...

OSV-2020-2024 Heap-buffer-overflow in pixFindHorizontalRuns

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26268 Crash type: Heap-buffer-overflow WRITE 4 Crash state: pixFindHorizontalRuns pixFillPolygon graphicsfuzzer.cc...

OSV-2020-2018 Heap-use-after-free in fpixChangeRefcount

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26260 Crash type: Heap-use-after-free READ 4 Crash state: fpixChangeRefcount fpixDestroy fpix2fuzzer.cc...

OSV-2020-2017 Heap-buffer-overflow in flb_msgpack_to_json

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26248 Crash type: Heap-buffer-overflow WRITE 1 Crash state: flbmsgpacktojson flbmsgpackrawtojsonsds msgpackparsefuzzer.c...

OSV-2020-2014 Stack-buffer-overflow in flb_sds_cat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26237 Crash type: Stack-buffer-overflow READ Crash state: flbsdscat flbmsgpackgelfvalue flbmsgpacktogelf...

OSV-2020-2011 Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26215 Crash type: Null-dereference READ Crash state: NULL...

OSV-2020-2008 UNKNOWN WRITE in wolfCrypt_custom_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26214 Crash type: UNKNOWN WRITE Crash state: wolfCryptcustomfree wolfSSLFree GetDhPublicKey...

OSV-2020-2007 Heap-buffer-overflow in WelsDec::WelsCheckAndRecoverForFutureDecoding

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26220 Crash type: Heap-buffer-overflow WRITE Crash state: WelsDec::WelsCheckAndRecoverForFutureDecoding WelsDec::WelsInitBSliceRefList WelsDec::InitRefPicList...

OSV-2020-2005 UNKNOWN READ in grk::param_qcd::set_irrev_quant

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26207 Crash type: UNKNOWN READ Crash state: grk::paramqcd::setirrevquant grk::j2kreadSPCodSPCoc grk::j2kreadcod...

OSV-2020-2004 Use-of-uninitialized-value in grk::t1_ht::T1HT::postDecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26206 Crash type: Use-of-uninitialized-value Crash state: grk::t1ht::T1HT::postDecode grk::T1Decoder::decompressBlock grk::T1Decoder::decompress...

OSV-2020-2002 Heap-buffer-overflow in McChromaWithFragMv_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26198 Crash type: Heap-buffer-overflow READ 1 Crash state: McChromaWithFragMvc McChromassse3 WelsDec::BaseMC...

OSV-2020-2000 Heap-buffer-overflow in sctp_process_init

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26197 Crash type: Heap-buffer-overflow WRITE 1 Crash state: sctpprocessinit sctpprocesscookieexisting sctphandlecookieecho...

OSV-2020-1999 Bad-cast to pcpp::IDnsResource from invalid vptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26196 Crash type: Bad-cast Crash state: Bad-cast to pcpp::IDnsResource from invalid vptr pcpp::DnsLayer::parseResources pcpp::DnsLayer::DnsLayer...

OSV-2020-1995 Index-out-of-bounds in fp_read_radix_16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26163 Crash type: Index-out-of-bounds Crash state: fpreadradix16 fpreadradix mpreadradix...

OSV-2020-1993 Heap-buffer-overflow in ojph::local::rev_fetch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26166 Crash type: Heap-buffer-overflow READ 4 Crash state: ojph::local::revfetch ojph::local::ojphdecodecodeblock grk::t1ht::T1HT::decompress...

OSV-2020-1992 Use-of-uninitialized-value in LibRaw::ljpeg_diff

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26184 Crash type: Use-of-uninitialized-value Crash state: LibRaw::ljpegdiff LibRaw::pentaxloadraw LibRaw::unpack...

OSV-2020-1991 Use-of-uninitialized-value in RenderMVGContent

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26148 Crash type: Use-of-uninitialized-value Crash state: RenderMVGContent DrawImage ReadMVGImage...

OSV-2020-1990 Heap-buffer-overflow in sc_oberthur_parse_privateinfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26116 Crash type: Heap-buffer-overflow READ 1 Crash state: scoberthurparseprivateinfo scpkcs15emuoberthurinit scpkcs15emuoberthurinitex...

OSV-2020-1981 Stack-buffer-overflow in fuzz_reader_transmit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26103 Crash type: Stack-buffer-overflow WRITE Crash state: fuzzreadertransmit scsingletransmit sctransmit...

OSV-2020-1976 Use-of-uninitialized-value in FLAC::Decoder::FuzzerStream::write_callback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16503 Crash type: Use-of-uninitialized-value Crash state: FLAC::Decoder::FuzzerStream::writecallback writeaudioframetoclient readframe...

OSV-2020-1965 UNKNOWN READ in asn1_item_print_ctx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13920 Crash type: UNKNOWN READ Crash state: asn1itemprintctx asn1templateprintctx asn1itemprintctx...

OSV-2020-1945 UNKNOWN READ in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20038 Crash type: UNKNOWN READ Crash state: helpeructracecode...

OSV-2020-1946 Heap-buffer-overflow in x509_parse_ext_basic_constraints

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15451 Crash type: Heap-buffer-overflow READ 1 Crash state: x509parseextbasicconstraints x509parseextension x509parseextensions...

OSV-2020-1944 Use-of-uninitialized-value in RenderMVGContent

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26073 Crash type: Use-of-uninitialized-value Crash state: RenderMVGContent DrawCompositeMask RenderMVGContent...

OSV-2020-1928 UNKNOWN READ in net_field_length_size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19830 Crash type: UNKNOWN READ Crash state: netfieldlengthsize netfieldlengthllsafe readokex...

OSV-2020-1923 Heap-buffer-overflow in do_print_ex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13914 Crash type: Heap-buffer-overflow READ 1 Crash state: doprintex asn1itemprintctx ASN1itemprint...

OSV-2020-1902 Heap-buffer-overflow in asn1_get_next

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15408 Crash type: Heap-buffer-overflow READ 1 Crash state: asn1getnext x509parseextbasicconstraints x509parseextension...

OSV-2020-1899 Heap-buffer-overflow in DeblockChromaLt42_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26068 Crash type: Heap-buffer-overflow READ 1 Crash state: DeblockChromaLt42c DeblockChromaLt4H2c WelsDec::FilteringEdgeChromaHV...

OSV-2020-1898 Heap-buffer-overflow in WelsDec::UpdateP16x16RefIdx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26078 Crash type: Heap-buffer-overflow WRITE 2 Crash state: WelsDec::UpdateP16x16RefIdx WelsDec::PredBDirectTemporal WelsDec::ParseInterBInfo...

OSV-2020-1897 Heap-buffer-overflow in stbi__tga_load

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22651 Crash type: Heap-buffer-overflow READ 3 Crash state: stbitgaload stbiloadmain stbiloadandpostprocess8bit...

OSV-2020-1894 Heap-buffer-overflow in parquet::arrow::ApplyOriginalStorageMetadata

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26064 Crash type: Heap-buffer-overflow READ 4 Crash state: parquet::arrow::ApplyOriginalStorageMetadata parquet::arrow::SchemaManifest::Make parquet::arrow::FileReader::Make...

OSV-2020-1892 Use-of-uninitialized-value in stbi__expand_png_palette

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23234 Crash type: Use-of-uninitialized-value Crash state: stbiexpandpngpalette stbiparsepngfile stbidopng...

OSV-2020-1887 Heap-buffer-overflow in zmq::tcp_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26042 Crash type: Heap-buffer-overflow WRITE Crash state: zmq::tcpread zmq::streamenginebaset::read zmq::streamenginebaset::ineventinternal...

OSV-2020-1886 Use-of-uninitialized-value in gs_scan_token

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21622 Crash type: Use-of-uninitialized-value Crash state: gsscantoken interp gscallinterp...

OSV-2020-1885 Heap-use-after-free in xmlStaticCopyNode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26022 Crash type: Heap-use-after-free READ 4 Crash state: xmlStaticCopyNode xmlCopyNode xmlXIncludeLoadTxt...

OSV-2020-1883 Use-of-uninitialized-value in s_exD_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22225 Crash type: Use-of-uninitialized-value Crash state: sexDprocess sreadbuf sprocessreadbuf...

OSV-2020-1884 Segv on unknown address in process_ndpi_collected_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26015 Crash type: Segv on unknown address Crash state: processndpicollectedinfo packetprocessing ndpiworkflowprocesspacket...

OSV-2020-1882 Use-of-uninitialized-value in gx_dc_ht_colored_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21617 Crash type: Use-of-uninitialized-value Crash state: gxdchtcoloredread clistplaybackband clistplaybackfilebands...

OSV-2020-1879 Use-of-uninitialized-value in gp_pwrite_impl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21621 Crash type: Use-of-uninitialized-value Crash state: gppwriteimpl clistfwritechars cmdwriteband...

OSV-2020-1880 Use-of-uninitialized-value in c_pdf14trans_clist_read_update

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21640 Crash type: Use-of-uninitialized-value Crash state: cpdf14transclistreadupdate applycreatecompositor executecompositorqueue...

OSV-2020-1877 Use-of-uninitialized-value in FAPI_FF_get_glyph

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23115 Crash type: Use-of-uninitialized-value Crash state: FAPIFFgetglyph getfapiglyphdata loadtruetypeglyph...

OSV-2020-1878 Use-of-uninitialized-value in s_A85D_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21616 Crash type: Use-of-uninitialized-value Crash state: sA85Dprocess gsscantoken interp...

OSV-2020-1876 UNKNOWN READ in mem_mapped4_fill_rectangle

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22007 Crash type: UNKNOWN READ Crash state: memmapped4fillrectangle gxdcpurefillrectangle gxdefaultfillpage...

OSV-2020-1875 Heap-use-after-free in dict_find_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20652 Crash type: Heap-use-after-free READ 8 Crash state: dictfindstring gsmaintempnames gsmainfinit...

OSV-2020-1874 Use-of-uninitialized-value in load_truetype_glyph

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22182 Crash type: Use-of-uninitialized-value Crash state: loadtruetypeglyph TTLoadGlyph ttglyphload...

OSV-2020-1873 Use-of-uninitialized-value in zcheck_r6_password

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23440 Crash type: Use-of-uninitialized-value Crash state: zcheckr6password interp gscallinterp...