OSV-2020-1872 Use-of-uninitialized-value in s_exD_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21643 Crash type: Use-of-uninitialized-value Crash state: sexDprocess sreadbuf sgets...

OSV-2020-1871 Segv on unknown address in s_DCTD_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21416 Crash type: Segv on unknown address Crash state: sDCTDprocess sreadbuf sprocessreadbuf...

OSV-2020-1870 Use-of-uninitialized-value in get_fapi_glyph_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22752 Crash type: Use-of-uninitialized-value Crash state: getfapiglyphdata loadtruetypeglyph TTLoadGlyph...

OSV-2020-1869 Use-of-uninitialized-value in gs_scan_token

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21625 Crash type: Use-of-uninitialized-value Crash state: gsscantoken tokenexeccontinue interp...

OSV-2020-1867 Use-of-uninitialized-value in PerceptibleReciprocal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26023 Crash type: Use-of-uninitialized-value Crash state: PerceptibleReciprocal CompositeImage loadlevel...

OSV-2020-1864 Heap-use-after-free in grk::TileProcessor::~TileProcessor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26008 Crash type: Heap-use-after-free READ 8 Crash state: grk::TileProcessor::TileProcessor grk::CodeStream::decompresstiles grk::CodeStream::dodecompress...

OSV-2020-1863 Bad-cast to pcpp::Layer from invalid vptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26013 Crash type: Bad-cast Crash state: Bad-cast to pcpp::Layer from invalid vptr pcpp::IDnsResource::getRawData pcpp::DnsResource::getDataLength...

OSV-2020-1862 Use-of-uninitialized-value in ares_parse_caa_reply

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26012 Crash type: Use-of-uninitialized-value Crash state: aresparsecaareply ares-test-fuzz.c...

OSV-2020-1860 Stack-buffer-overflow in sc_get_response

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25998 Crash type: Stack-buffer-overflow WRITE Crash state: scgetresponse sctransmit sctransmitapdu...

OSV-2020-1857 Heap-buffer-overflow in WelsDec::WelsDecodeMbCabacPSlice

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25973 Crash type: Heap-buffer-overflow WRITE 16 Crash state: WelsDec::WelsDecodeMbCabacPSlice WelsDec::WelsDecodeSlice WelsDec::DecodeCurrentAccessUnit...

OSV-2020-1855 Heap-buffer-overflow in WelsDec::UpdateP16x16MotionInfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25961 Crash type: Heap-buffer-overflow WRITE 4 Crash state: WelsDec::UpdateP16x16MotionInfo WelsDec::ParseInterPMotionInfoCabac WelsDec::WelsDecodeMbCabacPSliceBaseMode0...

OSV-2020-1854 Use-of-uninitialized-value in UpdateDecStatNoFreezingInfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25970 Crash type: Use-of-uninitialized-value Crash state: UpdateDecStatNoFreezingInfo UpdateDecStat WelsDec::DecodeFrameConstruction...

OSV-2020-1853 Heap-buffer-overflow in WelsDec::DoErrorConSliceCopy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25932 Crash type: Heap-buffer-overflow READ 1 Crash state: WelsDec::DoErrorConSliceCopy WelsDec::ImplementErrorCon WelsDec::CheckAndFinishLastPic...

OSV-2020-1852 UNKNOWN READ in WelsCommon::WelsFree

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25939 Crash type: UNKNOWN READ Crash state: WelsCommon::WelsFree WelsCommon::CMemoryAlign::WelsFree WelsDec::FreePicture...

OSV-2020-1851 Stack-buffer-underflow in fmt::v6::basic_format_args<fmt::v6::basic_format_context<std::__1::back_insert_i

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21794 Crash type: Stack-buffer-underflow READ 16 Crash state: fmt::v6::basicformatargsfmt::v6::basicformatcontextstd::1::backinserti fmt::v6::basicformatargsfmt::v6::basicformatcontextstd::1::backinserti...

OSV-2020-1850 Heap-buffer-overflow in fmt::v6::basic_string_view<char>::basic_string_view

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21763 Crash type: Heap-buffer-overflow READ 2 Crash state: fmt::v6::basicstringview::basicstringview fmt::v6::basicformatargfmt::v6::basicformatcontextstd::1::backinsertit...

OSV-2020-1849 Use-of-uninitialized-value in RDKit::SubstanceGroup::getBondType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25906 Crash type: Use-of-uninitialized-value Crash state: RDKit::SubstanceGroup::getBondType RDKit::SubstanceGroup::addCState RDKit::SGroupParsing::ParseSGroupV2000SBVLine...

OSV-2020-1848 Heap-buffer-overflow in sc_oberthur_parse_publicinfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25943 Crash type: Heap-buffer-overflow READ 1 Crash state: scoberthurparsepublicinfo scpkcs15emuoberthurinit scpkcs15emuoberthurinitex...

OSV-2020-1847 Heap-buffer-overflow in WelsDec::NeedErrorCon

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25921 Crash type: Heap-buffer-overflow READ 1 Crash state: WelsDec::NeedErrorCon WelsDec::CheckAndFinishLastPic WelsDecodeBs...

OSV-2020-1844 Heap-buffer-overflow in hextoint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25935 Crash type: Heap-buffer-overflow READ 1 Crash state: hextoint getnamefromEFDatiPersonali itacnsadddatafiles...

OSV-2020-1845 Stack-buffer-overflow in void put_epel_hv_fallback<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25937 Crash type: Stack-buffer-overflow READ 2 Crash state: void putepelhvfallback accelerationfunctions::puthevcepelv void mcchroma...

OSV-2020-1843 Heap-buffer-overflow in SendUserAuthPkOk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25926 Crash type: Heap-buffer-overflow READ Crash state: SendUserAuthPkOk DoUserAuthRequestPublicKey DoUserAuthRequest...

OSV-2020-1842 Heap-buffer-overflow in parquet::arrow::SchemaManifest::Make

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25933 Crash type: Heap-buffer-overflow READ 8 Crash state: parquet::arrow::SchemaManifest::Make parquet::arrow::FileReader::Make parquet::arrow::internal::FuzzReader...

OSV-2020-1840 Heap-use-after-free in avifFileTypeIsCompatible

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25910 Crash type: Heap-use-after-free READ 4 Crash state: avifFileTypeIsCompatible avifDecoderParse avifdecodefuzzer.cc...

OSV-2020-1841 UNKNOWN READ in avifRWDataSet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25911 Crash type: UNKNOWN READ Crash state: avifRWDataSet avifParseItemDataBox avifParseMetaBox...

OSV-2020-1839 UNKNOWN READ in flb_sds_cat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25904 Crash type: UNKNOWN READ Crash state: flbsdscat flbmsgpackgelfkey flbmsgpackgelfflatten...

OSV-2020-1836 Heap-buffer-overflow in hextoint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25885 Crash type: Heap-buffer-overflow READ 7 Crash state: hextoint getnamefromEFDatiPersonali itacnsadddatafiles...

OSV-2020-1835 Stack-buffer-overflow in fmt::v7::detail::buffer<char>::push_back

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25884 Crash type: Stack-buffer-overflow READ 1 Crash state: fmt::v7::detail::buffer::pushback std::1::backinsertiterator ::operator= fmt::v7::detail::bufferappender std::1::copyconstexprchar const, f...

OSV-2020-1834 Stack-buffer-overflow in onigenc_unicode_get_case_fold_codes_by_str

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25893 Crash type: Stack-buffer-overflow WRITE 4 Crash state: onigencunicodegetcasefoldcodesbystr utf16begetcasefoldcodesbystr unravelcasefoldstring...

OSV-2020-1833 Heap-buffer-overflow in avifROStreamRead

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25903 Crash type: Heap-buffer-overflow READ 4 Crash state: avifROStreamRead avifROStreamReadU32 avifROStreamReadBoxHeader...

OSV-2020-1830 Heap-use-after-free in grk::TileProcessor::~TileProcessor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25873 Crash type: Heap-use-after-free READ 8 Crash state: grk::TileProcessor::TileProcessor grk::CodeStream::decompresstiles grk::CodeStream::dodecompress...

OSV-2020-1827 Heap-buffer-overflow in http_process_user_agent

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25845 Crash type: Heap-buffer-overflow READ Crash state: httpprocessuseragent processchlo ndpisearchquic...

OSV-2020-1820 Stack-buffer-overflow in hermes::regex::Parser<hermes::regex::Regex<hermes::regex::UTF16RegexTraits>, cha

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25815 Crash type: Stack-buffer-overflow READ 2 Crash state: hermes::regex::Parser, cha hermes::regex::Parser, cha hermes::regex::Parser, cha...

OSV-2020-1819 Heap-buffer-overflow in void cv::copyToMat<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25779 Crash type: Heap-buffer-overflow READ 4 Crash state: void cv::copyToMat cv::decodeSRGBData cv::Jpeg2KOpjDecoder::readData...

OSV-2020-1818 Use-of-uninitialized-value in grk::TileProcessor::prepare_sod_decoding

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25798 Crash type: Use-of-uninitialized-value Crash state: grk::TileProcessor::preparesoddecoding grk::CodeStream::parsemarkers grk::CodeStream::decompresstiles...

OSV-2020-1816 Heap-buffer-overflow in encoded_to_buf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25785 Crash type: Heap-buffer-overflow WRITE 1 Crash state: encodedtobuf flbutilswritestr msgpack2json...

OSV-2020-1813 Heap-buffer-overflow in flb_msgpack_to_gelf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25780 Crash type: Heap-buffer-overflow READ 4 Crash state: flbmsgpacktogelf flbmsgpackrawtogelf msgpacktogelffuzzer.c...

OSV-2020-1809 UNKNOWN WRITE in Imf_2_5::copyIntoFrameBuffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25770 Crash type: UNKNOWN WRITE Crash state: Imf25::copyIntoFrameBuffer Imf25::LineBufferTask::execute IlmThread25::NullThreadPoolProvider::addTask...

OSV-2020-1807 UNKNOWN READ in __libcpp_memchr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25711 Crash type: UNKNOWN READ Crash state: libcppmemchr memchr pcpp::crossplatformmemmem...

OSV-2020-1805 Stack-buffer-overflow in rijndaelSetupEncrypt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21329 Crash type: Stack-buffer-overflow READ 1 Crash state: rijndaelSetupEncrypt rijndaelSetupDecrypt aesdecrypt...

OSV-2020-1804 Heap-buffer-overflow in text_normalize_buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22211 Crash type: Heap-buffer-overflow READ 1 Crash state: textnormalizebuffer arjreadmainheader cliunarjopen...

OSV-2020-1802 Heap-buffer-overflow in cli_codepage_to_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21960 Crash type: Heap-buffer-overflow READ Crash state: clicodepagetoutf8 clivbareaddirnew clivbascandirnew...

OSV-2020-1792 Heap-buffer-overflow in text_normalize_buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20464 Crash type: Heap-buffer-overflow READ 1 Crash state: textnormalizebuffer arjreadfileheader cliscanarj...

OSV-2020-1787 Use-of-uninitialized-value in zend_generator_search_multi_children_node

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25678 Crash type: Use-of-uninitialized-value Crash state: zendgeneratorsearchmultichildrennode zendgeneratoraddchild zendgeneratoryieldfrom...

OSV-2020-1784 Use-of-uninitialized-value in put_unweighted_pred_16_fallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25707 Crash type: Use-of-uninitialized-value Crash state: putunweightedpred16fallback accelerationfunctions::putunweightedpred generateinterpredictionsamples...

OSV-2020-1782 Heap-buffer-overflow in cli_codepage_to_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23499 Crash type: Heap-buffer-overflow READ Crash state: clicodepagetoutf8 clivbareaddirnew clivbascandirnew...

OSV-2020-1779 Heap-use-after-free in zend_gc_addref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25697 Crash type: Heap-use-after-free READ 4 Crash state: zendgcaddref zendgeneratorupdatecurrent zendgeneratordtorstorage...

OSV-2020-1777 Heap-buffer-overflow in exif_process_IFD_in_MAKERNOTE

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19044 Crash type: Heap-buffer-overflow READ 9 Crash state: exifprocessIFDinMAKERNOTE exifprocessIFDTAG exifprocessIFDinTIFF...

OSV-2020-1768 Memcpy-param-overlap in zend_lex_tstring

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23547 Crash type: Memcpy-param-overlap Crash state: zendlextstring zendparse zendcompile...

OSV-2020-1762 Heap-use-after-free in gc_mark_grey

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23350 Crash type: Heap-use-after-free READ 4 Crash state: gcmarkgrey gcmarkroots zendgccollectcycles...