OSV-2020-1507 Index-out-of-bounds in MemoryRemoveTrailingZeros

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23127 Crash type: Index-out-of-bounds Crash state: MemoryRemoveTrailingZeros CheckPWAuthSession CheckAuthSession...

OSV-2020-1505 Heap-buffer-overflow in yr_object_set_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Heap-buffer-overflow READ 16 Crash state: yrobjectsetstring dexparse dexload...

OSV-2020-1506 Invalid-free in llvm_ks::SmallVectorImpl<llvm_ks::MCFixup>::~SmallVectorImpl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22371 Crash type: Invalid-free Crash state: llvmks::SmallVectorImpl::SmallVectorImpl llvmks::MCEncodedFragmentWithFixups::MCEncodedFragmentWithFixups llvmks::MCFragment::destroy...

OSV-2020-1503 Use-of-uninitialized-value in clip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22181 Crash type: Use-of-uninitialized-value Crash state: clip OpYCbCr420toRGB8bit::convertcolorspace heif::ColorConversionPipeline::convertimage...

OSV-2020-1502 Use-of-uninitialized-value in void add_residual_fallback<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22810 Crash type: Use-of-uninitialized-value Crash state: void addresidualfallback void accelerationfunctions::addresidual void scalecoefficientsinternal...

OSV-2020-1504 Segv on unknown address in clang::Sema::ActOnMethodDeclaration

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19620 Crash type: Segv on unknown address Crash state: clang::Sema::ActOnMethodDeclaration clang::Parser::ParseObjCMethodDecl clang::Parser::ParseObjCMethodDefinition...

OSV-2020-1498 Segv on unknown address in llvm::llvm_unreachable_internal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21075 Crash type: Segv on unknown address Crash state: llvm::llvmunreachableinternal clang::Sema::CheckAbsoluteValueFunction clang::Sema::CheckFunctionCall...

OSV-2020-1500 Heap-buffer-overflow in dotnet_parse_com

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8901 Crash type: Heap-buffer-overflow READ Crash state: dotnetparsecom dotnetload yrmodulesload...

OSV-2020-1495 Segv on unknown address in clang::ObjCMethodDecl::getOverriddenMethods

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19086 Crash type: Segv on unknown address Crash state: clang::ObjCMethodDecl::getOverriddenMethods clang::ObjCMethodDecl::findPropertyDecl clang::Sema::DiagnoseUseOfDecl...

OSV-2020-1491 Use-of-uninitialized-value in UA_Array_copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22250 Crash type: Use-of-uninitialized-value Crash state: UAArraycopy Stringcopy LocalizedTextcopy...

OSV-2020-1489 Segv on unknown address in H5O_chunk_deserialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21315 Crash type: Segv on unknown address Crash state: H5Ochunkdeserialize H5Ocachechkload H5Cprotect...

OSV-2020-1490 Segv on unknown address in HasAccess

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19085 Crash type: Segv on unknown address Crash state: HasAccess IsAccessible CheckEffectiveAccess...

OSV-2020-1494 Segv on unknown address in FindDeclaringClass

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20893 Crash type: Segv on unknown address Crash state: FindDeclaringClass diagnoseBadDirectAccess CheckEffectiveAccess...

OSV-2020-1493 Heap-buffer-overflow in yr_object_set_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Heap-buffer-overflow READ 7 Crash state: yrobjectsetstring dexparse dexload...

OSV-2020-1488 Segv on unknown address in llvm::llvm_unreachable_internal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20787 Crash type: Segv on unknown address Crash state: llvm::llvmunreachableinternal findDefaultInitializer checkDuplicateDefaultInit...

OSV-2020-1486 Bad-cast to Sass::PreValue from Sass::Unary_Expression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15896 Crash type: Bad-cast Crash state: Bad-cast to Sass::PreValue from Sass::UnaryExpression Sass::SharedImpl::SharedImpl Sass::Parser::parsevalueschema...

OSV-2020-1480 Heap-buffer-overflow in yr_object_set_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Heap-buffer-overflow READ 15 Crash state: yrobjectsetstring dexparse dexload...

OSV-2020-1481 Heap-buffer-overflow in load_encoded_method

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Heap-buffer-overflow READ 4 Crash state: loadencodedmethod dexparse dexload...

OSV-2020-1485 Segv on unknown address in clang::Sema::ActOnStartOfFunctionDef

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19623 Crash type: Segv on unknown address Crash state: clang::Sema::ActOnStartOfFunctionDef clang::Parser::ParseFunctionDefinition clang::Parser::ParseDeclGroup...

OSV-2020-1479 Segv on unknown address in clang::Preprocessor::AnnotatePreviousCachedTokens

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19064 Crash type: Segv on unknown address Crash state: clang::Preprocessor::AnnotatePreviousCachedTokens clang::Parser::TryAnnotateTypeOrScopeTokenAfterScopeSpec clang::Parser::TryAnnotateTypeOrScopeToken...

OSV-2020-1478 Heap-buffer-overflow in load_jpeg_image

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23153 Crash type: Heap-buffer-overflow READ 1 Crash state: loadjpegimage stbijpegload stbiloadmain...

OSV-2020-1472 Heap-buffer-overflow in stbi__YCbCr_to_RGB_simd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22605 Crash type: Heap-buffer-overflow READ 8 Crash state: stbiYCbCrtoRGBsimd loadjpegimage stbijpegload...

OSV-2020-1475 Use-of-uninitialized-value in LibRaw::open_datastream

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21537 Crash type: Use-of-uninitialized-value Crash state: LibRaw::opendatastream LibRaw::openfile librawopenfile...

OSV-2020-1474 Heap-buffer-overflow in dotnet_parse_com

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8901 Crash type: Heap-buffer-overflow READ 8 Crash state: dotnetparsecom dotnetload yrmodulesload...

OSV-2020-1473 Segv on unknown address in LValue::addUnsizedArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19704 Crash type: Segv on unknown address Crash state: LValue::addUnsizedArray PointerExprEvaluator::VisitCastExpr clang::StmtVisitorBase::Visit...

OSV-2020-1476 Heap-buffer-overflow in read_uleb128

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Heap-buffer-overflow READ 1 Crash state: readuleb128 dexparse dexload...

OSV-2020-1469 Segv on unknown address in clang::Sema::ActOnTag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19182 Crash type: Segv on unknown address Crash state: clang::Sema::ActOnTag clang::Parser::ParseEnumSpecifier clang::Parser::ParseDeclarationSpecifiers...

OSV-2020-1470 Segv on unknown address in clang::Sema::getCurBlock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19622 Crash type: Segv on unknown address Crash state: clang::Sema::getCurBlock clang::Sema::makeTypoCorrectionConsumer clang::Sema::CorrectTypoDelayed...

OSV-2020-1466 Segv on unknown address in clang::Sema::PushDeclContext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19062 Crash type: Segv on unknown address Crash state: clang::Sema::PushDeclContext clang::Sema::ActOnStartOfObjCMethodDef clang::Parser::ParseLexedObjCMethodDefs...

OSV-2020-1464 Heap-buffer-overflow in dotnet_parse_com

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8901 Crash type: Heap-buffer-overflow READ 12 Crash state: dotnetparsecom dotnetload yrmodulesload...

OSV-2020-1467 Segv on unknown address in llvm::APInt::udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19272 Crash type: Segv on unknown address Crash state: llvm::APInt::udiv llvm::APInt::sdiv ComplexExprEvaluator::VisitBinaryOperator...

OSV-2020-1465 Segv on unknown address in clang::Parser::parseObjCTypeArgsAndProtocolQualifiers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23785 Crash type: Segv on unknown address Crash state: clang::Parser::parseObjCTypeArgsAndProtocolQualifiers clang::Parser::parseObjCTypeArgsAndProtocolQualifiers clang::Parser::TryAnnotateTypeOrScopeTokenAfterScopeSpec...

OSV-2020-1462 Segv on unknown address in clang::Sema::SetCtorInitializers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19136 Crash type: Segv on unknown address Crash state: clang::Sema::SetCtorInitializers clang::Sema::DefineImplicitDefaultConstructor clang::Sema::runWithSufficientStackSpace...

OSV-2020-1459 Segv on unknown address in clang::Sema::LookupQualifiedName

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19181 Crash type: Segv on unknown address Crash state: clang::Sema::LookupQualifiedName clang::Sema::CppLookupName clang::Sema::LookupName...

OSV-2020-1461 Heap-buffer-overflow in yr_object_set_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Heap-buffer-overflow READ 6 Crash state: yrobjectsetstring dexparse dexload...

OSV-2020-1463 Segv on unknown address in llvm::detail::IEEEFloat::roundSignificandWithExponent

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19171 Crash type: Segv on unknown address Crash state: llvm::detail::IEEEFloat::roundSignificandWithExponent llvm::detail::IEEEFloat::convertFromDecimalString llvm::detail::IEEEFloat::convertFromString...

OSV-2020-1456 Segv on unknown address in clang::SourceManager::getFileIDLoaded

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19205 Crash type: Segv on unknown address Crash state: clang::SourceManager::getFileIDLoaded clang::SourceManager::isAtEndOfImmediateMacroExpansion clang::Lexer::isAtEndOfMacroExpansion...

OSV-2020-1453 UNKNOWN READ in RDKit::labelRecursivePatterns

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24352 Crash type: UNKNOWN READ Crash state: RDKit::labelRecursivePatterns RDKit::SmartsToMol RDKit::ParseMarvinSmartsLine...

OSV-2020-1455 Segv on unknown address in clang::Parser::ParseObjCInterfaceDeclList

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19088 Crash type: Segv on unknown address Crash state: clang::Parser::ParseObjCInterfaceDeclList clang::Parser::ParseObjCAtInterfaceDeclaration clang::Parser::ParseObjCAtDirectives...

OSV-2020-1457 Segv on unknown address in llvm::APInt::udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19180 Crash type: Segv on unknown address Crash state: llvm::APInt::udiv ComplexExprEvaluator::VisitBinaryOperator clang::StmtVisitorBase::Visit...

OSV-2020-1452 Heap-buffer-overflow in yr_object_set_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Heap-buffer-overflow READ 12 Crash state: yrobjectsetstring dexparse dexload...

OSV-2020-1448 Global-buffer-overflow in vte_write_debug

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22203 Crash type: Global-buffer-overflow READ 1 Crash state: vtewritedebug sendprimaryda doesc...

OSV-2020-1445 Use-of-uninitialized-value in LibRaw::copy_bayer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23712 Crash type: Use-of-uninitialized-value Crash state: LibRaw::copybayer LibRaw::raw2imageex LibRaw::dcrawprocess...

OSV-2020-1446 Segv on unknown address in clang::Sema::CreateOverloadedBinOp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19567 Crash type: Segv on unknown address Crash state: clang::Sema::CreateOverloadedBinOp BuildOverloadedBinOp clang::Sema::BuildBinOp...

OSV-2020-1441 Heap-buffer-overflow in void apply_sao_internal<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21935 Crash type: Heap-buffer-overflow READ 1 Crash state: void applysaointernal void applysao threadtasksao::work...

OSV-2020-1442 Segv on unknown address in clang::CXXRecordDecl::data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19228 Crash type: Segv on unknown address Crash state: clang::CXXRecordDecl::data getDefaultInitValue EvaluateVarDecl...

OSV-2020-1443 Segv on unknown address in clang::Sema::ActOnCapScopeReturnStmt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20420 Crash type: Segv on unknown address Crash state: clang::Sema::ActOnCapScopeReturnStmt clang::Sema::BuildReturnStmt clang::Sema::ActOnReturnStmt...

OSV-2020-1440 Use-of-uninitialized-value in PPrintText

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13014 Crash type: Use-of-uninitialized-value Crash state: PPrintText prvTidyPPrintTree prvTidyPPrintTree...

OSV-2020-1444 Heap-buffer-overflow in void mc_chroma<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22678 Crash type: Heap-buffer-overflow READ 2 Crash state: void mcchroma generateinterpredictionsamples decodepredictionunit...

OSV-2020-1438 Use-of-uninitialized-value in PerceptibleReciprocal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21803 Crash type: Use-of-uninitialized-value Crash state: PerceptibleReciprocal CompositeImage MergeImageLayers...