OSV-2020-1435 Stack-buffer-overflow in void put_epel_hv_fallback<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22174 Crash type: Stack-buffer-overflow READ 2 Crash state: void putepelhvfallback accelerationfunctions::puthevcepelhv void mcchroma...

OSV-2020-1439 Segv on unknown address in LocaleCompare

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21163 Crash type: Segv on unknown address Crash state: LocaleCompare CompareSplayTreeString Splay...

OSV-2020-1438 Use-of-uninitialized-value in PerceptibleReciprocal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21803 Crash type: Use-of-uninitialized-value Crash state: PerceptibleReciprocal CompositeImage MergeImageLayers...

OSV-2020-1427 Use-of-uninitialized-value in TextEndsWithNewline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13191 Crash type: Use-of-uninitialized-value Crash state: TextEndsWithNewline PPrintText PPrintScriptStyle...

OSV-2020-1432 Segv on unknown address in EvaluateObjectArgument

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19880 Crash type: Segv on unknown address Crash state: EvaluateObjectArgument ExprEvaluatorBase::handleCallExpr clang::StmtVisitorBase::Visit...

OSV-2020-1430 Segv on unknown address in clang::Parser::ParseCXXAmbiguousParenExpression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19617 Crash type: Segv on unknown address Crash state: clang::Parser::ParseCXXAmbiguousParenExpression clang::Parser::ParseParenExpression clang::Parser::ParseCastExpression...

OSV-2020-1431 Use-of-uninitialized-value in RoundToUnity

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19955 Crash type: Use-of-uninitialized-value Crash state: RoundToUnity CompositeImage MergeImageLayers...

OSV-2020-1429 Segv on unknown address in clang::OverloadExpr::find

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19972 Crash type: Segv on unknown address Crash state: clang::OverloadExpr::find clang::Sema::ResolveAndFixSingleFunctionTemplateSpecialization clang::Sema::CheckPlaceholderExpr...

OSV-2020-1428 Heap-buffer-overflow in yr_object_set_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Heap-buffer-overflow READ 10 Crash state: yrobjectsetstring dexparse dexload...

OSV-2020-1426 Segv on unknown address in clang::CXXRecordDecl::data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19132 Crash type: Segv on unknown address Crash state: clang::CXXRecordDecl::data clang::Sema::FinalizeVarWithDestructor clang::Sema::ActOnBlockStmtExpr...

OSV-2020-1423 Use-of-uninitialized-value in txt2sd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22219 Crash type: Use-of-uninitialized-value Crash state: txt2sd fuzzmdnsxht.cc txt2sd...

OSV-2020-1425 Use-of-uninitialized-value in dotnet_parse_com

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8901 Crash type: Use-of-uninitialized-value Crash state: dotnetparsecom dotnetload yrmodulesload...

OSV-2020-1421 Segv on unknown address in clang::FunctionProtoType::FunctionProtoType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21119 Crash type: Segv on unknown address Crash state: clang::FunctionProtoType::FunctionProtoType clang::ASTContext::getFunctionTypeInternal GetFullTypeForDeclarator...

OSV-2020-1422 Segv on unknown address in llvm::APInt::trunc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21207 Crash type: Segv on unknown address Crash state: llvm::APInt::trunc AnalyzeBitFieldAssignment clang::InitializationSequence::Perform...

OSV-2020-1417 Index-out-of-bounds in DHT::get_hv_rbg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23870 Crash type: Index-out-of-bounds Crash state: DHT::gethvrbg DHT::makehvdline DHT::makehvdirs...

OSV-2020-1420 Bad-cast to Sass::PreValue from Sass::Unary_Expression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15896 Crash type: Bad-cast Crash state: Bad-cast to Sass::PreValue from Sass::UnaryExpression Sass::SharedImpl::SharedImpl Sass::Parser::parseiekeywordarg...

OSV-2020-1414 Heap-buffer-overflow in format_generic_odp_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20003 Crash type: Heap-buffer-overflow READ 1 Crash state: formatgenericodpkey checkattrlen formatodpkeyattr...

OSV-2020-1416 Segv on unknown address in clang::Decl::AccessDeclContextSanity

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19117 Crash type: Segv on unknown address Crash state: clang::Decl::AccessDeclContextSanity LookupDirect clang::Sema::LookupQualifiedName...

OSV-2020-1413 Segv on unknown address in clang::Decl::AccessDeclContextSanity

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19071 Crash type: Segv on unknown address Crash state: clang::Decl::AccessDeclContextSanity clang::Sema::SetMemberAccessSpecifier clang::Sema::ActOnTag...

OSV-2020-1411 Segv on unknown address in clang::Sema::getCurLambda

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19243 Crash type: Segv on unknown address Crash state: clang::Sema::getCurLambda clang::Sema::ActOnFinishFullExpr clang::Sema::ActOnExprStmt...

OSV-2020-1409 UNKNOWN READ in cpu_arm_exec_armeb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23109 Crash type: UNKNOWN READ Crash state: cpuarmexecarmeb tcgcpuexecarmeb tcgexecallarmeb...

OSV-2020-1410 Use-of-uninitialized-value in float64_squash_input_denormal_aarch64eb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17032 Crash type: Use-of-uninitialized-value Crash state: float64squashinputdenormalaarch64eb float64tofloat32aarch64eb helpervfpfcvtsdaarch64eb...

OSV-2020-1412 Segv on unknown address in llvm::llvm_unreachable_internal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19317 Crash type: Segv on unknown address Crash state: llvm::llvmunreachableinternal clang::Sema::ActOnComment ActionCommentHandler::HandleComment...

OSV-2020-1407 Use-of-uninitialized-value in QPDFWriter::unparseObject

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18633 Crash type: Use-of-uninitialized-value Crash state: QPDFWriter::unparseObject QPDFWriter::writeObject QPDFWriter::writeStandard...

OSV-2020-1402 Heap-buffer-overflow in yr_object_set_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Heap-buffer-overflow READ Crash state: yrobjectsetstring dexparse dexload...

OSV-2020-1403 Use-of-uninitialized-value in put_weighted_pred_8_fallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22101 Crash type: Use-of-uninitialized-value Crash state: putweightedpred8fallback accelerationfunctions::putweightedpred generateinterpredictionsamples...

OSV-2020-1408 Segv on unknown address in clang::Sema::LookupTemplateName

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21152 Crash type: Segv on unknown address Crash state: clang::Sema::LookupTemplateName clang::Sema::isTemplateName clang::Parser::ParseOptionalCXXScopeSpecifier...

OSV-2020-1404 Use-of-uninitialized-value in LosslessReduceDepthOK

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22581 Crash type: Use-of-uninitialized-value Crash state: LosslessReduceDepthOK ReadOneMNGImage ReadMNGImage...

OSV-2020-1401 Use-of-uninitialized-value in LibRaw::parse_makernote_ADDRESS

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16377 Crash type: Use-of-uninitialized-value Crash state: LibRaw::parsemakernoteADDRESS LibRaw::parsemakernoteADDRESS LibRaw::parsetiffifd...

OSV-2020-1406 Use-of-uninitialized-value in LibRaw::parse_fuji_compressed_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21671 Crash type: Use-of-uninitialized-value Crash state: LibRaw::parsefujicompressedheader LibRaw::opendatastream LibRaw::openfile...

OSV-2020-1397 Stack-buffer-overflow in _TIFFVGetField

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23632 Crash type: Stack-buffer-overflow WRITE 4 Crash state: TIFFVGetField TIFFVGetField TIFFVGetFieldDefaulted...

OSV-2020-1398 Heap-buffer-overflow in yr_object_set_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Heap-buffer-overflow READ 14 Crash state: yrobjectsetstring dexparse dexload...

OSV-2020-1395 Heap-buffer-overflow in zmq::tcp_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23281 Crash type: Heap-buffer-overflow WRITE Crash state: zmq::tcpread zmq::streamenginebaset::read zmq::streamenginebaset::ineventinternal...

OSV-2020-1396 Segv on unknown address in llvm::llvm_unreachable_internal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23571 Crash type: Segv on unknown address Crash state: llvm::llvmunreachableinternal clang::Expr::HasSideEffects clang::Expr::HasSideEffects...

OSV-2020-1399 Segv on unknown address in clang::StmtVisitorBase<llvm::make_const_ptr, RecordExprEvaluator, bool>::Visit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19152 Crash type: Segv on unknown address Crash state: clang::StmtVisitorBase::Visit clang::StmtVisitorBase::Visit EvaluateInPlace...

OSV-2020-1394 Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23605 Crash type: Index-out-of-bounds Crash state: LibRaw::ahdinterpolaterandbinrgbandconverttocielab LibRaw::ahdinterpolaterandbandconverttocielab LibRaw::ahdinterpolate...

OSV-2020-1390 Use-of-uninitialized-value in LibRaw::panasonic_load_raw

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21256 Crash type: Use-of-uninitialized-value Crash state: LibRaw::panasonicloadraw LibRaw::unpack librawunpack...

OSV-2020-1387 Heap-buffer-overflow in yr_object_set_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Heap-buffer-overflow READ 8 Crash state: yrobjectsetstring dexparse dexload...

OSV-2020-1385 Segv on unknown address in clang::Parser::TryAnnotateCXXScopeToken

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21077 Crash type: Segv on unknown address Crash state: clang::Parser::TryAnnotateCXXScopeToken clang::Parser::TryParsePtrOperatorSeq clang::Parser::TryParseDeclarator...

OSV-2020-1386 Heap-buffer-overflow in parse_relocation_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24400 Crash type: Heap-buffer-overflow READ 4 Crash state: parserelocationinfo getrelocs64 relocs...

OSV-2020-1384 Segv on unknown address in llvm::llvm_unreachable_internal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19652 Crash type: Segv on unknown address Crash state: llvm::llvmunreachableinternal clang::operator clang::Sema::SetMemberAccessSpecifier...

OSV-2020-1383 Container-overflow in grk::T2Decode::read_packet_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24427 Crash type: Container-overflow READ 8 Crash state: grk::T2Decode::readpacketheader grk::T2Decode::decodepacket grk::T2Decode::decodepackets...

OSV-2020-1382 Use-of-uninitialized-value in nl_attr_is_valid

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19890 Crash type: Use-of-uninitialized-value Crash state: nlattrisvalid formatodptunattr formatodpkeyattr...

OSV-2020-1380 Use-of-uninitialized-value in stbi__jpeg_decode_block_prog_ac

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22589 Crash type: Use-of-uninitialized-value Crash state: stbijpegdecodeblockprogac stbiparseentropycodeddata stbidecodejpegimage...

OSV-2020-1379 Heap-buffer-overflow in dotnet_parse_com

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8901 Crash type: Heap-buffer-overflow READ 16 Crash state: dotnetparsecom dotnetload yrmodulesload...

OSV-2020-1378 Segv on unknown address in clang::Expr::EvaluateKnownConstInt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20256 Crash type: Segv on unknown address Crash state: clang::Expr::EvaluateKnownConstInt clang::FieldDecl::getBitWidthValue clang::FieldDecl::isZeroLengthBitField...

OSV-2020-1375 Use-of-uninitialized-value in WriteBlob

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12473 Crash type: Use-of-uninitialized-value Crash state: WriteBlob WriteEPTImage WriteImage...

OSV-2020-1377 Segv on unknown address in slice_segment_header::operator=

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22924 Crash type: Segv on unknown address Crash state: slicesegmentheader::operator= slicesegmentheader::read decodercontext::readsliceNAL...

OSV-2020-1373 Segv on unknown address in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23552 Crash type: Segv on unknown address Crash state: helpeructracecode...

OSV-2020-1371 Bad-cast to pcpp::IDnsResource from invalid vptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23926 Crash type: Bad-cast Crash state: Bad-cast to pcpp::IDnsResource from invalid vptr pcpp::DnsLayer::parseResources pcpp::DnsLayer::DnsLayer...