4483 matches found
OSV-2020-1076 Stack-buffer-overflow in string_scan_range
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15467 Crash type: Stack-buffer-overflow WRITE 1 Crash state: stringscanrange getstringsrange rbinfilegetstrings...
OSV-2020-1081 UNKNOWN WRITE in ideint_process
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17077 Crash type: UNKNOWN WRITE Crash state: ideintprocess impeg2ddeinterlace impeg2ddecpicdatathread...
OSV-2020-1082 Use-of-uninitialized-value in processClientServerHello
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21296 Crash type: Use-of-uninitialized-value Crash state: processClientServerHello processTLSBlock ndpisearchtlstcp...
OSV-2020-1080 Negative-size-param in fuzz_tlv_to_string
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16696 Crash type: Negative-size-param Crash state: fuzztlvtostring fuzzparsetlv curlfuzzer.cc...
OSV-2020-1074 Heap-buffer-overflow in SHA1Transform
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18742 Crash type: Heap-buffer-overflow READ 4 Crash state: SHA1Transform SHA1Update getSSCertificateFingerprint...
OSV-2020-1075 Use-of-uninitialized-value in processClientServerHello
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21349 Crash type: Use-of-uninitialized-value Crash state: processClientServerHello processTLSBlock ndpisearchtlstcp...
OSV-2020-1078 Heap-buffer-overflow in xmlXPathCompileExpr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18385 Crash type: Heap-buffer-overflow READ 4 Crash state: xmlXPathCompileExpr xmlXPathCtxtCompile xsltFuzzXPath...
OSV-2020-1083 Heap-use-after-free in rpl_glob
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20176 Crash type: Heap-use-after-free READ Crash state: rplglob readconfigexpand readconfigexpand...
OSV-2020-1062 Use-of-uninitialized-value in ihevc_recon_4x4_ttype1
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18991 Crash type: Use-of-uninitialized-value Crash state: ihevcrecon4x4ttype1 ihevcdiquantitransreconctb ihevcdprocess...
OSV-2020-1065 Use-of-uninitialized-value in xsltNumberFormatInsertNumbers
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14471 Crash type: Use-of-uninitialized-value Crash state: xsltNumberFormatInsertNumbers xsltNumberFormat xsltNumber...
OSV-2020-1060 Use-of-uninitialized-value in ZSTD_createDDict_advanced
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23732 Crash type: Use-of-uninitialized-value Crash state: ZSTDcreateDDictadvanced ZSTDcreateDDict bloscrundecompressionwithcontext...
OSV-2020-1064 Heap-buffer-overflow in ndr_push_bytes
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22926 Crash type: Heap-buffer-overflow READ 2 Crash state: ndrpushbytes ndrpusharrayuint8 ndrpushnbtrdatadata...
OSV-2020-1069 Use-of-uninitialized-value in inflate
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13289 Crash type: Use-of-uninitialized-value Crash state: inflate ZIPDecode TIFFReadEncodedTileAndAllocBuffer...
OSV-2020-1066 Heap-buffer-overflow in dav1dFeedData
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21947 Crash type: Heap-buffer-overflow READ Crash state: dav1dFeedData dav1dCodecGetNextImage avifDecoderNextImage...
OSV-2020-1049 Heap-use-after-free in WelsDec::WelsReorderRefList
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14027 Crash type: Heap-use-after-free READ 4 Crash state: WelsDec::WelsReorderRefList WelsDec::InitRefPicList WelsDec::DecodeCurrentAccessUnit...
OSV-2020-1050 UNKNOWN READ in arrow::Status arrow::internal::ValidateArrayVisitor::ValidateListArray<arrow::La
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20115 Crash type: UNKNOWN READ Crash state: arrow::Status arrow::internal::ValidateArrayVisitor::ValidateListArray arrow::internal::ValidateArray...
OSV-2020-1054 Heap-buffer-overflow in wabt::string_view::compare
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18962 Crash type: Heap-buffer-overflow READ 6 Crash state: wabt::stringview::compare wabt::operator== wabt::BinaryReader::ReadCustomSection...
OSV-2020-1056 Use-of-uninitialized-value in xmlStrlen
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15069 Crash type: Use-of-uninitialized-value Crash state: xmlStrlen xmlBufferAdd xmlBufferCat...
OSV-2020-1058 Heap-buffer-overflow in arrow::UnionType::UnionType
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20116 Crash type: Heap-buffer-overflow WRITE 4 Crash state: arrow::UnionType::UnionType arrow::union arrow::ipc::internal::ConcreteTypeFromFlatbuffer...
OSV-2020-1053 UNKNOWN READ in js_parse_source_element
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21404 Crash type: UNKNOWN READ Crash state: jsparsesourceelement JSEvalInternal JSEval...
OSV-2020-1051 Global-buffer-overflow in kencodingprober::nsCodingStateMachine::NextState
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12918 Crash type: Global-buffer-overflow READ 4 Crash state: kencodingprober::nsCodingStateMachine::NextState kencodingprober::nsEscCharSetProber::HandleData kcodecsfuzzer.cc...
OSV-2020-1042 Heap-use-after-free in WelsDec::MapColToList0
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14267 Crash type: Heap-use-after-free READ 4 Crash state: WelsDec::MapColToList0 WelsDec::PredBDirectTemporal WelsDec::WelsDecodeMbCavlcBSlice...
OSV-2020-1046 Stack-buffer-overflow in sc_pkcs15emu_object_add
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19251 Crash type: Stack-buffer-overflow READ Crash state: scpkcs15emuobjectadd scpkcs15emucoolkeyinit scpkcs15emucoolkeyinitex...
OSV-2020-1047 UNKNOWN READ in arrow::ipc::internal::FieldFromFlatbuffer
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20123 Crash type: UNKNOWN READ Crash state: arrow::ipc::internal::FieldFromFlatbuffer arrow::ipc::internal::FieldFromFlatbuffer arrow::ipc::internal::GetSchema...
OSV-2020-1043 Heap-buffer-overflow in xport_construct_format
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12569 Crash type: Heap-buffer-overflow WRITE Crash state: xportconstructformat xportreadlabelsv9 xportreadvariables...
OSV-2020-1030 Heap-buffer-overflow in ih264d_compute_bs_non_mbaff_thread
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16505 Crash type: Heap-buffer-overflow READ 8 Crash state: ih264dcomputebsnonmbaffthread ih264drecondeblkslice ih264drecondeblkthread...
OSV-2020-1036 Heap-use-after-free in void draco::Metadata::AddEntry<std::__1::vector<unsigned char, std::__1::allocat
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23344 Crash type: Heap-use-after-free READ 8 Crash state: void draco::Metadata::AddEntrystd::1::vectorunsigned char, std::1::allocat draco::MetadataDecoder::DecodeEntry draco::MetadataDecoder::DecodeMetadata...
OSV-2020-1041 Use-of-uninitialized-value in McCopyWidthEq16_c
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13005 Crash type: Use-of-uninitialized-value Crash state: McCopyWidthEq16c WelsDec::BaseMC WelsDec::GetInterPred...
OSV-2020-1035 UNKNOWN READ in subpixel_ssse3.asm:1165
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14478 Crash type: UNKNOWN READ Crash state: subpixelssse3.asm:1165...
OSV-2020-1040 Heap-buffer-overflow in decode_bit_string
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16615 Crash type: Heap-buffer-overflow READ 1 Crash state: decodebitstring decodebitfield asn1decodeentry...
OSV-2020-1037 Heap-buffer-overflow in Sass::Prelexer::quoted_string
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15890 Crash type: Heap-buffer-overflow READ 1 Crash state: Sass::Prelexer::quotedstring char const Sass::Prelexer::sequence& char const Sass::Prelexer::alternatives&...
OSV-2020-1039 UNKNOWN WRITE in putgreytile
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13283 Crash type: UNKNOWN WRITE Crash state: putgreytile gtStripContig TIFFReadRGBAStripExt...
OSV-2020-1029 Heap-buffer-overflow in iotlb_to_region_mips
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17193 Crash type: Heap-buffer-overflow READ 8 Crash state: iotlbtoregionmips getpageaddrcodemips tbfindslowmips...
OSV-2020-1015 Heap-buffer-overflow in ndpi_search_memcached
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19324 Crash type: Heap-buffer-overflow READ 13 Crash state: ndpisearchmemcached checkndpiudpflowfunc ndpidetectionprocesspacket...
OSV-2020-1018 Heap-use-after-free in draco::Metadata::AddSubMetadata
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23342 Crash type: Heap-use-after-free READ 8 Crash state: draco::Metadata::AddSubMetadata draco::MetadataDecoder::DecodeMetadata draco::MetadataDecoder::DecodeGeometryMetadata...
OSV-2020-1012 Heap-buffer-overflow in sas_read8
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12723 Crash type: Heap-buffer-overflow READ 8 Crash state: sasread8 sas7bdatparsecolumnsizesubheader sas7bdatparsepagepass2...
OSV-2020-1013 Heap-buffer-overflow in ndpi_search_amazon_video
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19100 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpisearchamazonvideo checkndpitcpflowfunc ndpidetectionprocesspacket...
OSV-2020-1019 Stack-buffer-overflow in getTLScertificate
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19544 Crash type: Stack-buffer-overflow WRITE 6 Crash state: getTLScertificate tlsDetectProtocolFromCertificate ndpisearchtlstcpudp...
OSV-2020-1025 UNKNOWN READ in auto LLVMFuzzerTestOneInput::$_1::operator
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24195 Crash type: UNKNOWN READ Crash state: auto LLVMFuzzerTestOneInput::$1::operator int fuzzerinput::run set-gc.cpp...
OSV-2020-1017 Heap-buffer-overflow in decode_bit_string
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16614 Crash type: Heap-buffer-overflow READ 1 Crash state: decodebitstring scasn1printbitstring printtagsrecursive...
OSV-2020-1021 UNKNOWN READ in exif_mnote_data_olympus_load
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15312 Crash type: UNKNOWN READ Crash state: exifmnotedataolympusload exifdataloaddata exifloadergetdata...
OSV-2020-1016 UNKNOWN READ in blosc_run_decompression_with_context
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23717 Crash type: UNKNOWN READ Crash state: bloscrundecompressionwithcontext bloscdecompress fuzzdecompress.c...
OSV-2020-1023 Use-of-uninitialized-value in njs_vsprintf
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23061 Crash type: Use-of-uninitialized-value Crash state: njsvsprintf njserrorfmtnew njsregexpmatchtracehandler...
OSV-2020-1022 Heap-buffer-overflow in ptls_set_negotiated_protocol
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13682 Crash type: Heap-buffer-overflow READ Crash state: ptlssetnegotiatedprotocol clienthandleencryptedextensions handlehandshakerecord...
OSV-2020-1026 Heap-buffer-overflow in DefragInsertFrag
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21446 Crash type: Heap-buffer-overflow READ Crash state: DefragInsertFrag Defrag DecodeIPV6...
OSV-2020-1020 Use-of-uninitialized-value in Sass::Prelexer::quoted_string
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15890 Crash type: Use-of-uninitialized-value Crash state: Sass::Prelexer::quotedstring char const Sass::Prelexer::sequence& char const Sass::Prelexer::alternatives&...
OSV-2020-1004 Heap-buffer-overflow in gtTileSeparate
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13280 Crash type: Heap-buffer-overflow READ 4 Crash state: gtTileSeparate TIFFReadRGBATileExt cv::TiffDecoder::readData...
OSV-2020-1006 Use-of-uninitialized-value in decimate_dsd_run
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19928 Crash type: Use-of-uninitialized-value Crash state: decimatedsdrun WavpackUnpackSamples WavpackSeekSample64...
OSV-2020-1000 Heap-buffer-overflow in xls_isCellTooSmall
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12619 Crash type: Heap-buffer-overflow READ 1 Crash state: xlsisCellTooSmall xlspreparseWorkSheet xlsparseWorkSheet...