OSV-2020-999 UNKNOWN WRITE in vcf_parse_format

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21139 Crash type: UNKNOWN WRITE Crash state: vcfparseformat vcfparse viewvcf...

OSV-2020-1005 Global-buffer-overflow in ihevcd_unpack_coeffs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16926 Crash type: Global-buffer-overflow READ 1 Crash state: ihevcdunpackcoeffs ihevcdiquantitransreconctb ihevcdprocess...

OSV-2020-1010 Stack-use-after-return in ihevcd_process_thread

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16912 Crash type: Stack-use-after-return READ 8 Crash state: ihevcdprocessthread startthread...

OSV-2020-1008 Use-of-uninitialized-value in ihevc_recon_32x32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20476 Crash type: Use-of-uninitialized-value Crash state: ihevcrecon32x32 ihevcdiquantitransreconctb ihevcdprocess...

OSV-2020-1003 Heap-buffer-overflow in Sass::Prelexer::quoted_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15890 Crash type: Heap-buffer-overflow READ 1 Crash state: Sass::Prelexer::quotedstring char const Sass::Prelexer::sequence& char const Sass::Parser::lex&...

OSV-2020-1011 Heap-buffer-overflow in ndpi_search_mail_smtp_tcp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18731 Crash type: Heap-buffer-overflow READ 4 Crash state: ndpisearchmailsmtptcp checkndpitcpflowfunc ndpidetectionprocesspacket...

OSV-2020-1007 Heap-use-after-free in DetectParseDupSigCompareFunc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22715 Crash type: Heap-use-after-free READ 4 Crash state: DetectParseDupSigCompareFunc HashListTableLookup DetectEngineSignatureIsDuplicate...

OSV-2020-1009 Heap-buffer-overflow in mu::ParserBase::ParseCmdCodeBulk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23123 Crash type: Heap-buffer-overflow READ 8 Crash state: mu::ParserBase::ParseCmdCodeBulk mu::ParserBase::ParseString setevalfuzzer.cc...

OSV-2020-987 UNKNOWN in TIFFReadRGBATileExt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13277 Crash type: UNKNOWN Crash state: TIFFReadRGBATileExt cv::TiffDecoder::readData cv::imread...

OSV-2020-993 Stack-buffer-overflow in write_png_comment

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16154 Crash type: Stack-buffer-overflow WRITE Crash state: writepngcomment vipsslistmap2 vipsimagemap...

OSV-2020-992 Heap-buffer-overflow in ndpi_search_oscar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20540 Crash type: Heap-buffer-overflow READ 4 Crash state: ndpisearchoscar checkndpitcpflowfunc ndpidetectionprocesspacket...

OSV-2020-995 Use-of-uninitialized-value in Sass::Prelexer::quoted_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15890 Crash type: Use-of-uninitialized-value Crash state: Sass::Prelexer::quotedstring char const Sass::Prelexer::alternatives& char const Sass::Prelexer::sequence&...

OSV-2020-990 UNKNOWN READ in FLAC__crc16_update_words32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16457 Crash type: UNKNOWN READ Crash state: FLACcrc16updatewords32 crc16updateblock bitreaderreadfromclient...

OSV-2020-994 Heap-buffer-overflow in getTLScertificate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19466 Crash type: Heap-buffer-overflow READ 6 Crash state: getTLScertificate tlsDetectProtocolFromCertificate ndpisearchtlstcpudp...

OSV-2020-981 Heap-buffer-overflow in surround51_to_stereo_downmix_mtx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20163 Crash type: Heap-buffer-overflow WRITE 4 Crash state: surround51tostereodownmixmtx crasfmtconvcreate configformatconverter...

OSV-2020-977 Segv on unknown address in draco::MeshPredictionSchemeTexCoordsDecoder<int, draco::PredictionSchemeWrapDeco

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23414 Crash type: Segv on unknown address Crash state: draco::MeshPredictionSchemeTexCoordsDecoderint, draco::PredictionSchemeWrapDeco draco::MeshPredictionSchemeTexCoordsDecoderint, draco::PredictionSchemeWrapDeco...

OSV-2020-974 Heap-buffer-overflow in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20113 Crash type: Heap-buffer-overflow READ 4 Crash state: arrow::Status arrow::VisitArrayInline arrow::internal::ValidateArrayData arrow::RecordBatch::ValidateFull...

OSV-2020-976 Heap-buffer-overflow in Json::OurReader::readComment

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18140 Crash type: Heap-buffer-overflow READ 1 Crash state: Json::OurReader::readComment Json::OurReader::readToken Json::OurReader::parse...

OSV-2020-983 Heap-buffer-overflow in Sass::Prelexer::quoted_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15890 Crash type: Heap-buffer-overflow READ 1 Crash state: Sass::Prelexer::quotedstring char const Sass::Prelexer::alternatives& Sass::Parser::parsefactor...

OSV-2020-973 Heap-buffer-overflow in pcpp::HeaderField::HeaderField

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22837 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::HeaderField::HeaderField pcpp::TextBasedProtocolMessage::parseFields pcpp::SipResponseLayer::SipResponseLayer...

OSV-2020-982 Use-of-uninitialized-value in pcpp::SSLClientHelloMessage::getSessionIDLength

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23022 Crash type: Use-of-uninitialized-value Crash state: pcpp::SSLClientHelloMessage::getSessionIDLength pcpp::SSLClientHelloMessage::SSLClientHelloMessage pcpp::SSLHandshakeMessage::createHandhakeMessage...

OSV-2020-972 Heap-buffer-overflow in ndpi_search_irc_tcp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21346 Crash type: Heap-buffer-overflow READ 7 Crash state: ndpisearchirctcp checkndpitcpflowfunc ndpidetectionprocesspacket...

OSV-2020-969 Stack-buffer-overflow in pgp_parse_algo_attr_blob

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19548 Crash type: Stack-buffer-overflow WRITE 4 Crash state: pgpparsealgoattrblob pgpgetcardfeatures pgpinit...

OSV-2020-962 Use-of-uninitialized-value in processCertificateElements

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22864 Crash type: Use-of-uninitialized-value Crash state: processCertificateElements processCertificate processTLSBlock...

OSV-2020-960 Use-of-uninitialized-value in prvTidyDecodeUTF8BytesToChar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12656 Crash type: Use-of-uninitialized-value Crash state: prvTidyDecodeUTF8BytesToChar prvTidyGetUTF8 PPrintText...

OSV-2020-959 Container-overflow in yysmiles_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22242 Crash type: Container-overflow READ 8 Crash state: yysmilesparse RDKit::smilesparsehelper RDKit::smilesparse...

OSV-2020-956 Heap-buffer-overflow in ndpi_workflow_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20644 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpiworkflowprocesspacket fuzzndpireader.c HonggfuzzPersistentLoop...

OSV-2020-958 Heap-buffer-overflow in hts_log

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18152 Crash type: Heap-buffer-overflow READ Crash state: htslog bamread1 samread1...

OSV-2020-954 Use-of-uninitialized-value in adler32_z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13317 Crash type: Use-of-uninitialized-value Crash state: adler32z inflate ZIPDecode...

OSV-2020-955 UNKNOWN WRITE in vcf_parse_format

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24097 Crash type: UNKNOWN WRITE Crash state: vcfparseformat vcfparse vcfread...

OSV-2020-948 Heap-buffer-overflow in surround51_to_stereo_downmix_mtx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22402 Crash type: Heap-buffer-overflow WRITE 4 Crash state: surround51tostereodownmixmtx crasfmtconvcreate configformatconverter...

OSV-2020-945 Heap-buffer-overflow in pcpp::SSLExtension::getLength

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22529 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::SSLExtension::getLength pcpp::SSLExtension::getTotalLength pcpp::SSLServerHelloMessage::SSLServerHelloMessage...

OSV-2020-943 Heap-buffer-overflow in pcpp::HeaderField::HeaderField

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22528 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::HeaderField::HeaderField pcpp::TextBasedProtocolMessage::parseFields pcpp::SipResponseLayer::SipResponseLayer...

OSV-2020-941 Heap-buffer-overflow in gc_mark_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19780 Crash type: Heap-buffer-overflow READ 4 Crash state: gcmarkstring gctrace gsgcreclaim...

OSV-2020-942 Heap-buffer-overflow in ihevcd_mv_pred

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16894 Crash type: Heap-buffer-overflow READ 4 Crash state: ihevcdmvpred ihevcdgetmvctb ihevcdparseslicedata...

OSV-2020-940 Heap-use-after-free in surround51_to_stereo_downmix_mtx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21113 Crash type: Heap-use-after-free WRITE 4 Crash state: surround51tostereodownmixmtx crasfmtconvcreate configformatconverter...

OSV-2020-936 Global-buffer-overflow in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20181 Crash type: Global-buffer-overflow READ 1 Crash state: arrow::Status arrow::VisitArrayInline arrow::internal::ValidateArrayData arrow::RecordBatch::ValidateFull...

OSV-2020-934 UNKNOWN WRITE in ideint_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16813 Crash type: UNKNOWN WRITE Crash state: ideintprocess impeg2ddeinterlace impeg2ddecpicdatathread...

OSV-2020-930 Use-of-uninitialized-value in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22087 Crash type: Use-of-uninitialized-value Crash state: std::1::basicstring, std::1::allocatorch pcpp::IDnsResource::IDnsResource pcpp::DnsQuery::DnsQuery...

OSV-2020-931 Use-of-uninitialized-value in Sass::Prelexer::quoted_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15890 Crash type: Use-of-uninitialized-value Crash state: Sass::Prelexer::quotedstring char const Sass::Prelexer::sequence& Sass::Prelexer::restringuriopen...

OSV-2020-929 Use-of-uninitialized-value in Sass::Prelexer::quoted_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15890 Crash type: Use-of-uninitialized-value Crash state: Sass::Prelexer::quotedstring char const Sass::Parser::lex& Sass::Parser::parsevalue...

OSV-2020-927 Heap-buffer-overflow in LogLuv24toXYZ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14011 Crash type: Heap-buffer-overflow WRITE 4 Crash state: LogLuv24toXYZ Luv24toXYZ LogLuvDecode24...

OSV-2020-925 Global-buffer-overflow in draco::MeshEdgebreakerDecoderImpl<draco::MeshEdgebreakerTraversalValenceDecoder>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23419 Crash type: Global-buffer-overflow READ 4 Crash state: draco::MeshEdgebreakerDecoderImpl draco::MeshEdgebreakerDecoderImpl draco::MeshDecoder::DecodeGeometryData...

OSV-2020-920 Heap-buffer-overflow in pcpp::SSLServerHelloMessage::getSessionIDLength

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22523 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::SSLServerHelloMessage::getSessionIDLength pcpp::SSLServerHelloMessage::SSLServerHelloMessage pcpp::SSLHandshakeMessage::createHandhakeMessage...

OSV-2020-922 Heap-buffer-overflow in ndpi_search_h323

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22342 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpisearchh323 checkndpiudpflowfunc ndpidetectionprocesspacket...

OSV-2020-919 Use-of-uninitialized-value in ndpi_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21363 Crash type: Use-of-uninitialized-value Crash state: ndpistrdup processClientServerHello processTLSBlock...

OSV-2020-918 Heap-buffer-overflow in ndpi_search_oracle

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21780 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpisearchoracle checkndpitcpflowfunc ndpidetectionprocesspacket...

OSV-2020-917 Heap-buffer-overflow in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayVisitor>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21039 Crash type: Heap-buffer-overflow READ 4 Crash state: arrow::Status arrow::VisitArrayInline arrow::internal::ValidateArray arrow::RecordBatch::Validate...

OSV-2020-912 Use-of-uninitialized-value in ndpi_fill_protocol_category

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21356 Crash type: Use-of-uninitialized-value Crash state: ndpifillprotocolcategory ndpidetectionprocesspacket fuzzprocesspacket.c...

OSV-2020-913 Heap-buffer-overflow in sas_read4

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12576 Crash type: Heap-buffer-overflow READ 4 Crash state: sasread4 sas7bdatparsepagepass1 sas7bdatparsemetapagespass1...