OSV-2020-959 Container-overflow in yysmiles_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22242 Crash type: Container-overflow READ 8 Crash state: yysmilesparse RDKit::smilesparsehelper RDKit::smilesparse...

OSV-2020-960 Use-of-uninitialized-value in prvTidyDecodeUTF8BytesToChar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12656 Crash type: Use-of-uninitialized-value Crash state: prvTidyDecodeUTF8BytesToChar prvTidyGetUTF8 PPrintText...

OSV-2020-958 Heap-buffer-overflow in hts_log

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18152 Crash type: Heap-buffer-overflow READ Crash state: htslog bamread1 samread1...

OSV-2020-955 UNKNOWN WRITE in vcf_parse_format

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24097 Crash type: UNKNOWN WRITE Crash state: vcfparseformat vcfparse vcfread...

OSV-2020-956 Heap-buffer-overflow in ndpi_workflow_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20644 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpiworkflowprocesspacket fuzzndpireader.c HonggfuzzPersistentLoop...

OSV-2020-954 Use-of-uninitialized-value in adler32_z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13317 Crash type: Use-of-uninitialized-value Crash state: adler32z inflate ZIPDecode...

OSV-2020-948 Heap-buffer-overflow in surround51_to_stereo_downmix_mtx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22402 Crash type: Heap-buffer-overflow WRITE 4 Crash state: surround51tostereodownmixmtx crasfmtconvcreate configformatconverter...

OSV-2020-945 Heap-buffer-overflow in pcpp::SSLExtension::getLength

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22529 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::SSLExtension::getLength pcpp::SSLExtension::getTotalLength pcpp::SSLServerHelloMessage::SSLServerHelloMessage...

OSV-2020-943 Heap-buffer-overflow in pcpp::HeaderField::HeaderField

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22528 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::HeaderField::HeaderField pcpp::TextBasedProtocolMessage::parseFields pcpp::SipResponseLayer::SipResponseLayer...

OSV-2020-941 Heap-buffer-overflow in gc_mark_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19780 Crash type: Heap-buffer-overflow READ 4 Crash state: gcmarkstring gctrace gsgcreclaim...

OSV-2020-942 Heap-buffer-overflow in ihevcd_mv_pred

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16894 Crash type: Heap-buffer-overflow READ 4 Crash state: ihevcdmvpred ihevcdgetmvctb ihevcdparseslicedata...

OSV-2020-940 Heap-use-after-free in surround51_to_stereo_downmix_mtx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21113 Crash type: Heap-use-after-free WRITE 4 Crash state: surround51tostereodownmixmtx crasfmtconvcreate configformatconverter...

OSV-2020-936 Global-buffer-overflow in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20181 Crash type: Global-buffer-overflow READ 1 Crash state: arrow::Status arrow::VisitArrayInline arrow::internal::ValidateArrayData arrow::RecordBatch::ValidateFull...

OSV-2020-934 UNKNOWN WRITE in ideint_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16813 Crash type: UNKNOWN WRITE Crash state: ideintprocess impeg2ddeinterlace impeg2ddecpicdatathread...

OSV-2020-931 Use-of-uninitialized-value in Sass::Prelexer::quoted_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15890 Crash type: Use-of-uninitialized-value Crash state: Sass::Prelexer::quotedstring char const Sass::Prelexer::sequence& Sass::Prelexer::restringuriopen...

OSV-2020-930 Use-of-uninitialized-value in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22087 Crash type: Use-of-uninitialized-value Crash state: std::1::basicstring, std::1::allocatorch pcpp::IDnsResource::IDnsResource pcpp::DnsQuery::DnsQuery...

OSV-2020-929 Use-of-uninitialized-value in Sass::Prelexer::quoted_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15890 Crash type: Use-of-uninitialized-value Crash state: Sass::Prelexer::quotedstring char const Sass::Parser::lex& Sass::Parser::parsevalue...

OSV-2020-927 Heap-buffer-overflow in LogLuv24toXYZ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14011 Crash type: Heap-buffer-overflow WRITE 4 Crash state: LogLuv24toXYZ Luv24toXYZ LogLuvDecode24...

OSV-2020-925 Global-buffer-overflow in draco::MeshEdgebreakerDecoderImpl<draco::MeshEdgebreakerTraversalValenceDecoder>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23419 Crash type: Global-buffer-overflow READ 4 Crash state: draco::MeshEdgebreakerDecoderImpl draco::MeshEdgebreakerDecoderImpl draco::MeshDecoder::DecodeGeometryData...

OSV-2020-920 Heap-buffer-overflow in pcpp::SSLServerHelloMessage::getSessionIDLength

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22523 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::SSLServerHelloMessage::getSessionIDLength pcpp::SSLServerHelloMessage::SSLServerHelloMessage pcpp::SSLHandshakeMessage::createHandhakeMessage...

OSV-2020-922 Heap-buffer-overflow in ndpi_search_h323

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22342 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpisearchh323 checkndpiudpflowfunc ndpidetectionprocesspacket...

OSV-2020-919 Use-of-uninitialized-value in ndpi_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21363 Crash type: Use-of-uninitialized-value Crash state: ndpistrdup processClientServerHello processTLSBlock...

OSV-2020-918 Heap-buffer-overflow in ndpi_search_oracle

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21780 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpisearchoracle checkndpitcpflowfunc ndpidetectionprocesspacket...

OSV-2020-917 Heap-buffer-overflow in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayVisitor>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21039 Crash type: Heap-buffer-overflow READ 4 Crash state: arrow::Status arrow::VisitArrayInline arrow::internal::ValidateArray arrow::RecordBatch::Validate...

OSV-2020-912 Use-of-uninitialized-value in ndpi_fill_protocol_category

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21356 Crash type: Use-of-uninitialized-value Crash state: ndpifillprotocolcategory ndpidetectionprocesspacket fuzzprocesspacket.c...

OSV-2020-913 Heap-buffer-overflow in sas_read4

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12576 Crash type: Heap-buffer-overflow READ 4 Crash state: sasread4 sas7bdatparsepagepass1 sas7bdatparsemetapagespass1...

OSV-2020-910 Use-of-uninitialized-value in zmq::stream_engine_base_t::out_event

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24200 Crash type: Use-of-uninitialized-value Crash state: zmq::streamenginebaset::outevent zmq::epollt::loop zmq::workerpollerbaset::workerroutine...

OSV-2020-911 Heap-buffer-overflow in arrow::Status arrow::ConcatenateOffsets<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23916 Crash type: Heap-buffer-overflow READ 4 Crash state: arrow::Status arrow::ConcatenateOffsets arrow::ConcatenateImpl::Visit arrow::Status arrow::VisitTypeInline...

OSV-2020-908 Heap-use-after-free in xmlParserPrintFileContextInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24055 Crash type: Heap-use-after-free READ 1 Crash state: xmlParserPrintFileContextInternal xmlReportError xmlRaiseError...

OSV-2020-909 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23960 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

OSV-2020-906 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24076 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

OSV-2020-907 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22512 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

OSV-2020-903 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24134 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

OSV-2020-902 Index-out-of-bounds in QUnicodeTables::qGetProp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24266 Crash type: Index-out-of-bounds Crash state: QUnicodeTables::qGetProp QString QUnicodeTables::convertCase QString::toLowerhelper...

OSV-2020-900 Heap-buffer-overflow in sarrayAddString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23747 Crash type: Heap-buffer-overflow WRITE 8 Crash state: sarrayAddString gplotAddPlot numaQuantizeCrossingsByWidth...

OSV-2020-901 UNKNOWN WRITE in sarrayAddString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23379 Crash type: UNKNOWN WRITE Crash state: sarrayAddString gplotAddPlot numaQuantizeCrossingsByWidth...

OSV-2020-898 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23866 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

OSV-2020-896 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23385 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

OSV-2020-895 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24030 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

OSV-2020-894 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23761 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

OSV-2020-892 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23909 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

OSV-2020-893 Heap-buffer-overflow in hermes::parser::JSLexer::consumeBracedCodePoint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23725 Crash type: Heap-buffer-overflow READ 1 Crash state: hermes::parser::JSLexer::consumeBracedCodePoint hermes::parser::JSLexer::consumeUnicodeEscape hermes::parser::JSLexer::advance...

OSV-2020-891 Heap-buffer-overflow in ccr_handle_message_from_client

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23965 Crash type: Heap-buffer-overflow READ 4 Crash state: ccrhandlemessagefromclient crasrclientbufferfromclient rclientmessage.cc...

OSV-2020-890 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23289 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

OSV-2020-889 Use-of-uninitialized-value in RGBTOHLS

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22740 Crash type: Use-of-uninitialized-value Crash state: RGBTOHLS XCFImageFormat::mergeRGBToRGB XCFImageFormat::mergeLayerIntoImage...

OSV-2020-885 Stack-use-after-scope in coolkey_apdu_io

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23979 Crash type: Stack-use-after-scope READ 8 Crash state: coolkeyapduio coolkeyrsaop coolkeycomputecrypt...

OSV-2020-881 Heap-buffer-overflow in read_uleb128

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18549 Crash type: Heap-buffer-overflow READ 1 Crash state: readuleb128 walkexports getsymbols...

OSV-2020-879 Use-of-uninitialized-value in jumpOverRec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20112 Crash type: Use-of-uninitialized-value Crash state: jumpOverRec jumpOverRec jumpOverRec...

OSV-2020-880 Heap-buffer-overflow in smtp_command_parse_line

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23514 Crash type: Heap-buffer-overflow READ 1 Crash state: smtpcommandparseline smtpcommandparse smtpcommandparsenext...

OSV-2020-877 Use-of-uninitialized-value in Mat_VarReadNumeric5

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17112 Crash type: Use-of-uninitialized-value Crash state: MatVarReadNumeric5 MatVarRead5 ReadData...