OSV-2020-910 Use-of-uninitialized-value in zmq::stream_engine_base_t::out_event

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24200 Crash type: Use-of-uninitialized-value Crash state: zmq::streamenginebaset::outevent zmq::epollt::loop zmq::workerpollerbaset::workerroutine...

OSV-2020-911 Heap-buffer-overflow in arrow::Status arrow::ConcatenateOffsets<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23916 Crash type: Heap-buffer-overflow READ 4 Crash state: arrow::Status arrow::ConcatenateOffsets arrow::ConcatenateImpl::Visit arrow::Status arrow::VisitTypeInline...

OSV-2020-908 Heap-use-after-free in xmlParserPrintFileContextInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24055 Crash type: Heap-use-after-free READ 1 Crash state: xmlParserPrintFileContextInternal xmlReportError xmlRaiseError...

OSV-2020-909 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23960 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

OSV-2020-906 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24076 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

OSV-2020-907 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22512 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

OSV-2020-903 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24134 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

OSV-2020-902 Index-out-of-bounds in QUnicodeTables::qGetProp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24266 Crash type: Index-out-of-bounds Crash state: QUnicodeTables::qGetProp QString QUnicodeTables::convertCase QString::toLowerhelper...

OSV-2020-900 Heap-buffer-overflow in sarrayAddString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23747 Crash type: Heap-buffer-overflow WRITE 8 Crash state: sarrayAddString gplotAddPlot numaQuantizeCrossingsByWidth...

OSV-2020-901 UNKNOWN WRITE in sarrayAddString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23379 Crash type: UNKNOWN WRITE Crash state: sarrayAddString gplotAddPlot numaQuantizeCrossingsByWidth...

OSV-2020-898 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23866 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

OSV-2020-896 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23385 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

OSV-2020-895 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24030 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

OSV-2020-894 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23761 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

OSV-2020-892 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23909 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

OSV-2020-893 Heap-buffer-overflow in hermes::parser::JSLexer::consumeBracedCodePoint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23725 Crash type: Heap-buffer-overflow READ 1 Crash state: hermes::parser::JSLexer::consumeBracedCodePoint hermes::parser::JSLexer::consumeUnicodeEscape hermes::parser::JSLexer::advance...

OSV-2020-891 Heap-buffer-overflow in ccr_handle_message_from_client

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23965 Crash type: Heap-buffer-overflow READ 4 Crash state: ccrhandlemessagefromclient crasrclientbufferfromclient rclientmessage.cc...

OSV-2020-890 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23289 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

OSV-2020-889 Use-of-uninitialized-value in RGBTOHLS

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22740 Crash type: Use-of-uninitialized-value Crash state: RGBTOHLS XCFImageFormat::mergeRGBToRGB XCFImageFormat::mergeLayerIntoImage...

OSV-2020-885 Stack-use-after-scope in coolkey_apdu_io

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23979 Crash type: Stack-use-after-scope READ 8 Crash state: coolkeyapduio coolkeyrsaop coolkeycomputecrypt...

OSV-2020-879 Use-of-uninitialized-value in jumpOverRec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20112 Crash type: Use-of-uninitialized-value Crash state: jumpOverRec jumpOverRec jumpOverRec...

OSV-2020-881 Heap-buffer-overflow in read_uleb128

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18549 Crash type: Heap-buffer-overflow READ 1 Crash state: readuleb128 walkexports getsymbols...

OSV-2020-880 Heap-buffer-overflow in smtp_command_parse_line

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23514 Crash type: Heap-buffer-overflow READ 1 Crash state: smtpcommandparseline smtpcommandparse smtpcommandparsenext...

OSV-2020-877 Use-of-uninitialized-value in Mat_VarReadNumeric5

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17112 Crash type: Use-of-uninitialized-value Crash state: MatVarReadNumeric5 MatVarRead5 ReadData...

OSV-2020-876 Use-of-uninitialized-value in XCFImageFormat::mergeRGBToRGB

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21783 Crash type: Use-of-uninitialized-value Crash state: XCFImageFormat::mergeRGBToRGB XCFImageFormat::mergeLayerIntoImage XCFImageFormat::loadLayer...

OSV-2020-875 Use-of-uninitialized-value in ndpi_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22475 Crash type: Use-of-uninitialized-value Crash state: ndpistrdup processClientServerHello processTLSBlock...

OSV-2020-873 Use-of-uninitialized-value in format_u8x

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21426 Crash type: Use-of-uninitialized-value Crash state: formatu8x formatodptungtpuopt formatodptunattr...

OSV-2020-872 Use-of-uninitialized-value in tun_key_to_attr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22026 Crash type: Use-of-uninitialized-value Crash state: tunkeytoattr odpflowkeyfromflow parsekeys...

OSV-2020-871 UNKNOWN READ in H5FD_sec2_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19241 Crash type: UNKNOWN READ Crash state: H5FDsec2read H5FDread H5Fsblockload...

OSV-2020-867 Heap-buffer-overflow in icu_64::CollationIterator::appendCEsFromCE32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15613 Crash type: Heap-buffer-overflow READ 4 Crash state: icu64::CollationIterator::appendCEsFromCE32 icu64::DataBuilderCollationIterator::fetchCEs icu64::CollationDataBuilder::getCEs...

OSV-2020-866 UNKNOWN READ in icu_64::UCharsTrie::branchNext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15671 Crash type: UNKNOWN READ Crash state: icu64::UCharsTrie::branchNext icu64::UCharsTrie::nextImpl icu64::UCharsTrie::next...

OSV-2020-868 Use-of-uninitialized-value in fetchARGB32ToRGBA64PM_avx2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21808 Crash type: Use-of-uninitialized-value Crash state: fetchARGB32ToRGBA64PMavx2 blenduntransformedgenericrgb64 fillRectnormalized...

OSV-2020-864 Heap-buffer-overflow in H5O_attr_shared_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18806 Crash type: Heap-buffer-overflow READ Crash state: H5Oattrshareddecode H5Omsgiteratereal H5Oattropenbyname...

OSV-2020-863 Use-of-uninitialized-value in QPDFTokenizer::isSpace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20391 Crash type: Use-of-uninitialized-value Crash state: QPDFTokenizer::isSpace QPDFTokenizer::presentCharacter QPDFTokenizer::readToken...

OSV-2020-862 Use-of-uninitialized-value in std::__1::vector<std::__1::vector<Sass::Extension, std::__1::allocator<Sass::Ext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21223 Crash type: Use-of-uninitialized-value Crash state: std::1::vectorstd::1::vectorSass::Extension, std::1::allocatorSass::Ext Sass::Extender::extendCompound Sass::Extender::extendComplex...

OSV-2020-861 Segv on unknown address in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22273 Crash type: Segv on unknown address Crash state: std::1::basicstring, std::1::allocator, std::1::allocator, std::1::allocatorch...

OSV-2020-860 Use-of-uninitialized-value in printUInt32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14912 Crash type: Use-of-uninitialized-value Crash state: printUInt32 printU1ImmOperand printInstruction...

OSV-2020-859 UNKNOWN READ in H5O_sdspace_shared_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19220 Crash type: UNKNOWN READ Crash state: H5Osdspaceshareddecode H5Oattrshareddecode H5Omsgiteratereal...

OSV-2020-858 Heap-buffer-overflow in H5O_fill_new_shared_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18810 Crash type: Heap-buffer-overflow READ Crash state: H5Ofillnewshareddecode H5Omsgreadoh H5Omsgread...

OSV-2020-857 UNKNOWN READ in H5VM_memcpyvv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17228 Crash type: UNKNOWN READ Crash state: H5VMmemcpyvv H5Dcompactreadvv H5Dselectio...

OSV-2020-856 Use-of-uninitialized-value in deflate_slow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18745 Crash type: Use-of-uninitialized-value Crash state: deflateslow deflate PlFlate::handleData...

OSV-2020-855 Use-of-uninitialized-value in read_uleb128

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Use-of-uninitialized-value Crash state: readuleb128 dexparse dexload...

OSV-2020-853 Use-of-uninitialized-value in llvm_ks::MCAssembler::computeFragmentSize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22482 Crash type: Use-of-uninitialized-value Crash state: llvmks::MCAssembler::computeFragmentSize llvmks::MCAsmLayout::layoutFragment llvmks::MCAsmLayout::ensureValid...

OSV-2020-854 UNKNOWN READ in std::__1::__hash_node_base<std::__1::__hash_node<std::__1::__hash_value_type<std

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20959 Crash type: UNKNOWN READ Crash state: std::1::hashnodebasestd::1::hashnodestd::1::hashvaluetypestd std::1::hashtablestd::1::hashvaluetypestd::1::basicstringchar,...

OSV-2020-851 Use-of-uninitialized-value in Mat_VarRead5

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17115 Crash type: Use-of-uninitialized-value Crash state: MatVarRead5 ReadNextStructField MatVarReadNextInfo5...

OSV-2020-852 Use-of-uninitialized-value in H5MM_xstrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21457 Crash type: Use-of-uninitialized-value Crash state: H5MMxstrdup H5Epushstack H5Eprintfstack...

OSV-2020-849 Heap-buffer-overflow in dotnet_parse_tilde_2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19591 Crash type: Heap-buffer-overflow READ 2 Crash state: dotnetparsetilde2 dotnetparsetilde dotnetparsecom...

OSV-2020-847 Use-of-uninitialized-value in ycck_cmyk_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18732 Crash type: Use-of-uninitialized-value Crash state: ycckcmykconvert sepupsample processdatasimplemain...

OSV-2020-846 Heap-buffer-overflow in std::__1::char_traits<char>::compare

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22358 Crash type: Heap-buffer-overflow READ 6 Crash state: std::1::chartraits::compare wabt::stringview::compare wabt::operator==...

OSV-2020-845 Use-of-uninitialized-value in isMatchAtCPBoundary

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19497 Crash type: Use-of-uninitialized-value Crash state: isMatchAtCPBoundary ustrFindFirst66 icu66::UnicodeString::indexOf...