OSV-2020-876 Use-of-uninitialized-value in XCFImageFormat::mergeRGBToRGB

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21783 Crash type: Use-of-uninitialized-value Crash state: XCFImageFormat::mergeRGBToRGB XCFImageFormat::mergeLayerIntoImage XCFImageFormat::loadLayer...

OSV-2020-875 Use-of-uninitialized-value in ndpi_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22475 Crash type: Use-of-uninitialized-value Crash state: ndpistrdup processClientServerHello processTLSBlock...

OSV-2020-873 Use-of-uninitialized-value in format_u8x

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21426 Crash type: Use-of-uninitialized-value Crash state: formatu8x formatodptungtpuopt formatodptunattr...

OSV-2020-872 Use-of-uninitialized-value in tun_key_to_attr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22026 Crash type: Use-of-uninitialized-value Crash state: tunkeytoattr odpflowkeyfromflow parsekeys...

OSV-2020-871 UNKNOWN READ in H5FD_sec2_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19241 Crash type: UNKNOWN READ Crash state: H5FDsec2read H5FDread H5Fsblockload...

OSV-2020-868 Use-of-uninitialized-value in fetchARGB32ToRGBA64PM_avx2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21808 Crash type: Use-of-uninitialized-value Crash state: fetchARGB32ToRGBA64PMavx2 blenduntransformedgenericrgb64 fillRectnormalized...

OSV-2020-866 UNKNOWN READ in icu_64::UCharsTrie::branchNext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15671 Crash type: UNKNOWN READ Crash state: icu64::UCharsTrie::branchNext icu64::UCharsTrie::nextImpl icu64::UCharsTrie::next...

OSV-2020-867 Heap-buffer-overflow in icu_64::CollationIterator::appendCEsFromCE32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15613 Crash type: Heap-buffer-overflow READ 4 Crash state: icu64::CollationIterator::appendCEsFromCE32 icu64::DataBuilderCollationIterator::fetchCEs icu64::CollationDataBuilder::getCEs...

OSV-2020-863 Use-of-uninitialized-value in QPDFTokenizer::isSpace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20391 Crash type: Use-of-uninitialized-value Crash state: QPDFTokenizer::isSpace QPDFTokenizer::presentCharacter QPDFTokenizer::readToken...

OSV-2020-864 Heap-buffer-overflow in H5O_attr_shared_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18806 Crash type: Heap-buffer-overflow READ Crash state: H5Oattrshareddecode H5Omsgiteratereal H5Oattropenbyname...

OSV-2020-860 Use-of-uninitialized-value in printUInt32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14912 Crash type: Use-of-uninitialized-value Crash state: printUInt32 printU1ImmOperand printInstruction...

OSV-2020-861 Segv on unknown address in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22273 Crash type: Segv on unknown address Crash state: std::1::basicstring, std::1::allocator, std::1::allocator, std::1::allocatorch...

OSV-2020-862 Use-of-uninitialized-value in std::__1::vector<std::__1::vector<Sass::Extension, std::__1::allocator<Sass::Ext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21223 Crash type: Use-of-uninitialized-value Crash state: std::1::vectorstd::1::vectorSass::Extension, std::1::allocatorSass::Ext Sass::Extender::extendCompound Sass::Extender::extendComplex...

OSV-2020-859 UNKNOWN READ in H5O_sdspace_shared_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19220 Crash type: UNKNOWN READ Crash state: H5Osdspaceshareddecode H5Oattrshareddecode H5Omsgiteratereal...

OSV-2020-858 Heap-buffer-overflow in H5O_fill_new_shared_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18810 Crash type: Heap-buffer-overflow READ Crash state: H5Ofillnewshareddecode H5Omsgreadoh H5Omsgread...

OSV-2020-857 UNKNOWN READ in H5VM_memcpyvv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17228 Crash type: UNKNOWN READ Crash state: H5VMmemcpyvv H5Dcompactreadvv H5Dselectio...

OSV-2020-856 Use-of-uninitialized-value in deflate_slow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18745 Crash type: Use-of-uninitialized-value Crash state: deflateslow deflate PlFlate::handleData...

OSV-2020-855 Use-of-uninitialized-value in read_uleb128

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Use-of-uninitialized-value Crash state: readuleb128 dexparse dexload...

OSV-2020-853 Use-of-uninitialized-value in llvm_ks::MCAssembler::computeFragmentSize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22482 Crash type: Use-of-uninitialized-value Crash state: llvmks::MCAssembler::computeFragmentSize llvmks::MCAsmLayout::layoutFragment llvmks::MCAsmLayout::ensureValid...

OSV-2020-854 UNKNOWN READ in std::__1::__hash_node_base<std::__1::__hash_node<std::__1::__hash_value_type<std

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20959 Crash type: UNKNOWN READ Crash state: std::1::hashnodebasestd::1::hashnodestd::1::hashvaluetypestd std::1::hashtablestd::1::hashvaluetypestd::1::basicstringchar,...

OSV-2020-851 Use-of-uninitialized-value in Mat_VarRead5

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17115 Crash type: Use-of-uninitialized-value Crash state: MatVarRead5 ReadNextStructField MatVarReadNextInfo5...

OSV-2020-852 Use-of-uninitialized-value in H5MM_xstrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21457 Crash type: Use-of-uninitialized-value Crash state: H5MMxstrdup H5Epushstack H5Eprintfstack...

OSV-2020-849 Heap-buffer-overflow in dotnet_parse_tilde_2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19591 Crash type: Heap-buffer-overflow READ 2 Crash state: dotnetparsetilde2 dotnetparsetilde dotnetparsecom...

OSV-2020-847 Use-of-uninitialized-value in ycck_cmyk_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18732 Crash type: Use-of-uninitialized-value Crash state: ycckcmykconvert sepupsample processdatasimplemain...

OSV-2020-845 Use-of-uninitialized-value in isMatchAtCPBoundary

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19497 Crash type: Use-of-uninitialized-value Crash state: isMatchAtCPBoundary ustrFindFirst66 icu66::UnicodeString::indexOf...

OSV-2020-846 Heap-buffer-overflow in std::__1::char_traits<char>::compare

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22358 Crash type: Heap-buffer-overflow READ 6 Crash state: std::1::chartraits::compare wabt::stringview::compare wabt::operator==...

OSV-2020-842 Heap-buffer-overflow in H5A_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18943 Crash type: Heap-buffer-overflow WRITE 3 Crash state: H5Aread H5Aread MatH5ReadVarInfo...

OSV-2020-843 Heap-buffer-overflow in uni_utf8_get_char_n

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23513 Crash type: Heap-buffer-overflow READ 1 Crash state: uniutf8getcharn smtpcommandparseparameters smtpcommandparseline...

OSV-2020-841 Heap-buffer-overflow in yr_object_set_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Heap-buffer-overflow READ 13 Crash state: yrobjectsetstring dexparse dexload...

OSV-2020-837 UNKNOWN WRITE in helper_wfe_arm

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20245 Crash type: UNKNOWN WRITE Crash state: helperwfearm...

OSV-2020-836 Heap-buffer-overflow in H5HG_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18827 Crash type: Heap-buffer-overflow READ Crash state: H5HGread H5Tvlendiskread H5Tconvvlen...

OSV-2020-833 Heap-buffer-overflow in Hacl_Chacha20PolyNUMBER_256_aead_decrypt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23934 Crash type: Heap-buffer-overflow READ 1 Crash state: HaclChacha20PolyNUMBER256aeaddecrypt ChaCha20PolyNUMBEROpen sftkChaCha20PolyNUMBERDecrypt...

OSV-2020-835 UNKNOWN READ in H5G_node_cmp3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17337 Crash type: UNKNOWN READ Crash state: H5Gnodecmp3 H5Bfind H5Gstablookup...

OSV-2020-831 Heap-buffer-overflow in g_string_insert_len

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23816 Crash type: Heap-buffer-overflow READ 5 Crash state: gstringinsertlen gstringappendlen uriencoder...

OSV-2020-830 Heap-buffer-overflow in CRYPTO_128_wrap

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22836 Crash type: Heap-buffer-overflow WRITE 16 Crash state: CRYPTO128wrap aeswrapcipherinternal aeswrapcipher...

OSV-2020-827 Use-of-uninitialized-value in llvm_ks::isIntN

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22920 Crash type: Use-of-uninitialized-value Crash state: llvmks::isIntN X86AsmBackend::applyFixup llvmks::MCAssembler::layout...

OSV-2020-829 Heap-use-after-free in check_content_type_and_change_protocol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23834 Crash type: Heap-use-after-free READ 2 Crash state: checkcontenttypeandchangeprotocol ndpicheckhttptcp ndpisearchhttptcp...

OSV-2020-824 UNKNOWN READ in std::__1::_MetaBase<__can_be_converted_to_string_view<char, std::__1::char_trait

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24057 Crash type: UNKNOWN READ Crash state: std::1::MetaBase, std::1::allocator std::1::treeiteratorstd::1::valuetypestd::1::basicstringchar, st...

OSV-2020-825 Index-out-of-bounds in tcg_liveness_analysis_arm

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23971 Crash type: Index-out-of-bounds Crash state: tcglivenessanalysisarm tcggencodearm cpuarmgencodearm...

OSV-2020-828 Heap-use-after-free in draco::Metadata::AddSubMetadata

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24059 Crash type: Heap-use-after-free READ 8 Crash state: draco::Metadata::AddSubMetadata draco::MetadataDecoder::DecodeMetadata draco::MetadataDecoder::DecodeGeometryMetadata...

OSV-2020-819 Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22224 Crash type: Use-of-uninitialized-value Crash state: fuzzing::memory::memorytestmsan fuzzing::memory::memorytest FLAC::Decoder::FuzzerStream::writecallback...

OSV-2020-822 Use-of-uninitialized-value in jbig2_arith_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23762 Crash type: Use-of-uninitialized-value Crash state: jbig2arithdecode jbig2decoderefinementTPGRON jbig2decoderefinementregion...

OSV-2020-821 Heap-buffer-overflow in ndpi_workflow_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22755 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpiworkflowprocesspacket fuzzndpireader.c...

OSV-2020-823 Object-size in std::__1::vector<wabt::DataSegment*, std::__1::allocator<wabt::DataSegment*> >::

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20367 Crash type: Object-size Crash state: std::1::vector :: wabt::BinaryReaderIR::OnDataSymbol wabt::BinaryReader::ReadLinkingSection...

OSV-2020-812 Heap-buffer-overflow in ndpi_netbios_name_interpret

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21809 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpinetbiosnameinterpret ndpiintnetbiosaddconnection checkndpiudpflowfunc...

OSV-2020-813 Use-of-uninitialized-value in inflate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17121 Crash type: Use-of-uninitialized-value Crash state: inflate InflateRankDims ReadNextStructField...

OSV-2020-810 Use-of-uninitialized-value in pcap_filter_with_aux_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22220 Crash type: Use-of-uninitialized-value Crash state: pcapfilterwithauxdata pcapfilter pcapofflinefilter...

OSV-2020-805 UNKNOWN READ in H5MM_xstrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17335 Crash type: UNKNOWN READ Crash state: H5MMxstrdup H5Genttolink H5Gnodeiterate...

OSV-2020-804 Use-of-uninitialized-value in read_markers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23581 Crash type: Use-of-uninitialized-value Crash state: readmarkers consumemarkers jpegconsumeinput...

OSV-2020-806 Segv on unknown address in process_ndpi_collected_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22122 Crash type: Segv on unknown address Crash state: processndpicollectedinfo packetprocessing ndpiworkflowprocesspacket...