OSV-2020-842 Heap-buffer-overflow in H5A_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18943 Crash type: Heap-buffer-overflow WRITE 3 Crash state: H5Aread H5Aread MatH5ReadVarInfo...

OSV-2020-843 Heap-buffer-overflow in uni_utf8_get_char_n

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23513 Crash type: Heap-buffer-overflow READ 1 Crash state: uniutf8getcharn smtpcommandparseparameters smtpcommandparseline...

OSV-2020-841 Heap-buffer-overflow in yr_object_set_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Heap-buffer-overflow READ 13 Crash state: yrobjectsetstring dexparse dexload...

OSV-2020-837 UNKNOWN WRITE in helper_wfe_arm

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20245 Crash type: UNKNOWN WRITE Crash state: helperwfearm...

OSV-2020-836 Heap-buffer-overflow in H5HG_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18827 Crash type: Heap-buffer-overflow READ Crash state: H5HGread H5Tvlendiskread H5Tconvvlen...

OSV-2020-835 UNKNOWN READ in H5G_node_cmp3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17337 Crash type: UNKNOWN READ Crash state: H5Gnodecmp3 H5Bfind H5Gstablookup...

OSV-2020-833 Heap-buffer-overflow in Hacl_Chacha20PolyNUMBER_256_aead_decrypt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23934 Crash type: Heap-buffer-overflow READ 1 Crash state: HaclChacha20PolyNUMBER256aeaddecrypt ChaCha20PolyNUMBEROpen sftkChaCha20PolyNUMBERDecrypt...

OSV-2020-831 Heap-buffer-overflow in g_string_insert_len

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23816 Crash type: Heap-buffer-overflow READ 5 Crash state: gstringinsertlen gstringappendlen uriencoder...

OSV-2020-830 Heap-buffer-overflow in CRYPTO_128_wrap

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22836 Crash type: Heap-buffer-overflow WRITE 16 Crash state: CRYPTO128wrap aeswrapcipherinternal aeswrapcipher...

OSV-2020-829 Heap-use-after-free in check_content_type_and_change_protocol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23834 Crash type: Heap-use-after-free READ 2 Crash state: checkcontenttypeandchangeprotocol ndpicheckhttptcp ndpisearchhttptcp...

OSV-2020-828 Heap-use-after-free in draco::Metadata::AddSubMetadata

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24059 Crash type: Heap-use-after-free READ 8 Crash state: draco::Metadata::AddSubMetadata draco::MetadataDecoder::DecodeMetadata draco::MetadataDecoder::DecodeGeometryMetadata...

OSV-2020-824 UNKNOWN READ in std::__1::_MetaBase<__can_be_converted_to_string_view<char, std::__1::char_trait

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24057 Crash type: UNKNOWN READ Crash state: std::1::MetaBase, std::1::allocator std::1::treeiteratorstd::1::valuetypestd::1::basicstringchar, st...

OSV-2020-825 Index-out-of-bounds in tcg_liveness_analysis_arm

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23971 Crash type: Index-out-of-bounds Crash state: tcglivenessanalysisarm tcggencodearm cpuarmgencodearm...

OSV-2020-827 Use-of-uninitialized-value in llvm_ks::isIntN

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22920 Crash type: Use-of-uninitialized-value Crash state: llvmks::isIntN X86AsmBackend::applyFixup llvmks::MCAssembler::layout...

OSV-2020-822 Use-of-uninitialized-value in jbig2_arith_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23762 Crash type: Use-of-uninitialized-value Crash state: jbig2arithdecode jbig2decoderefinementTPGRON jbig2decoderefinementregion...

OSV-2020-823 Object-size in std::__1::vector<wabt::DataSegment*, std::__1::allocator<wabt::DataSegment*> >::

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20367 Crash type: Object-size Crash state: std::1::vector :: wabt::BinaryReaderIR::OnDataSymbol wabt::BinaryReader::ReadLinkingSection...

OSV-2020-819 Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22224 Crash type: Use-of-uninitialized-value Crash state: fuzzing::memory::memorytestmsan fuzzing::memory::memorytest FLAC::Decoder::FuzzerStream::writecallback...

OSV-2020-821 Heap-buffer-overflow in ndpi_workflow_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22755 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpiworkflowprocesspacket fuzzndpireader.c...

OSV-2020-812 Heap-buffer-overflow in ndpi_netbios_name_interpret

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21809 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpinetbiosnameinterpret ndpiintnetbiosaddconnection checkndpiudpflowfunc...

OSV-2020-813 Use-of-uninitialized-value in inflate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17121 Crash type: Use-of-uninitialized-value Crash state: inflate InflateRankDims ReadNextStructField...

OSV-2020-810 Use-of-uninitialized-value in pcap_filter_with_aux_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22220 Crash type: Use-of-uninitialized-value Crash state: pcapfilterwithauxdata pcapfilter pcapofflinefilter...

OSV-2020-804 Use-of-uninitialized-value in read_markers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23581 Crash type: Use-of-uninitialized-value Crash state: readmarkers consumemarkers jpegconsumeinput...

OSV-2020-805 UNKNOWN READ in H5MM_xstrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17335 Crash type: UNKNOWN READ Crash state: H5MMxstrdup H5Genttolink H5Gnodeiterate...

OSV-2020-806 Segv on unknown address in process_ndpi_collected_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22122 Crash type: Segv on unknown address Crash state: processndpicollectedinfo packetprocessing ndpiworkflowprocesspacket...

OSV-2020-802 UNKNOWN READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22234 Crash type: UNKNOWN READ Crash state: NULL...

OSV-2020-800 UNKNOWN READ in std::__1::__tree<std::__1::__value_type<std::__1::basic_string<char, std::__1::c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24051 Crash type: UNKNOWN READ Crash state: std::1::tree, std::1...

OSV-2020-799 Heap-buffer-overflow in ReadInt32DataDouble

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21421 Crash type: Heap-buffer-overflow WRITE 4 Crash state: ReadInt32DataDouble ReadInt32Data MatVarRead4...

OSV-2020-795 Heap-buffer-overflow in ndpi_search_setup_iax

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23831 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpisearchsetupiax ndpisearchiax checkndpiudpflowfunc...

OSV-2020-796 Use-of-uninitialized-value in Mat_VarRead5

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17118 Crash type: Use-of-uninitialized-value Crash state: MatVarRead5 MatVarRead5 MatVarRead5...

OSV-2020-797 Use-of-uninitialized-value in MipsAsmParser::isPicAndNotNxxAbi

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22778 Crash type: Use-of-uninitialized-value Crash state: MipsAsmParser::isPicAndNotNxxAbi MipsAsmParser::processInstruction MipsAsmParser::MatchAndEmitInstruction...

OSV-2020-794 Use-of-uninitialized-value in Splash::pipeRunSimpleXBGR8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23086 Crash type: Use-of-uninitialized-value Crash state: Splash::pipeRunSimpleXBGR8 Splash::blitImage Splash::drawImage...

OSV-2020-792 Use-of-uninitialized-value in ihevc_inter_pred_chroma_copy_ssse3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23197 Crash type: Use-of-uninitialized-value Crash state: ihevcinterpredchromacopyssse3 ihevcdinterpredctb ihevcdprocess...

OSV-2020-789 Heap-use-after-free in llvm_ks::X86Operand::getToken

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22850 Crash type: Heap-use-after-free READ 4 Crash state: llvmks::X86Operand::getToken X86AsmParser::MatchAndEmitATTInstruction X86AsmParser::MatchAndEmitInstruction...

OSV-2020-791 UNKNOWN READ in BZ2_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15639 Crash type: UNKNOWN READ Crash state: BZ2decompress BZ2bzDecompress ftbzip2filefilloutput...

OSV-2020-790 Use-of-uninitialized-value in clang::tok::isAnnotation

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18444 Crash type: Use-of-uninitialized-value Crash state: clang::tok::isAnnotation clang::TokenLexer::Lex clang::Preprocessor::Lex...

OSV-2020-786 UNKNOWN READ in H5T__bit_find

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23887 Crash type: UNKNOWN READ Crash state: H5Tbitfind H5Tconvii H5Tconvert...

OSV-2020-783 UNKNOWN READ in wabt::BinaryReaderIR::OnFunctionSymbol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20364 Crash type: UNKNOWN READ Crash state: wabt::BinaryReaderIR::OnFunctionSymbol wabt::BinaryReader::ReadLinkingSection wabt::BinaryReader::ReadCustomSection...

OSV-2020-784 Bad-cast to zmq::session_base_t from invalid vptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24018 Crash type: Bad-cast Crash state: Bad-cast to zmq::sessionbaset from invalid vptr zmq::streamenginebaset::ineventinternal zmq::streamenginebaset::inevent...

OSV-2020-785 Heap-buffer-overflow in sctp_handle_packet_dropped

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23656 Crash type: Heap-buffer-overflow READ 1 Crash state: sctphandlepacketdropped sctpprocesscontrol sctpcommoninputprocessing...

OSV-2020-781 Heap-buffer-overflow in __libcpp_memchr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23328 Crash type: Heap-buffer-overflow READ Crash state: libcppmemchr memchr pcpp::HeaderField::HeaderField...

OSV-2020-782 UNKNOWN READ in H5O_dtype_decode_helper

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23320 Crash type: UNKNOWN READ Crash state: H5Odtypedecodehelper H5Odtypeshareddecode H5Oattrshareddecode...

OSV-2020-780 Segv on unknown address in ndpi_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22676 Crash type: Segv on unknown address Crash state: ndpistrdup processndpicollectedinfo packetprocessing...

OSV-2020-778 Heap-use-after-free in void draco::Metadata::AddEntry<std::__1::vector<unsigned char, std::__1::allocat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24044 Crash type: Heap-use-after-free READ 8 Crash state: void draco::Metadata::AddEntrystd::1::vectorunsigned char, std::1::allocat draco::MetadataDecoder::DecodeEntry draco::MetadataDecoder::DecodeMetadata...

OSV-2020-776 Negative-size-param in arrow::ConcatenateBuffers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24101 Crash type: Negative-size-param Crash state: arrow::ConcatenateBuffers arrow::ConcatenateImpl::Visit arrow::Status arrow::VisitTypeInline...

OSV-2020-773 Heap-buffer-overflow in pcpp::SSLCertificateRequestMessage::SSLCertificateRequestMessage

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23592 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::SSLCertificateRequestMessage::SSLCertificateRequestMessage pcpp::SSLHandshakeMessage::createHandhakeMessage pcpp::SSLHandshakeLayer::SSLHandshakeLayer...

OSV-2020-774 Heap-buffer-overflow in ndpi_search_kerberos

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23021 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpisearchkerberos checkndpiudpflowfunc ndpicheckflowfunc...

OSV-2020-775 Use-of-uninitialized-value in blosc_run_decompression_with_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23826 Crash type: Use-of-uninitialized-value Crash state: bloscrundecompressionwithcontext bloscdecompress fuzzdecompress.c...

OSV-2020-772 Heap-buffer-overflow in __libcpp_strstr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23601 Crash type: Heap-buffer-overflow READ 4 Crash state: libcppstrstr strstr pcpp::SipRequestFirstLine::parseVersion...

OSV-2020-769 Heap-buffer-overflow in perfetto::trace_processor::ClockTracker::ConvertSlowpath

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23149 Crash type: Heap-buffer-overflow READ 8 Crash state: perfetto::traceprocessor::ClockTracker::ConvertSlowpath perfetto::traceprocessor::ClockTracker::Convert perfetto::traceprocessor::ClockTracker::ToTraceTime...

OSV-2020-762 Heap-buffer-overflow in blosclz_compress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23794 Crash type: Heap-buffer-overflow WRITE 1 Crash state: blosclzcompress bloscc dojob...