TQRG/raw-osv-data huggingface dataset:
Vulnerability: OSV-2020-366
Summary: UNKNOWN READ in bebytes2ushort
Severity: MEDIUM
Published: 2020-07-01T00:00:05.421205Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19039

```
Crash type: UNKNOWN READ
Crash state:
bebytes2ushort
coolkey_v0_get_attribute_len
coolkey_v0_get_attribute_record_len
```
Vulnerability: OSV-2021-736
Summary: Stack-use-after-return in zend_fiber_suspend_context
Published: 2021-05-08T00:00:26.963755Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34013

```
Crash type: Stack-use-after-return READ 4
Crash state:
zend_fiber_suspend_context
zend_fiber_suspend
zim_Fiber_suspend
```
Vulnerability: OSV-2021-1472
Summary: UNKNOWN WRITE in h3NeighborRotations
Severity: HIGH
Published: 2021-10-21T00:01:21.968011Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40106

```
Crash type: UNKNOWN WRITE
Crash state:
h3NeighborRotations
h3_fuzzer.c
```
Vulnerability: OSV-2021-1188
Summary: Heap-buffer-overflow in MqttDecode_Publish
Severity: HIGH
Published: 2021-09-01T00:01:33.045505Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37866

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
MqttDecode_Publish
MqttClient_DecodePacket
MqttClient_HandlePacket
```
Vulnerability: OSV-2021-366
Summary: Negative-size-param in frame_get_metalayers
Published: 2021-02-11T00:00:56.927906Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30748

```
Crash type: Negative-size-param
Crash state:
frame_get_metalayers
frame_to_schunk
blosc2_schunk_from_buffer
```
Vulnerability: OSV-2021-41
Summary: Heap-buffer-overflow in BaseMemStream<char const>::getChar
Severity: MEDIUM
Published: 2021-01-12T00:00:15.199726Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29460

Crash type: Heap-buffer-overflow READ 1
Crash state:
BaseMemStream<char const>::getChar
Object::streamGetChar
Lexer::getChar
Vulnerability: OSV-2020-1340
Summary: Use-of-uninitialized-value in Gfx::fillPatch
Severity: MEDIUM
Published: 2020-07-22T21:50:07.878108Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15395

Crash type: Use-of-uninitialized-value
Crash state:
Gfx::fillPatch
Gfx::doPatchMeshShFill
Gfx::doShadingPatternFill
Vulnerability: OSV-2020-1655
Summary: Heap-buffer-overflow in zmq_z85_decode
Severity: MEDIUM
Published: 2020-08-24T00:01:20.386536Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25167

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
zmq_z85_decode
zmq::options_t::set_curve_key
zmq::options_t::setsockopt
```
Vulnerability: OSV-2021-389
Summary: Bad-cast to tt_cmap_t' (aka 'struct _tt_cmap')_cairo_truetype_index_to_ucs4
Severity: HIGH
Published: 2021-02-13T00:01:04.517207Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30823

Crash type: Bad-cast
Crash state:
Bad-cast to tt_cmap_t' (aka 'struct _tt_cmap')_cairo_truetype_index_to_ucs4
_cairo_sub_font_glyph_lookup_unicode
_cairo_sub_font_map_glyph
Vulnerability: OSV-2019-1
Summary: ASSERT: bufferRemainingSize() >= length.
Severity: HIGH
Published: 2021-03-29T05:14:39.113684Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18431

```
Crash type: ASSERT
Crash state:
bufferRemainingSize() >= length.
Envoy::Http::Http1::ConnectionImpl::copyToBuffer
Envoy::Http::Http1::RequestStreamEncoderImpl::encodeHeaders
```
Vulnerability: OSV-2021-1167
Summary: Heap-buffer-overflow in snmp_add_var
Severity: MEDIUM
Published: 2021-08-25T00:01:21.513657Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37564

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
snmp_add_var
snmp_api_fuzzer.c
```
Vulnerability: OSV-2021-223
Summary: Heap-buffer-overflow in fdilate_1_56
Severity: MEDIUM
Published: 2021-01-23T00:01:02.010626Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29819

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
fdilate_1_56
fmorphopgen_low_1
pixFMorphopGen_1
```
Vulnerability: OSV-2020-673
Summary: UNKNOWN WRITE in htp_connp_res_buffer
Severity: HIGH
Published: 2020-07-01T00:00:23.898100Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19323

```
Crash type: UNKNOWN WRITE
Crash state:
htp_connp_res_buffer
htp_connp_RES_LINE
htp_connp_res_data
```
Vulnerability: OSV-2020-389
Summary: Use-of-uninitialized-value in smtp_state_ehlo_resp
Severity: MEDIUM
Published: 2020-07-01T00:00:06.761801Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16918

```
Crash type: Use-of-uninitialized-value
Crash state:
smtp_state_ehlo_resp
smtp_statemach_act
Curl_pp_statemach
```
Vulnerability: OSV-2020-223
Summary: Heap-use-after-free in CRYPTO_DOWN_REF
Severity: HIGH
Published: 2020-06-24T01:51:19.666966Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21550

```
Crash type: Heap-use-after-free WRITE 4
Crash state:
CRYPTO_DOWN_REF
DH_free
evp_pkey_free_legacy
```
Vulnerability: OSV-2020-1878
Summary: Use-of-uninitialized-value in s_A85D_process
Severity: MEDIUM
Published: 2020-09-29T00:00:31.252499Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21616

```
Crash type: Use-of-uninitialized-value
Crash state:
s_A85D_process
gs_scan_token
interp
```
Vulnerability: OSV-2021-448
Summary: Use-of-uninitialized-value in std::__1::__packaged_task_func<std::__1::__bind<grk::mct::decompress_irrev
Severity: MEDIUM
Published: 2021-02-26T00:00:17.945183Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31365

```
Crash type: Use-of-uninitialized-value
Crash state:
std::__1::__packaged_task_func<std::__1::__bind<grk::mct::decompress_irrev
std::__1::packaged_task<int
ThreadPool::ThreadPool
```
Vulnerability: OSV-2020-1194
Summary: Heap-buffer-overflow in ndpi_search_mail_smtp_tcp
Severity: MEDIUM
Published: 2020-07-22T21:49:55.131761Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20563

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ndpi_search_mail_smtp_tcp
check_ndpi_tcp_flow_func
ndpi_detection_process_packet
```
Vulnerability: OSV-2020-2242
Summary: Heap-buffer-overflow in tinfl_decompress
Severity: MEDIUM
Published: 2020-12-05T00:00:50.659183Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28285

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
tinfl_decompress
mz_inflate
flb_gzip_uncompress
```
Vulnerability: OSV-2020-448
Summary: Heap-use-after-free in read_chunks_before_idat
Severity: HIGH
Published: 2020-07-01T00:00:10.159770Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16051

```
Crash type: Heap-use-after-free READ 2
Crash state:
read_chunks_before_idat
get_ancillary
spng_decoded_image_size
```
Vulnerability: OSV-2020-1897
Summary: Heap-buffer-overflow in stbi__tga_load
Severity: MEDIUM
Published: 2020-10-02T00:00:10.675680Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22651

```
Crash type: Heap-buffer-overflow READ 3
Crash state:
stbi__tga_load
stbi__load_main
stbi__load_and_postprocess_8bit
```
Vulnerability: OSV-2021-1075
Summary: UNKNOWN READ in helper_uc_tracecode
Severity: MEDIUM
Published: 2021-07-31T00:00:10.035246Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36677

```
Crash type: UNKNOWN READ
Crash state:
helper_uc_tracecode
```
Vulnerability: OSV-2021-16
Summary: Stack-buffer-overflow in JS::Heap::gather_conservative_roots
Severity: MEDIUM
Published: 2021-01-06T00:00:22.099017Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29266

```
Crash type: Stack-buffer-overflow READ 8
Crash state:
JS::Heap::gather_conservative_roots
JS::Heap::gather_roots
JS::Heap::collect_garbage
```
Vulnerability: OSV-2021-1425
Summary: Heap-buffer-overflow in fr_dns_label_to_value_box
Severity: MEDIUM
Published: 2021-10-09T00:00:09.054154Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39689

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
fr_dns_label_to_value_box
decode_value_trampoline
fr_struct_from_network
```
Vulnerability: OSV-2020-761
Summary: Heap-buffer-overflow in arrow::ConcatenateBuffers
Severity: MEDIUM
Published: 2020-07-09T00:00:21.470735Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23848

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
arrow::ConcatenateBuffers
arrow::ConcatenateImpl::Visit
arrow::Status arrow::VisitTypeInline<arrow::ConcatenateImpl>
```
Vulnerability: OSV-2020-2184
Summary: Heap-buffer-overflow in frame_get_usermeta
Severity: MEDIUM
Published: 2020-11-25T00:00:17.879160Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27812

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
frame_get_usermeta
blosc2_frame_to_schunk
blosc2_schunk_open_sframe
```
Vulnerability: OSV-2017-61
Summary: Heap-buffer-overflow in opj_mct_decode_real
Severity: MEDIUM
Published: 2021-01-13T21:56:30.603096Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3305

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
opj_mct_decode_real
opj_tcd_mct_decode
opj_tcd_decode_tile
```
Vulnerability: OSV-2020-624
Summary: Heap-buffer-overflow in LZ4_write32
Severity: HIGH
Published: 2020-07-01T00:00:21.077578Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15941

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
LZ4_write32
LZ4_compress_fast_extState
LZ4_compress_fast
```
Vulnerability: OSV-2021-274
Summary: Memcpy-param-overlap in frame_get_metalayers
Published: 2021-02-05T00:00:01.412696Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30253

```
Crash type: Memcpy-param-overlap
Crash state:
frame_get_metalayers
blosc2_frame_to_schunk
fuzz_decompress_frame.c
```
Vulnerability: OSV-2020-1252
Summary: Heap-buffer-overflow in jpc_dec_process_sot
Severity: MEDIUM
Published: 2020-07-22T21:50:00.494951Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13310

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
jpc_dec_process_sot
jpc_decode
jp2_decode
```
Vulnerability: OSV-2021-624
Summary: Heap-buffer-overflow in load_u32_be
Severity: MEDIUM
Published: 2021-04-10T00:01:08.368776Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33039

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
load_u32_be
ossl_sm4_set_key
cipher_hw_sm4_initkey
```
Vulnerability: OSV-2022-10
Summary: Heap-buffer-overflow in check_bad_address
Severity: HIGH
Published: 2022-01-06T00:00:44.554417Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43308

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
check_bad_address
check_for_bogus_wildcard
FuzzCheckForBogusWildcard
```
Vulnerability: OSV-2020-2254
Summary: Stack-use-after-return in insert_pin
Published: 2020-12-10T00:00:49.551956Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28383

```
Crash type: Stack-use-after-return READ 1
Crash state:
insert_pin
detect_idkey
sc_pkcs15emu_tcos_init_ex
```
Vulnerability: OSV-2022-142
Summary: Heap-use-after-free in archive_read_format_rar_read_data
Severity: HIGH
Published: 2022-02-12T00:00:11.416771Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44547

```
Crash type: Heap-use-after-free READ 4
Crash state:
archive_read_format_rar_read_data
archive_read_data
libarchive_fuzzer.cc
```
Vulnerability: OSV-2020-1478
Summary: Heap-buffer-overflow in load_jpeg_image
Severity: MEDIUM
Published: 2020-07-28T00:00:27.954104Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23153

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
load_jpeg_image
stbi__jpeg_load
stbi__load_main
```
Vulnerability: OSV-2020-327
Summary: Heap-buffer-overflow in sas_read8
Severity: MEDIUM
Published: 2020-07-01T00:00:02.920090Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12662

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
sas_read8
sas7bdat_parse_page_pass2
sas7bdat_parse_all_pages_pass2
```
Vulnerability: OSV-2021-777
Summary: Heap-use-after-free in xmlAddNextSibling
Severity: HIGH
Published: 2021-05-20T00:00:30.166614Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34461

Crash type: Heap-use-after-free READ 4
Crash state:
xmlAddNextSibling
xmlXIncludeCopyRange
xmlXIncludeCopyXPointer
Vulnerability: OSV-2020-1301
Summary: Heap-buffer-overflow in hts_md5_update
Severity: MEDIUM
Published: 2020-07-22T21:50:04.440116Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22231

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
hts_md5_update
cram_decode_slice
cram_decode_slice_mt
```
Vulnerability: OSV-2018-224
Summary: UNKNOWN READ
Severity: MEDIUM
Published: 2021-01-13T00:01:32.384790Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8353

```
Crash type: UNKNOWN READ
Crash state:
NULL```
Vulnerability: OSV-2021-1576
Summary: Heap-buffer-overflow in __bpf_object__open
Severity: HIGH
Published: 2021-11-14T00:01:18.685915Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40957

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
__bpf_object__open
bpf_object__open_mem
bpf-object-fuzzer.c
```
Vulnerability: OSV-2020-1244
Summary: Use-of-uninitialized-value in decimate_dsd_run
Severity: MEDIUM
Published: 2020-07-22T21:49:59.837324Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19925

```
Crash type: Use-of-uninitialized-value
Crash state:
decimate_dsd_run
WavpackUnpackSamples
fuzzer.cc
```
Vulnerability: OSV-2021-262
Summary: Heap-buffer-overflow in sc_pkcs15emu_oberthur_add_data
Severity: MEDIUM
Published: 2021-02-02T00:00:59.070801Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30112

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
sc_pkcs15emu_oberthur_add_data
sc_oberthur_parse_privateinfo
sc_pkcs15emu_oberthur_init
```
Vulnerability: OSV-2020-632
Summary: Global-buffer-overflow in parse_http_request
Published: 2020-07-01T00:00:21.523430Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14582

Crash type: Global-buffer-overflow READ 1
Crash state:
parse_http_request
fuzz_parse_http_request
Vulnerability: OSV-2020-2192
Summary: Heap-buffer-overflow in decompress_smooth_data
Severity: MEDIUM
Published: 2020-11-26T00:00:47.446491Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27852

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
decompress_smooth_data
process_data_context_main
jpeg_read_scanlines
```
Vulnerability: OSV-2022-47
Summary: Heap-buffer-overflow in mem_mono_copy_mono
Severity: MEDIUM
Published: 2022-01-16T00:00:36.108268Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43621

Crash type: Heap-buffer-overflow READ 2
Crash state:
mem_mono_copy_mono
mem_mapped4_copy_color
tile_clip_copy_color
Vulnerability: OSV-2020-1839
Summary: UNKNOWN READ in flb_sds_cat
Severity: MEDIUM
Published: 2020-09-25T00:00:21.320950Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25904

```
Crash type: UNKNOWN READ
Crash state:
flb_sds_cat
flb_msgpack_gelf_key
flb_msgpack_gelf_flatten
```
Vulnerability: OSV-2021-1258
Summary: Bad-cast to SplashPattern from invalid vptr
Severity: HIGH
Published: 2021-09-15T00:00:11.560834Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38669

Crash type: Bad-cast
Crash state:
Bad-cast to SplashPattern from invalid vptr
SplashState::~SplashState
Splash::restoreState
Vulnerability: OSV-2020-4
Summary: Use-of-uninitialized-value in ndpi_check_dga_name
Severity: MEDIUM
Published: 2020-06-24T01:51:09.009491Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23524

```
Crash type: Use-of-uninitialized-value
Crash state:
ndpi_check_dga_name
ndpi_search_dns
check_ndpi_udp_flow_func
```
Vulnerability: OSV-2022-115
Summary: UNKNOWN READ in unescape_string
Severity: MEDIUM
Published: 2022-02-04T00:00:20.060698Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44300

```
Crash type: UNKNOWN READ
Crash state:
unescape_string
parse_string
parse_object
```
Vulnerability: OSV-2020-95
Summary: Use-of-uninitialized-value in jbig2_arith_decode
Severity: MEDIUM
Published: 2020-06-24T01:51:13.826049Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20493

Crash type: Use-of-uninitialized-value
Crash state:
jbig2_arith_decode
jbig2_decode_generic_template0_TPGDON
jbig2_immediate_generic_region
Vulnerability: OSV-2018-13
Summary: Use-of-uninitialized-value in bn_sub_words
Severity: MEDIUM
Published: 2021-01-13T00:00:05.629092Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8654

```
Crash type: Use-of-uninitialized-value
Crash state:
bn_sub_words
bn_reduce_once
bn_from_montgomery_in_place
```
Vulnerability: OSV-2020-1356
Summary: Segv on unknown address in vips_XYZ2Lab_line
Published: 2020-07-24T00:00:05.678188Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24290

```
Crash type: Segv on unknown address
Crash state:
vips_XYZ2Lab_line
vips_colour_gen
vips_region_generate
```
Vulnerability: OSV-2018-273
Summary: Heap-buffer-overflow in ftp_parse_winnt_ls
Severity: MEDIUM
Published: 2021-01-15T00:00:18.012849Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7930

Crash type: Heap-buffer-overflow READ 1
Crash state:
ftp_parse_winnt_ls
wget_ftpls_fuzzer.c
Vulnerability: OSV-2020-370
Summary: Heap-use-after-free in ih264_inter_pred_luma_horz_hpel_vert_qpel_ssse3
Severity: HIGH
Published: 2020-07-01T00:00:05.612589Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18595

```
Crash type: Heap-use-after-free READ 16
Crash state:
ih264_inter_pred_luma_horz_hpel_vert_qpel_ssse3
ih264d_motion_compensate_mp
ih264d_decode_recon_tfr_nmb
```
Vulnerability: OSV-2020-2080
Summary: Heap-buffer-overflow in coap_opt_length
Severity: MEDIUM
Published: 2020-10-17T00:00:43.023138Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26371

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
coap_opt_length
coap_pdu_parse_opt
coap_pdu_parse
```
Vulnerability: OSV-2020-665
Summary: Global-buffer-overflow in backup
Published: 2020-07-01T00:00:23.491385Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18447

Crash type: Global-buffer-overflow READ 1
Crash state:
backup
lex_string
lex_next
Vulnerability: OSV-2021-235
Summary: Global-buffer-overflow in QSvgSwitch::draw
Published: 2021-01-25T00:00:16.933600Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29873

```
Crash type: Global-buffer-overflow READ 1
Crash state:
QSvgSwitch::draw
QSvgTinyDocument::draw
QSvgTinyDocument::draw
```
Vulnerability: OSV-2021-1171
Summary: Heap-buffer-overflow in luaG_runerror
Severity: MEDIUM
Published: 2021-08-27T00:00:11.241923Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37621

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
luaG_runerror
luaD_pretailcall
luaV_execute
```
Vulnerability: OSV-2022-379
Summary: Segv on unknown address in bit_write_TV
Published: 2022-04-27T00:00:44.539231Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47014

```
Crash type: Segv on unknown address
Crash state:
bit_write_TV
bit_write_T
dwg_encode_BLOCK
```
Vulnerability: OSV-2021-1521
Summary: Heap-buffer-overflow in exif_data_load_data_content
Severity: MEDIUM
Published: 2021-11-03T00:00:07.006490Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40617

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
exif_data_load_data_content
exif_data_load_data
exif_loader_get_data
```
Vulnerability: OSV-2020-1643
Summary: Heap-use-after-free in UA_NodeMap_delete
Severity: HIGH
Published: 2020-08-22T00:00:17.203907Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25068

```
Crash type: Heap-use-after-free READ 4
Crash state:
UA_NodeMap_delete
UA_Server_new
fuzz_binary_message.cc
```
Vulnerability: OSV-2021-1736
Summary: Segv on unknown address in symhash
Published: 2021-12-22T00:01:49.194656Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42741

```
Crash type: Segv on unknown address
Crash state:
symhash
hashtab_search
mls_semantic_level_expand
```
Vulnerability: OSV-2020-1004
Summary: Heap-buffer-overflow in gtTileSeparate
Severity: MEDIUM
Published: 2020-07-22T21:49:39.484722Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13280

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
gtTileSeparate
TIFFReadRGBATileExt
cv::TiffDecoder::readData
```
Vulnerability: OSV-2018-121
Summary: Use-of-uninitialized-value in _gnutls_x509_read_pkalgo_params
Severity: MEDIUM
Published: 2021-01-13T00:00:55.302684Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10135

```
Crash type: Use-of-uninitialized-value
Crash state:
_gnutls_x509_read_pkalgo_params
print_crt_pubkey
print_cert
```
Vulnerability: OSV-2020-188
Summary: Heap-buffer-overflow in BEInt<short, 2>::operator short
Severity: MEDIUM
Published: 2020-06-24T01:51:18.079088Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20924

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
BEInt<short, 2>::operator short
OT::IntType<short, 2u>::operator int
OT::TupleVarHeader::calculate_scalar
```
Vulnerability: OSV-2018-68
Summary: Heap-buffer-overflow in read_bits_16
Severity: MEDIUM
Published: 2021-01-13T00:00:32.913897Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12817

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
read_bits_16
decode_number
parse_tables
```
Vulnerability: OSV-2021-921
Summary: Stack-buffer-overflow in bool re2::DFA::InlinedSearchLoop<true, true, true>
Severity: MEDIUM
Published: 2021-07-06T00:01:05.257431Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35821

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
bool re2::DFA::InlinedSearchLoop<true, true, true>
re2::DFA::Search
re2::Prog::SearchDFA
```
Vulnerability: OSV-2020-2297
Summary: Heap-double-free in WelsCommon::WelsFree
Severity: HIGH
Published: 2020-12-30T00:00:21.907495Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29073

```
Crash type: Heap-double-free
Crash state:
WelsCommon::WelsFree
WelsCommon::CMemoryAlign::WelsFree
WelsDec::FreePicture
```
Vulnerability: OSV-2020-1842
Summary: Heap-buffer-overflow in parquet::arrow::SchemaManifest::Make
Severity: MEDIUM
Published: 2020-09-26T00:00:04.850649Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25933

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
parquet::arrow::SchemaManifest::Make
parquet::arrow::FileReader::Make
parquet::arrow::internal::FuzzReader
```
Vulnerability: OSV-2022-181
Summary: Heap-use-after-free in zval_call_destructor
Severity: HIGH
Published: 2022-02-21T00:00:49.282928Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44885

```
Crash type: Heap-use-after-free READ 4
Crash state:
zval_call_destructor
zend_hash_reverse_apply
shutdown_destructors
```
Vulnerability: OSV-2021-537
Summary: Heap-buffer-overflow in sc_pkcs15emu_oberthur_add_pubkey
Severity: MEDIUM
Published: 2021-03-19T00:01:19.699884Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32149

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
sc_pkcs15emu_oberthur_add_pubkey
sc_oberthur_parse_publicinfo
sc_pkcs15emu_oberthur_init
```
Vulnerability: OSV-2021-1389
Summary: Negative-size-param in Imf_3_1::memstream_read
Published: 2021-09-28T00:00:34.073331Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39329

```
Crash type: Negative-size-param
Crash state:
Imf_3_1::memstream_read
dispatch_read
exr_read_scanline_chunk_info
```
Vulnerability: OSV-2020-1141
Summary: Heap-buffer-overflow in ff_hevc_put_hevc_epel_pixels_8_sse
Severity: MEDIUM
Published: 2020-07-22T21:49:50.461909Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13568

```
Crash type: Heap-buffer-overflow READ 16
Crash state:
ff_hevc_put_hevc_epel_pixels_8_sse
acceleration_functions::put_hevc_epel
void mc_chroma<unsigned short>
```
Vulnerability: OSV-2020-864
Summary: Heap-buffer-overflow in H5O_attr_shared_decode
Severity: MEDIUM
Published: 2020-07-14T22:13:49.668025Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18806

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
H5O_attr_shared_decode
H5O_msg_iterate_real
H5O_attr_open_by_name
```
Vulnerability: OSV-2017-119
Summary: Stack-buffer-overflow in ot::MeshCoP::CommissionerSessionIdTlv::GetCommissionerSessionId
Severity: MEDIUM
Published: 2021-01-13T21:57:51.011913Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3376

```
Crash type: Stack-buffer-overflow READ 2
Crash state:
ot::MeshCoP::CommissionerSessionIdTlv::GetCommissionerSessionId
ot::NetworkData::Leader::HandleCommissioningSet
ot::Coap::Coap::ProcessReceivedRequest
```
Vulnerability: OSV-2020-2014
Summary: Stack-buffer-overflow in flb_sds_cat
Severity: MEDIUM
Published: 2020-10-11T00:00:12.565611Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26237

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
flb_sds_cat
flb_msgpack_gelf_value
flb_msgpack_to_gelf
```
Vulnerability: OSV-2020-1792
Summary: Heap-buffer-overflow in text_normalize_buffer
Severity: MEDIUM
Published: 2020-09-18T00:00:21.241767Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20464

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
text_normalize_buffer
arj_read_file_header
cli_scanarj
```
Vulnerability: OSV-2022-302
Summary: Heap-use-after-free in read_markers
Severity: HIGH
Published: 2022-04-05T00:00:09.283355Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46334

```
Crash type: Heap-use-after-free READ 4
Crash state:
read_markers
consume_markers
jpeg_consume_input
```
Vulnerability: OSV-2018-208
Summary: Global-buffer-overflow in bloaty::wasm::Section::Read
Published: 2021-01-13T00:01:24.904877Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9540

```
Crash type: Global-buffer-overflow READ 8
Crash state:
bloaty::wasm::Section::Read
bloaty::wasm::ParseSections
bloaty::wasm::WebAssemblyObjectFile::ProcessFile
```
Vulnerability: OSV-2020-2151
Summary: Use-of-uninitialized-value in tinfl_decompress
Severity: MEDIUM
Published: 2020-11-13T00:00:56.838971Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27413

```
Crash type: Use-of-uninitialized-value
Crash state:
tinfl_decompress
mz_inflate
mz_uncompress2
```
Vulnerability: OSV-2022-84
Summary: Heap-buffer-overflow in Core::Stream::File::open_path
Severity: MEDIUM
Published: 2022-01-24T00:00:39.186446Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43978

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
Core::Stream::File::open_path
Core::Stream::File::open
Audio::FlacLoaderPlugin::FlacLoaderPlugin
```
Vulnerability: OSV-2020-425
Summary: Heap-buffer-overflow in ihevcd_parse_coding_unit
Severity: MEDIUM
Published: 2020-07-01T00:00:08.799539Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17055

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ihevcd_parse_coding_unit
ihevcd_parse_coding_quadtree
ihevcd_parse_coding_quadtree
```
Vulnerability: OSV-2016-4
Summary: Global-buffer-overflow in vte_write_debug
Published: 2021-01-15T05:21:11.020482Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=174

```
Crash type: Global-buffer-overflow READ 1
Crash state:
vte_write_debug
do_execute
do_action
```
Vulnerability: OSV-2020-1053
Summary: UNKNOWN READ in js_parse_source_element
Severity: MEDIUM
Published: 2020-07-22T21:49:43.353213Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21404

Crash type: UNKNOWN READ
Crash state:
js_parse_source_element
__JS_EvalInternal
JS_Eval
Vulnerability: OSV-2022-139
Summary: Heap-use-after-free in nghttp2_http_record_request_method
Severity: HIGH
Published: 2022-02-11T00:01:42.562895Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44516

```
Crash type: Heap-use-after-free READ 4
Crash state:
nghttp2_http_record_request_method
nghttp2_session_mem_send_internal
nghttp2_session_send
```
Vulnerability: OSV-2018-176
Summary: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short
Severity: MEDIUM
Published: 2021-01-13T00:01:13.206139Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10899

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
AAT::LookupSegmentSingle<OT::IntType<unsigned short, 2u> >::cmp
AAT::LookupSegmentSingle<OT::IntType<unsigned short, 2u> > const* OT::VarSizedBi
```
Vulnerability: OSV-2020-976
Summary: Heap-buffer-overflow in Json::OurReader::readComment
Severity: MEDIUM
Published: 2020-07-22T21:49:37.423382Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18140

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Json::OurReader::readComment
Json::OurReader::readToken
Json::OurReader::parse
```
Vulnerability: OSV-2020-833
Summary: Heap-buffer-overflow in Hacl_Chacha20PolyNUMBER_256_aead_decrypt
Severity: MEDIUM
Published: 2020-07-14T22:13:39.041123Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23934

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Hacl_Chacha20PolyNUMBER_256_aead_decrypt
ChaCha20PolyNUMBER_Open
sftk_ChaCha20PolyNUMBER_Decrypt
```
Vulnerability: OSV-2020-999
Summary: UNKNOWN WRITE in vcf_parse_format
Severity: HIGH
Published: 2020-07-22T21:49:39.091716Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21139

```
Crash type: UNKNOWN WRITE
Crash state:
vcf_parse_format
vcf_parse
view_vcf
```
Vulnerability: OSV-2018-199
Summary: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short
Severity: MEDIUM
Published: 2021-01-13T00:01:21.698030Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10986

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
AAT::LookupSegmentSingle<OT::IntType<unsigned short, 2u> >::cmp
AAT::LookupSegmentSingle<OT::IntType<unsigned short, 2u> > const* OT::VarSizedBi
```
Vulnerability: OSV-2020-130
Summary: Use-of-uninitialized-value in OT::TupleVarHeader::calculate_scalar
Severity: MEDIUM
Published: 2020-06-24T01:51:15.452987Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20919

```
Crash type: Use-of-uninitialized-value
Crash state:
OT::TupleVarHeader::calculate_scalar
OT::gvar::accelerator_t::apply_deltas_to_points
bool OT::glyf::Glyph::get_points<bool OT::glyf::accelerator_t::get_points<OT::gl
```
Vulnerability: OSV-2020-560
Summary: Heap-use-after-free in cin_get
Severity: HIGH
Published: 2020-07-01T00:00:16.991378Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15200

```
Crash type: Heap-use-after-free READ 1
Crash state:
cin_get
get_token
prim
```
Vulnerability: OSV-2021-219
Summary: UNKNOWN READ in H5HG__cache_heap_deserialize
Severity: MEDIUM
Published: 2021-01-22T00:01:04.834439Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29759

```
Crash type: UNKNOWN READ
Crash state:
H5HG__cache_heap_deserialize
H5C_load_entry
H5C_protect
```
Vulnerability: OSV-2020-649
Summary: Heap-use-after-free in sctp_fill_hmac_digest_m
Severity: HIGH
Published: 2020-07-01T00:00:22.458848Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18080

```
Crash type: Heap-use-after-free WRITE {*}
Crash state:
sctp_fill_hmac_digest_m
sctp_lowlevel_chunk_output
sctp_med_chunk_output
```
Vulnerability: OSV-2021-1448
Summary: Heap-buffer-overflow in mrb_vm_exec
Severity: HIGH
Published: 2021-10-15T00:00:09.256436Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39947

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
mrb_vm_exec
mrb_vm_run
mrb_top_run
```
Vulnerability: OSV-2022-210
Summary: UNKNOWN READ in pdfi_count_cff_index
Severity: MEDIUM
Published: 2022-03-04T00:00:09.623913Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45173

```
Crash type: UNKNOWN READ
Crash state:
pdfi_count_cff_index
pdfi_read_cff_font
pdfi_load_font
```
Vulnerability: OSV-2018-160
Summary: Heap-buffer-overflow in do_uncompress_block
Severity: HIGH
Published: 2021-01-13T00:01:07.606550Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11011

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
do_uncompress_block
process_block
do_uncompress_file
```
Vulnerability: OSV-2020-433
Summary: UNKNOWN READ in icu_64::UCharsTrie::branchNext
Severity: MEDIUM
Published: 2020-07-01T00:00:09.276939Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15580

```
Crash type: UNKNOWN READ
Crash state:
icu_64::UCharsTrie::branchNext
icu_64::CollationIterator::nextCE32FromContraction
icu_64::CollationIterator::appendCEsFromCE32
```
Vulnerability: OSV-2020-2239
Summary: Heap-buffer-overflow in flb_http_do
Severity: HIGH
Published: 2020-12-05T00:00:32.824865Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28256

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
flb_http_do
http_fuzzer.c
```
Vulnerability: OSV-2020-1946
Summary: Heap-buffer-overflow in x509_parse_ext_basic_constraints
Severity: MEDIUM
Published: 2020-10-02T00:00:37.298250Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15451

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
x509_parse_ext_basic_constraints
x509_parse_extension
x509_parse_extensions
```
Vulnerability: OSV-2018-29
Summary: Heap-buffer-overflow in r_bin_mdmp_get_mem_info
Severity: MEDIUM
Published: 2021-01-13T00:00:11.314581Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10222

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
r_bin_mdmp_get_mem_info
r_bin_mdmp_get_srwx
sections
```
Vulnerability: OSV-2020-599
Summary: Index-out-of-bounds in prepare_macpads
Severity: MEDIUM
Published: 2020-07-01T00:00:19.430674Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14768

```
Crash type: Index-out-of-bounds
Crash state:
prepare_macpads
_gcry_md_setkey
gcry_mac_setkey
```
Vulnerability: OSV-2020-40
Summary: Heap-buffer-overflow in ndpi_workflow_process_packet
Severity: MEDIUM
Published: 2020-06-24T01:51:11.416349Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20766

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
ndpi_workflow_process_packet
fuzz_ndpi_reader.c
```
Vulnerability: OSV-2020-1550
Summary: UNKNOWN WRITE in hb_vector_t<CFF::dict_val_t>::resize
Severity: HIGH
Published: 2020-07-31T00:00:44.183338Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24489

```
Crash type: UNKNOWN WRITE
Crash state:
hb_vector_t<CFF::dict_val_t>::resize
hb_vector_t<CFF::dict_val_t>::push
CFF::dict_val_t* hb_vector_t<CFF::dict_val_t>::push<CFF::dict_val_t const&>
```
Vulnerability: OSV-2021-1262
Summary: Heap-buffer-overflow in H5O__chunk_deserialize
Severity: MEDIUM
Published: 2021-09-15T00:01:43.515380Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38686

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
H5O__chunk_deserialize
H5O__cache_chk_deserialize
H5C_protect
```
Vulnerability: OSV-2020-825
Summary: Index-out-of-bounds in tcg_liveness_analysis_arm
Severity: MEDIUM
Published: 2020-07-14T05:37:49.161459Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23971

```
Crash type: Index-out-of-bounds
Crash state:
tcg_liveness_analysis_arm
tcg_gen_code_arm
cpu_arm_gen_code_arm
```
Vulnerability: OSV-2020-1100
Summary: Heap-buffer-overflow in tlb_set_page_mips
Severity: MEDIUM
Published: 2020-07-22T21:49:47.293682Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15030

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
tlb_set_page_mips
mips_cpu_handle_mmu_fault_mips
tlb_fill_mips
```
Vulnerability: OSV-2022-206
Summary: Heap-buffer-overflow in spgetcc
Severity: MEDIUM
Published: 2022-02-27T00:02:01.721420Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45049

Crash type: Heap-buffer-overflow READ {*}
Crash state:
spgetcc
gs_scan_token
gs_interpret
Vulnerability: OSV-2021-1370
Summary: Heap-buffer-overflow in OT::MathGlyphConstruction::subset
Severity: HIGH
Published: 2021-09-25T00:01:37.745585Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39211

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
OT::MathGlyphConstruction::subset
OT::MathVariants::subset
OT::MATH::subset
```
Vulnerability: OSV-2018-137
Summary: Heap-buffer-overflow in set_char_prefix
Severity: HIGH
Published: 2021-01-13T00:00:59.684851Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10159

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
set_char_prefix
parse_included_directories
set_long_option
```
Vulnerability: OSV-2020-1012
Summary: Heap-buffer-overflow in sas_read8
Severity: MEDIUM
Published: 2020-07-22T21:49:40.050967Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12723

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
sas_read8
sas7bdat_parse_column_size_subheader
sas7bdat_parse_page_pass2
```
Vulnerability: OSV-2021-464
Summary: Heap-buffer-overflow in blosc_read_header
Severity: MEDIUM
Published: 2021-03-01T00:01:15.739563Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31535

```
Crash type: Heap-buffer-overflow READ 16
Crash state:
blosc_read_header
blosc2_cbuffer_sizes
frame_get_lazychunk
```
Vulnerability: OSV-2020-872
Summary: Use-of-uninitialized-value in tun_key_to_attr
Severity: MEDIUM
Published: 2020-07-14T22:13:51.984458Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22026

```
Crash type: Use-of-uninitialized-value
Crash state:
tun_key_to_attr
odp_flow_key_from_flow__
parse_keys
```
Vulnerability: OSV-2021-1235
Summary: Heap-buffer-overflow in ih264d_fill_bs1_16x16mb_pslice
Severity: MEDIUM
Published: 2021-09-12T00:00:37.949727Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38387

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ih264d_fill_bs1_16x16mb_pslice
ih264d_compute_bs_non_mbaff_thread
ih264d_recon_deblk_slice
```
Vulnerability: OSV-2020-1507
Summary: Index-out-of-bounds in MemoryRemoveTrailingZeros
Severity: MEDIUM
Published: 2020-07-28T00:00:34.623899Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23127

```
Crash type: Index-out-of-bounds
Crash state:
MemoryRemoveTrailingZeros
CheckPWAuthSession
CheckAuthSession
```
Vulnerability: OSV-2018-422
Summary: Use-of-uninitialized-value in cf2_glyphpath_pushPrevElem
Severity: MEDIUM
Published: 2021-01-15T00:01:16.942847Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5659

Crash type: Use-of-uninitialized-value
Crash state:
cf2_glyphpath_pushPrevElem
cf2_glyphpath_curveTo
cf2_interpT2CharString
Vulnerability: OSV-2020-171
Summary: Heap-buffer-overflow in ndpi_parse_packet_line_info
Severity: MEDIUM
Published: 2020-06-24T01:51:17.251380Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23396

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_parse_packet_line_info
ndpi_int_search_bittorrent_tcp_zero
ndpi_int_search_bittorrent_tcp
```
Vulnerability: OSV-2020-1854
Summary: Use-of-uninitialized-value in UpdateDecStatNoFreezingInfo
Severity: MEDIUM
Published: 2020-09-27T00:00:12.495058Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25970

```
Crash type: Use-of-uninitialized-value
Crash state:
UpdateDecStatNoFreezingInfo
UpdateDecStat
WelsDec::DecodeFrameConstruction
```
Vulnerability: OSV-2021-872
Summary: Heap-buffer-overflow in ndpi_set_detected_protocol
Severity: MEDIUM
Published: 2021-06-18T00:01:21.964353Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35300

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ndpi_set_detected_protocol
ndpi_int_http_add_connection
check_content_type_and_change_protocol
```
Vulnerability: OSV-2020-521
Summary: Heap-buffer-overflow in acommon::ObjStack::dup_top
Severity: HIGH
Published: 2020-07-01T00:00:14.312168Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18462

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
acommon::ObjStack::dup_top
acommon::StringMap::add
acommon::Config::lookup_list
```
Vulnerability: OSV-2018-91
Summary: Heap-buffer-overflow in BEInt<unsigned int, 4>::operator unsigned int
Severity: MEDIUM
Published: 2021-01-13T00:00:41.028574Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10881

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
BEInt<unsigned int, 4>::operator unsigned int
OT::kern::has_data
hb_ot_layout_has_kerning
```
Vulnerability: OSV-2022-5
Summary: Heap-buffer-overflow in pcpp::IPv6AuthenticationHeader::getExtensionLen
Severity: MEDIUM
Published: 2022-01-05T00:00:46.965901Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43290

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pcpp::IPv6AuthenticationHeader::getExtensionLen
pcpp::IPv6Layer::parseExtensions
pcpp::IPv6Layer::IPv6Layer
```
Vulnerability: OSV-2022-314
Summary: UNKNOWN READ in [heap]
Severity: MEDIUM
Published: 2022-04-07T00:01:25.692646Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46395

```
Crash type: UNKNOWN READ
Crash state:
[heap]
```
Vulnerability: OSV-2021-258
Summary: Heap-buffer-overflow in unstripe
Severity: MEDIUM
Published: 2021-02-01T00:00:12.032478Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30087

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
unstripe
arith_uncompress_to
arith_decode
```
Vulnerability: OSV-2020-2002
Summary: Heap-buffer-overflow in McChromaWithFragMv_c
Severity: MEDIUM
Published: 2020-10-09T00:00:14.875449Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26198

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
McChromaWithFragMv_c
McChroma_ssse3
WelsDec::BaseMC
```
Vulnerability: OSV-2020-608
Summary: UNKNOWN READ in ot::Ip6::Address::PrefixMatch
Severity: MEDIUM
Published: 2020-07-01T00:00:20.187182Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13349

```
Crash type: UNKNOWN READ
Crash state:
ot::Ip6::Address::PrefixMatch
ot::Dhcp6::Dhcp6Server::RemovePrefixAgent
ot::Dhcp6::Dhcp6Server::UpdateService
```
Vulnerability: OSV-2020-258
Summary: Stack-buffer-overflow in ot::Message::Write
Severity: MEDIUM
Published: 2020-06-30T00:00:42.072474Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19338

```
Crash type: Stack-buffer-overflow READ 11
Crash state:
ot::Message::Write
ot::Message::Append
ot::Mle::Mle::AppendResponse
```
Vulnerability: OSV-2021-1409
Summary: Heap-buffer-overflow in unpack_16bit_4chan_planar
Severity: HIGH
Published: 2021-10-04T00:01:39.306375Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39538

```
Crash type: Heap-buffer-overflow WRITE 2
Crash state:
unpack_16bit_4chan_planar
exr_decoding_run
Imf_3_1::checkCoreFile
```
Vulnerability: OSV-2020-1291
Summary: UNKNOWN READ in std::__1::_MetaBase<__can_be_converted_to_string_view<char, std::__1::char_trait
Severity: MEDIUM
Published: 2020-07-22T21:50:03.564988Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23429

```
Crash type: UNKNOWN READ
Crash state:
std::__1::_MetaBase<__can_be_converted_to_string_view<char, std::__1::char_trait
bool std::__1::operator<<char, std::__1::char_traits<char>, std::__1::allocator<
std::__1::__tree_iterator<std::__1::__value_type<std::__1::basic_string<char, st
```
Vulnerability: OSV-2021-1059
Summary: Use-of-uninitialized-value in fuzz_json_decode_encode.cc
Severity: MEDIUM
Published: 2021-07-25T00:01:28.049657Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36502

```
Crash type: Use-of-uninitialized-value
Crash state:
fuzz_json_decode_encode.cc
UA_ByteString_allocBuffer
fuzz_json_decode_encode.cc
```
Vulnerability: OSV-2022-226
Summary: Heap-buffer-overflow in vips_rect_intersectrect
Severity: MEDIUM
Published: 2022-03-09T00:00:12.248020Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45353

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
vips_rect_intersectrect
vips_foreign_load_pdf_generate
vips_region_prepare_to_generate
```
Vulnerability: OSV-2021-1184
Summary: UNKNOWN READ in ucl_array_append
Severity: MEDIUM
Published: 2021-09-01T00:00:25.788562Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37885

```
Crash type: UNKNOWN READ
Crash state:
ucl_array_append
ucl_object_copy_internal
ucl_object_copy
```
Vulnerability: OSV-2020-690
Summary: UNKNOWN READ in ot::Coap::CoapBase::RemoveResource
Severity: MEDIUM
Published: 2020-07-01T00:00:25.027464Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13369

```
Crash type: UNKNOWN READ
Crash state:
ot::Coap::CoapBase::RemoveResource
ot::MeshCoP::BorderAgent::Stop
ot::Mle::Mle::SetStateDetached
```
Vulnerability: OSV-2020-2130
Summary: Use-of-uninitialized-value in memory_test
Severity: MEDIUM
Published: 2020-11-07T00:00:36.395318Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27020

```
Crash type: Use-of-uninitialized-value
Crash state:
memory_test
fuzzer_send
SendBuffered
```
Vulnerability: OSV-2020-2075
Summary: Heap-use-after-free in flb_parser_decoder_list_destroy
Severity: HIGH
Published: 2020-10-16T00:00:35.685490Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26345

```
Crash type: Heap-use-after-free READ 8
Crash state:
flb_parser_decoder_list_destroy
parser_fuzzer.c
flb_free
```
Vulnerability: OSV-2020-1209
Summary: Use-of-uninitialized-value in psnip_safe_size_mul
Severity: MEDIUM
Published: 2020-07-22T21:49:56.819105Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16834

```
Crash type: Use-of-uninitialized-value
Crash state:
psnip_safe_size_mul
SafeMulDims
Mat_VarFree
```
Vulnerability: OSV-2020-60
Summary: Heap-buffer-overflow in get_ndpi_flow_info
Severity: MEDIUM
Published: 2020-06-24T01:51:12.251398Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20109

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
get_ndpi_flow_info
get_ndpi_flow_info6
packet_processing
```
Vulnerability: OSV-2021-556
Summary: Uncaught exception in java.base/java.util.Arrays.copyOf
Severity: LOW
Published: 2021-03-25T00:01:02.373925Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32423

```
Crash type: Uncaught exception
Crash state:
java.base/java.util.Arrays.copyOf
com.fasterxml.jackson.core.util.TextBuffer.expandCurrentSegment
com.fasterxml.jackson.core.json.UTF8StreamJsonParser.addName
```
Vulnerability: OSV-2021-1612
Summary: Heap-buffer-overflow in MqttDecode_Props
Severity: MEDIUM
Published: 2021-11-24T00:00:12.425812Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41291

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
MqttDecode_Props
MqttDecode_Disconnect
MqttClient_DecodePacket
```
Vulnerability: OSV-2020-1570
Summary: Heap-buffer-overflow in x265::PicYuv::copyFromPicture
Severity: MEDIUM
Published: 2020-08-03T00:00:09.880989Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24590

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
x265::PicYuv::copyFromPicture
x265::Encoder::encode
x265_encoder_encode
```
Vulnerability: OSV-2020-805
Summary: UNKNOWN READ in H5MM_xstrdup
Severity: MEDIUM
Published: 2020-07-14T05:37:42.658866Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17335

```
Crash type: UNKNOWN READ
Crash state:
H5MM_xstrdup
H5G__ent_to_link
H5G__node_iterate
```
Vulnerability: OSV-2021-413
Summary: UNKNOWN WRITE in sudo_user_free
Severity: HIGH
Published: 2021-02-18T00:02:34.207161Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31042

```
Crash type: UNKNOWN WRITE
Crash state:
sudo_user_free
sudoers_policy_close
fuzz_policy.c
```