TQRG/raw-osv-data huggingface dataset:
Vulnerability: OSV-2020-640
Summary: Stack-buffer-overflow in ot::Message::Write
Severity: MEDIUM
Published: 2020-07-01T00:00:21.979079Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15447

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
ot::Message::Write
ot::Message::Append
ot::AddressResolver::SendAddressQueryResponse
```
Vulnerability: OSV-2021-640
Summary: Heap-buffer-overflow in frame_get_metalayers
Severity: MEDIUM
Published: 2021-04-16T00:00:28.044116Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33251

```
Crash type: Heap-buffer-overflow READ 6
Crash state:
frame_get_metalayers
frame_to_schunk
blosc2_schunk_from_buffer
```
Vulnerability: OSV-2020-569
Summary: Null-dereference READ
Published: 2020-07-01T00:00:17.505856Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15388

```
Crash type: Null-dereference READ
Crash state:
NULL```
Vulnerability: OSV-2022-62
Summary: Stack-buffer-overflow in load_regex_matcher
Severity: MEDIUM
Published: 2022-01-21T00:00:07.079980Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43869

```
Crash type: Stack-buffer-overflow WRITE 1
Crash state:
load_regex_matcher
cli_loadwdb
cli_load
```
Vulnerability: OSV-2018-190
Summary: Heap-buffer-overflow in OT::Coverage::intersects
Severity: MEDIUM
Published: 2021-01-13T00:01:19.816069Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10084

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
OT::Coverage::intersects
OT::ContextFormat2::closure
_hb_void_t const* OT::hb_closure_context_t::dispatch<OT::ContextFormat2>
```
Vulnerability: OSV-2020-990
Summary: UNKNOWN READ in FLAC__crc16_update_words32
Severity: MEDIUM
Published: 2020-07-22T21:49:38.553384Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16457

```
Crash type: UNKNOWN READ
Crash state:
FLAC__crc16_update_words32
crc16_update_block_
bitreader_read_from_client_
```
Vulnerability: OSV-2021-1787
Summary: Global-buffer-overflow in stbi__jpeg_decode_block
Published: 2021-12-31T00:00:36.879041Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43113

```
Crash type: Global-buffer-overflow READ 4
Crash state:
stbi__jpeg_decode_block
stbi__decode_jpeg_image
stbi__jpeg_load
```
Vulnerability: OSV-2021-1768
Summary: Heap-buffer-overflow in grk::GrkImage::color_esycc_to_rgb
Severity: MEDIUM
Published: 2021-12-27T00:01:47.612463Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42958

```
Crash type: Heap-buffer-overflow READ 16
Crash state:
grk::GrkImage::color_esycc_to_rgb
grk::GrkImage::colorConvert
grk_decompress_fuzzer.cpp
```
Vulnerability: OSV-2021-1338
Summary: Uncaught exception in org.jsoup.parser.HtmlTreeBuilder.process
Severity: LOW
Published: 2021-09-21T00:00:09.779054Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38982

```
Crash type: Uncaught exception
Crash state:
org.jsoup.parser.HtmlTreeBuilder.process
org.jsoup.parser.HtmlTreeBuilderState$18.process
org.jsoup.parser.HtmlTreeBuilder.process
```
Vulnerability: OSV-2021-586
Summary: Use-of-uninitialized-value in void intra_prediction_angular<unsigned short>
Severity: MEDIUM
Published: 2021-03-31T00:01:03.787831Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32682

```
Crash type: Use-of-uninitialized-value
Crash state:
void intra_prediction_angular<unsigned short>
void decode_intra_prediction_internal<unsigned short>
decode_intra_prediction
```
Vulnerability: OSV-2018-36
Summary: UNKNOWN READ in ebml_parse_chunk
Severity: MEDIUM
Published: 2021-01-13T00:00:18.931589Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7887

Crash type: UNKNOWN READ
Crash state:
ebml_parse_chunk
matroska_type_find
gst_type_find_factory_call_function
Vulnerability: OSV-2020-713
Summary: Heap-buffer-overflow in XRef::getEntry
Severity: MEDIUM
Published: 2020-07-01T00:00:26.302679Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12797

Crash type: Heap-buffer-overflow READ 4
Crash state:
XRef::getEntry
Parser::makeStream
Parser::getObj
Vulnerability: OSV-2020-2119
Summary: UNKNOWN READ in numberparsing.h
Severity: MEDIUM
Published: 2020-11-02T00:00:15.881957Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26858

```
Crash type: UNKNOWN READ
Crash state:
numberparsing.h
```
Vulnerability: OSV-2020-343
Summary: Stack-use-after-return in ot::MeshCoP::ChannelMaskEntryBase::GetChannelPage
Published: 2020-07-01T00:00:04.277007Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13741

```
Crash type: Stack-use-after-return READ 1
Crash state:
ot::MeshCoP::ChannelMaskEntryBase::GetChannelPage
ot::MeshCoP::ChannelMaskTlv::GetChannelMask
ot::MeshCoP::ChannelMaskTlv::GetChannelMask
```
Vulnerability: OSV-2020-1735
Summary: Heap-use-after-free in zend_gc_delref
Severity: HIGH
Published: 2020-09-12T00:01:46.026747Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25526

```
Crash type: Heap-use-after-free READ 4
Crash state:
zend_gc_delref
i_zval_ptr_dtor
zval_ptr_dtor
```
Vulnerability: OSV-2021-1457
Summary: Heap-buffer-overflow in generic_unpack
Severity: MEDIUM
Published: 2021-10-17T00:01:33.875064Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39996

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
generic_unpack
exr_decoding_run
Imf_3_1::checkCoreFile
```
Vulnerability: OSV-2021-713
Summary: Heap-use-after-free in AK::StringView::StringView
Severity: HIGH
Published: 2021-05-02T00:00:26.435557Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33852

```
Crash type: Heap-use-after-free READ 8
Crash state:
AK::StringView::StringView
void AK::__format_value<AK::String>
AK::vformat_impl
```
Vulnerability: OSV-2020-1365
Summary: UNKNOWN READ in cli_vba_readdir_new
Severity: MEDIUM
Published: 2020-07-28T00:00:02.964345Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24354

```
Crash type: UNKNOWN READ
Crash state:
cli_vba_readdir_new
cli_vba_scandir_new
cli_scanole2
```
Vulnerability: OSV-2021-343
Summary: Heap-use-after-free in sctp_sorecvmsg
Severity: HIGH
Published: 2021-02-10T00:00:18.193322Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30571

```
Crash type: Heap-use-after-free READ 8
Crash state:
sctp_sorecvmsg
usrsctp_recvv
handle_upcall
```
Vulnerability: OSV-2021-64
Summary: Heap-buffer-overflow in H5MM_memcpy
Severity: MEDIUM
Published: 2021-01-13T00:00:21.822690Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29500

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
H5MM_memcpy
H5O_attr_decode
H5O_attr_shared_decode
```
Vulnerability: OSV-2021-1142
Summary: Heap-buffer-overflow in exif_get_slong
Severity: HIGH
Published: 2021-08-17T00:02:03.206223Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37231

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
exif_get_slong
mnote_apple_entry_get_value
exif_mnote_data_apple_get_value
```
Vulnerability: OSV-2020-1220
Summary: Heap-use-after-free in WelsDec::WelsReorderRefList
Severity: HIGH
Published: 2020-07-22T21:49:57.865682Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12728

```
Crash type: Heap-use-after-free READ 4
Crash state:
WelsDec::WelsReorderRefList
WelsDec::DecodeCurrentAccessUnit
WelsDec::ConstructAccessUnit
```
Vulnerability: OSV-2017-13
Summary: Heap-buffer-overflow in File::Write
Severity: MEDIUM
Published: 2021-01-13T00:00:25.896164Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4293

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
File::Write
ComprDataIO::UnpWrite
CmdExtract::UnstoreFile
```
Vulnerability: OSV-2021-1791
Summary: Heap-buffer-overflow in ZSTD_createDDict
Severity: MEDIUM
Published: 2021-12-31T00:02:03.777116Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43110

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
ZSTD_createDDict
blosc_run_decompression_with_context
blosc2_decompress_ctx
```
Vulnerability: OSV-2018-186
Summary: Use-of-uninitialized-value in decode_complex_string
Severity: MEDIUM
Published: 2021-01-13T00:01:17.204065Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10137

```
Crash type: Use-of-uninitialized-value
Crash state:
decode_complex_string
_gnutls_x509_dn_to_string
append_elements
```
Vulnerability: OSV-2020-1559
Summary: UNKNOWN WRITE in hb_vector_t<CFF::parsed_cs_op_t>::resize
Severity: HIGH
Published: 2020-08-01T00:00:38.407395Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24532

```
Crash type: UNKNOWN WRITE
Crash state:
hb_vector_t<CFF::parsed_cs_op_t>::resize
hb_vector_t<CFF::parsed_cs_op_t>::push
CFF::parsed_values_t<CFF::parsed_cs_op_t>::add_op
```
Vulnerability: OSV-2020-49
Summary: Heap-buffer-overflow in ndpi_netbios_name_interpret
Severity: MEDIUM
Published: 2020-06-24T01:51:11.785336Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21365

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_netbios_name_interpret
ndpi_int_netbios_add_connection
check_ndpi_udp_flow_func
```
Vulnerability: OSV-2020-2230
Summary: Heap-buffer-overflow in _zend_is_inconsistent
Severity: MEDIUM
Published: 2020-12-04T00:01:16.269909Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28129

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
_zend_is_inconsistent
zend_hash_find
zend_hash_find_ptr
```
Vulnerability: OSV-2022-126
Summary: Heap-buffer-overflow in md_analyze_inlines
Severity: MEDIUM
Published: 2022-02-07T00:00:05.720107Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44446

Crash type: Heap-buffer-overflow READ 1
Crash state:
md_analyze_inlines
md_process_normal_block_contents
md_process_table_cell
Vulnerability: OSV-2020-969
Summary: Stack-buffer-overflow in pgp_parse_algo_attr_blob
Severity: HIGH
Published: 2020-07-22T00:00:28.643216Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19548

```
Crash type: Stack-buffer-overflow WRITE 4
Crash state:
pgp_parse_algo_attr_blob
pgp_get_card_features
pgp_init
```
Vulnerability: OSV-2022-258
Summary: Heap-double-free in Imf_3_1::RgbaInputFile::~RgbaInputFile
Severity: HIGH
Published: 2022-03-19T00:00:41.775467Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45718

```
Crash type: Heap-double-free
Crash state:
Imf_3_1::RgbaInputFile::~RgbaInputFile
Imf_3_1::checkOpenEXRFile
openexr_exrcheck_fuzzer.cc
```
Vulnerability: OSV-2020-1332
Summary: Index-out-of-bounds in xsltSetAttrVTsegment
Severity: MEDIUM
Published: 2020-07-22T21:50:07.164634Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14273

Crash type: Index-out-of-bounds
Crash state:
xsltSetAttrVTsegment
xsltCompileAttr
xsltParseTemplateContent
Vulnerability: OSV-2021-1400
Summary: Heap-buffer-overflow in unpack_16bit
Severity: HIGH
Published: 2021-10-02T00:00:18.051551Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39472

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
unpack_16bit
exr_decoding_run
Imf_3_1::checkCoreFile
```
Vulnerability: OSV-2020-1762
Summary: Heap-use-after-free in gc_mark_grey
Severity: HIGH
Published: 2020-09-16T00:00:06.911473Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23350

```
Crash type: Heap-use-after-free READ 4
Crash state:
gc_mark_grey
gc_mark_roots
zend_gc_collect_cycles
```
Vulnerability: OSV-2020-744
Summary: Heap-double-free in mrb_default_allocf
Severity: HIGH
Published: 2020-07-04T00:00:01.948828Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23801

```
Crash type: Heap-double-free
Crash state:
mrb_default_allocf
mrb_free
obj_free
```
Vulnerability: OSV-2021-251
Summary: Heap-buffer-overflow in safe_ltf8_get
Severity: MEDIUM
Published: 2021-01-30T00:00:11.035389Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30012

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
safe_ltf8_get
cram_const_decode_init
cram_decoder_init
```
Vulnerability: OSV-2017-9
Summary: Use-of-uninitialized-value in QuickOpen::Read
Severity: MEDIUM
Published: 2021-01-13T00:00:14.156767Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4507

```
Crash type: Use-of-uninitialized-value
Crash state:
QuickOpen::Read
Archive::Read
RawRead::Read
```
Vulnerability: OSV-2020-528
Summary: Stack-buffer-overflow in ot::Message::Read
Severity: HIGH
Published: 2020-07-01T00:00:14.832074Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17330

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
ot::Message::Read
ot::NetworkData::Leader::HandleCommissioningGet
ot::Coap::CoapBase::ProcessReceivedRequest
```
Vulnerability: OSV-2020-178
Summary: Heap-buffer-overflow in concat_hash_string
Severity: MEDIUM
Published: 2020-06-24T01:51:17.576965Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21257

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
concat_hash_string
ndpi_search_ssh_tcp
search_ssh_again
```
Vulnerability: OSV-2021-482
Summary: Heap-buffer-overflow in draco::MeshPredictionSchemeTexCoordsDecoder<int, draco::PredictionSchemeWrapDeco
Severity: HIGH
Published: 2021-03-03T00:00:23.252114Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31587

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
draco::MeshPredictionSchemeTexCoordsDecoder<int, draco::PredictionSchemeWrapDeco
draco::MeshPredictionSchemeTexCoordsDecoder<int, draco::PredictionSchemeWrapDeco
draco::SequentialIntegerAttributeDecoder::DecodeIntegerValues
```
Vulnerability: OSV-2021-1683
Summary: Memcpy-param-overlap in pdfi_set_input_stream
Severity: MEDIUM
Published: 2021-12-14T00:00:12.736055Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42268

Crash type: Memcpy-param-overlap
Crash state:
pdfi_set_input_stream
zPDFstream
gs_interpret
Vulnerability: OSV-2020-197
Summary: Heap-buffer-overflow in jbig2_image_get_pixels_fast
Severity: MEDIUM
Published: 2020-06-24T01:51:18.519912Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20358

Crash type: Heap-buffer-overflow READ 1
Crash state:
jbig2_image_get_pixels_fast
jbig2_decode_generic_template0_TPGDON
jbig2_immediate_generic_region
Vulnerability: OSV-2017-8
Summary: Heap-buffer-overflow in setcharset
Severity: MEDIUM
Published: 2021-01-13T00:00:08.384698Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4161

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
setcharset
loop
loop
```
Vulnerability: OSV-2018-99
Summary: Heap-buffer-overflow in git__strntol64
Severity: MEDIUM
Published: 2021-01-13T00:00:43.443325Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11173

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
git__strntol64
git_signature__parse
git_commit__parse_raw
```
Vulnerability: OSV-2020-179
Summary: Heap-buffer-overflow in get16
Severity: MEDIUM
Published: 2020-06-24T01:51:17.643208Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20832

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
get16
search_valid_dns
ndpi_search_dns
```
Vulnerability: OSV-2020-483
Summary: Heap-buffer-overflow in run_arm_filter
Severity: MEDIUM
Published: 2020-07-01T00:00:12.210263Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15431

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
run_arm_filter
run_filter
apply_filters
```
Vulnerability: OSV-2021-1728
Summary: UNKNOWN READ in pdfi_dict_get
Severity: MEDIUM
Published: 2021-12-21T00:00:40.650047Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42687

```
Crash type: UNKNOWN READ
Crash state:
pdfi_dict_get
pdfi_dict_get_int
pdfi_read_bare_object
```
Vulnerability: OSV-2021-1378
Summary: Container-overflow in std::__1::__function::__func<LLVMFuzzerTestOneInput::$_0, std::__1::allocator<LL
Severity: MEDIUM
Published: 2021-09-27T00:00:27.699638Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39263

```
Crash type: Container-overflow READ 1
Crash state:
std::__1::__function::__func<LLVMFuzzerTestOneInput::$_0, std::__1::allocator<LL
std::__1::__function::__func<LLVMFuzzerTestOneInput::$_1, std::__1::allocator<LL
function.h
```
Vulnerability: OSV-2021-1682
Summary: Heap-buffer-overflow in pdfi_repair_file
Severity: HIGH
Published: 2021-12-14T00:00:11.539141Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42325

Crash type: Heap-buffer-overflow WRITE 4
Crash state:
pdfi_repair_file
pdfi_read_xref_stream_dict
pdfi_read_xref
Vulnerability: OSV-2020-196
Summary: Heap-use-after-free in Pe64_r_bin_pe_free
Severity: HIGH
Published: 2020-06-24T01:51:18.455623Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21630

```
Crash type: Heap-use-after-free READ 8
Crash state:
Pe64_r_bin_pe_free
r_bin_file_free
r_list_delete
```
Vulnerability: OSV-2021-895
Summary: Segv on unknown address in helper_uc_tracecode
Published: 2021-06-25T00:01:11.105162Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35514

```
Crash type: Segv on unknown address
Crash state:
helper_uc_tracecode
```
Vulnerability: OSV-2021-32
Summary: Heap-use-after-free in igraph_vector_ptr_size
Severity: HIGH
Published: 2021-01-09T00:00:09.974433Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29408

```
Crash type: Heap-use-after-free READ 8
Crash state:
igraph_vector_ptr_size
igraph_gml_tree_destroy
igraph_i_gml_parsedata_destroy
```
Vulnerability: OSV-2021-315
Summary: Global-buffer-overflow in Gfx::decode_frame
Published: 2021-02-08T00:00:57.447823Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30507

```
Crash type: Global-buffer-overflow READ 4
Crash state:
Gfx::decode_frame
Gfx::GIFImageDecoderPlugin::frame
Gfx::GIFImageDecoderPlugin::bitmap
```
Vulnerability: OSV-2022-259
Summary: Heap-double-free in read_config
Severity: HIGH
Published: 2022-03-19T00:01:33.918499Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45671

```
Crash type: Heap-double-free
Crash state:
read_config
read_glob
read_config
```
Vulnerability: OSV-2018-216
Summary: Heap-buffer-overflow in token_stream_prepare
Severity: MEDIUM
Published: 2021-01-13T00:01:27.343126Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9806

Crash type: Heap-buffer-overflow READ 1
Crash state:
token_stream_prepare
token_stream_peek_string
token_stream_consume
Vulnerability: OSV-2020-1299
Summary: UNKNOWN WRITE in ideint_weave_blk
Severity: HIGH
Published: 2020-07-22T21:50:04.188246Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17084

```
Crash type: UNKNOWN WRITE
Crash state:
ideint_weave_blk
ideint_process
impeg2d_deinterlace
```
Vulnerability: OSV-2021-745
Summary: Heap-buffer-overflow in skip_to_next_entry
Severity: MEDIUM
Published: 2021-05-11T00:00:17.714291Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34110

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
skip_to_next_entry
get_exception_handler
_PyEval_EvalFrameDefault
```
Vulnerability: OSV-2020-315
Summary: Heap-buffer-overflow in r_str_utf8_codepoint
Severity: MEDIUM
Published: 2020-07-01T00:00:01.824434Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18122

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
r_str_utf8_codepoint
r_str_char_fullwidth
r_str_len_utf8
```
Vulnerability: OSV-2020-745
Summary: Heap-buffer-overflow in memvprintf
Severity: MEDIUM
Published: 2020-07-04T00:00:02.054678Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23715

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
memvprintf
print_message
ha_alert
```
Vulnerability: OSV-2020-250
Summary: UNKNOWN READ in Sass::Inspect::operator
Severity: MEDIUM
Published: 2020-06-26T00:00:10.424929Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19988

```
Crash type: UNKNOWN READ
Crash state:
Sass::Inspect::operator
Sass::Output::operator
Sass::Output::operator
```
Vulnerability: OSV-2020-600
Summary: Use-of-uninitialized-value in dprintf_formatf
Severity: MEDIUM
Published: 2020-07-01T00:00:19.594728Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16699

```
Crash type: Use-of-uninitialized-value
Crash state:
dprintf_formatf
curl_mvsnprintf
curl_msnprintf
```
Vulnerability: OSV-2021-600
Summary: Heap-buffer-overflow in gif_internal_decode_frame
Severity: HIGH
Published: 2021-04-04T00:00:13.289894Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32855

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
gif_internal_decode_frame
gif_decode_frame
vips_foreign_load_nsgif_generate
```
Vulnerability: OSV-2020-987
Summary: UNKNOWN in TIFFReadRGBATileExt
Severity: MEDIUM
Published: 2020-07-22T21:49:38.378993Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13277

```
Crash type: UNKNOWN
Crash state:
TIFFReadRGBATileExt
cv::TiffDecoder::readData
cv::imread
```
Vulnerability: OSV-2020-1558
Summary: Stack-buffer-overflow in dst_print_s2k
Severity: MEDIUM
Published: 2020-08-01T00:00:10.494492Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24538

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
dst_print_s2k
stream_dump_packets_raw
stream_dump_packets
```
Vulnerability: OSV-2020-48
Summary: UNKNOWN READ in decode_fast
Severity: MEDIUM
Published: 2020-06-24T01:51:11.743367Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20448

```
Crash type: UNKNOWN READ
Crash state:
decode_fast
unpack_dsd_samples
WavpackUnpackSamples
```
Vulnerability: OSV-2021-987
Summary: Use-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr
Severity: HIGH
Published: 2021-07-14T00:00:27.064949Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36127

```
Crash type: Use-after-poison WRITE 8
Crash state:
AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr
AK::String::String
JS::abstract_relation
```
Vulnerability: OSV-2022-127
Summary: Heap-use-after-free in UA_ServerConfig_clean
Severity: HIGH
Published: 2022-02-07T00:00:13.222125Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44434

```
Crash type: Heap-use-after-free READ 8
Crash state:
UA_ServerConfig_clean
fuzz_binary_message.cc
UA_memoryManager_free
```
Vulnerability: OSV-2021-591
Summary: Segv on unknown address
Published: 2021-04-02T00:01:01.958406Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32767

```
Crash type: Segv on unknown address
Crash state:
NULL```
Vulnerability: OSV-2020-342
Summary: UNKNOWN READ in ndpi_search_kerberos
Severity: HIGH
Published: 2020-07-01T00:00:04.127415Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19175

```
Crash type: UNKNOWN READ
Crash state:
ndpi_search_kerberos
check_ndpi_tcp_flow_func
ndpi_detection_process_packet
```
Vulnerability: OSV-2020-1671
Summary: Heap-buffer-overflow in Dasher::Dasher
Severity: MEDIUM
Published: 2020-08-29T00:00:13.673013Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25243

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
Dasher::Dasher
bool drawLineAA<&
QCosmeticStroker::drawPath
```
Vulnerability: OSV-2021-207
Summary: Heap-buffer-overflow in blosc_getitem
Severity: MEDIUM
Published: 2021-01-17T00:00:12.646500Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29613

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
blosc_getitem
get_coffset
frame_get_lazychunk
```
Vulnerability: OSV-2021-1143
Summary: UNKNOWN WRITE in QtPrivate::QPodArrayOps<QPainterPath::Element>::copyAppend
Severity: HIGH
Published: 2021-08-19T00:00:37.149406Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37306

This is the same issue as OSV-2021-1121 which it replaced after that one was closed wrongly.

```
Crash type: UNKNOWN WRITE
Crash state:
QtPrivate::QPodArrayOps<QPainterPath::Element>::copyAppend
QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend
QList<QPainterPath::Element>::append
```
Vulnerability: OSV-2020-1221
Summary: Use-of-uninitialized-value in ps_read_doseps
Severity: MEDIUM
Published: 2020-07-22T21:49:57.917822Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21301

Crash type: Use-of-uninitialized-value
Crash state:
ps_read_doseps
psscan
document_load
Vulnerability: OSV-2020-657
Summary: UNKNOWN READ in perfetto::trace_processor::ProtoTraceParser::ParseTypedFtraceToRaw
Published: 2020-07-01T00:00:22.958401Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13724

```
Crash type: UNKNOWN READ
Crash state:
perfetto::trace_processor::ProtoTraceParser::ParseTypedFtraceToRaw
perfetto::trace_processor::ProtoTraceParser::ParseFtracePacket
perfetto::trace_processor::TraceSorter::SortAndExtractEventsBeyondWindow
```
Vulnerability: OSV-2020-207
Summary: Heap-buffer-overflow in pcpp::IPv6Layer::parseExtensions
Severity: MEDIUM
Published: 2020-06-24T01:51:18.953301Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22232

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pcpp::IPv6Layer::parseExtensions
pcpp::IPv6Layer::IPv6Layer
pcpp::Packet::createFirstLayer
```
Vulnerability: OSV-2021-991
Summary: Dynamic-stack-buffer-overflow in fmt::v8::detail::dragonbox::umul192_upper64
Published: 2021-07-14T00:00:34.913206Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36110

```
Crash type: Dynamic-stack-buffer-overflow WRITE 8
Crash state:
fmt::v8::detail::dragonbox::umul192_upper64
fmt::v8::detail::dragonbox::cache_accessor<double>::compute_mul
fmt::v8::detail::dragonbox::decimal_fp<double> fmt::v8::detail::dragonbox::to_de
```
Vulnerability: OSV-2020-568
Summary: Heap-use-after-free in proc_plaintext
Severity: HIGH
Published: 2020-07-01T00:00:17.473815Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13730

```
Crash type: Heap-use-after-free READ 4
Crash state:
proc_plaintext
do_proc_packets
proc_signature_packets
```
Vulnerability: OSV-2020-138
Summary: Heap-buffer-overflow in org::apache::arrow::flatbuf::Message::Verify
Severity: HIGH
Published: 2020-06-24T01:51:15.842848Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21681

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
org::apache::arrow::flatbuf::Message::Verify
arrow::ipc::CheckMetadataAndGetBodyLength
arrow::ipc::MessageDecoder::MessageDecoderImpl::ConsumeMetadata
```
Vulnerability: OSV-2018-191
Summary: Heap-buffer-overflow in network_free
Severity: HIGH
Published: 2021-01-13T00:01:20.005684Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11302

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
network_free
manager_free
fuzz-network-parser.c
```
Vulnerability: OSV-2021-1786
Summary: Segv on unknown address in r_buf_free
Published: 2021-12-31T00:00:11.428301Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43092

```
Crash type: Segv on unknown address
Crash state:
r_buf_free
destroy
r_bin_file_free
```
Vulnerability: OSV-2020-2227
Summary: Heap-buffer-overflow in ieeeNUMBER_fragment_hash
Severity: MEDIUM
Published: 2020-12-04T00:00:30.414831Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28191

```
Crash type: Heap-buffer-overflow READ 6
Crash state:
ieeeNUMBER_fragment_hash
g_hash_table_insert_internal
fragment_add_seq_common
```
Vulnerability: OSV-2020-587
Summary: UNKNOWN READ in Interpreter::evaluate
Severity: MEDIUM
Published: 2020-07-01T00:00:18.669002Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15844

```
Crash type: UNKNOWN READ
Crash state:
Interpreter::evaluate
jsonnet_vm_execute
jsonnet_evaluate_snippet_aux
```
Vulnerability: OSV-2022-218
Summary: UNKNOWN READ in pdfi_read_cff_font
Severity: MEDIUM
Published: 2022-03-06T00:01:40.010815Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45222

Crash type: UNKNOWN READ
Crash state:
pdfi_read_cff_font
pdfi_load_font
pdfi_read_type0_font
Vulnerability: OSV-2020-1372
Summary: Index-out-of-bounds in stbi__build_huffman
Severity: MEDIUM
Published: 2020-07-28T00:00:04.120846Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22584

```
Crash type: Index-out-of-bounds
Crash state:
stbi__build_huffman
stbi__process_marker
stbi__decode_jpeg_header
```
Vulnerability: OSV-2021-1440
Summary: Heap-buffer-overflow in internal_huf_decompress
Severity: MEDIUM
Published: 2021-10-12T00:01:30.701207Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39836

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
internal_huf_decompress
internal_exr_undo_piz
default_decompress_chunk
```
Vulnerability: OSV-2020-354
Summary: UNKNOWN READ in ot::Ip6::NetifUnicastAddress::GetNext
Severity: MEDIUM
Published: 2020-07-01T00:00:04.807199Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13409

```
Crash type: UNKNOWN READ
Crash state:
ot::Ip6::NetifUnicastAddress::GetNext
ot::Ip6::Netif::RemoveUnicastAddress
ot::Mle::Mle::SetStateDetached
```
Vulnerability: OSV-2020-704
Summary: Heap-buffer-overflow in BEInt<unsigned char, 1>::set
Severity: HIGH
Published: 2020-07-01T00:00:25.806258Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13736

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
BEInt<unsigned char, 1>::set
CFF::CFFIndex<OT::IntType<unsigned int, 4u> >::set_offset_at
bool CFF::FDArray<OT::IntType<unsigned int, 4u> >::serialize<CFF::cff2_font_dict
```
Vulnerability: OSV-2020-211
Summary: Heap-buffer-overflow in res2_inverse
Severity: MEDIUM
Published: 2020-06-24T01:51:19.127694Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22298

Crash type: Heap-buffer-overflow READ 4
Crash state:
res2_inverse
mapping0_inverse
_vorbis_synthesis1
Vulnerability: OSV-2020-641
Summary: Use-of-uninitialized-value in bool std::__1::equal<std::__1::__wrap_iter<unsigned char const*>, std::__1::__wr
Severity: MEDIUM
Published: 2020-07-01T00:00:22.030129Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14353

```
Crash type: Use-of-uninitialized-value
Crash state:
bool std::__1::equal<std::__1::__wrap_iter<unsigned char const*>, std::__1::__wr
bool std::__1::operator==<unsigned char, std::__1::allocator<unsigned char> >
std::__1::enable_if<is_convertible_v<decltype
```
Vulnerability: OSV-2020-1237
Summary: Use-of-uninitialized-value in pcpp::NullLoopbackLayer::getFamily
Severity: MEDIUM
Published: 2020-07-22T21:49:59.199632Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22084

```
Crash type: Use-of-uninitialized-value
Crash state:
pcpp::NullLoopbackLayer::getFamily
pcpp::NullLoopbackLayer::parseNextLayer
pcpp::Packet::setRawPacket
```
Vulnerability: OSV-2021-211
Summary: Heap-use-after-free in __libcpp_strpbrk
Severity: HIGH
Published: 2021-01-19T00:00:01.795893Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29698

```
Crash type: Heap-use-after-free READ 2
Crash state:
__libcpp_strpbrk
strpbrk
tesseract::Tesseract::one_ell_conflict
```
Vulnerability: OSV-2020-1667
Summary: Heap-use-after-free in xmlTextReaderRead
Severity: HIGH
Published: 2020-08-27T00:00:24.605339Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25210

Crash type: Heap-use-after-free READ 4
Crash state:
xmlTextReaderRead
xml.c
xmlTextReaderFreeNode
Vulnerability: OSV-2021-1505
Summary: Heap-buffer-overflow in asn_build_string
Severity: MEDIUM
Published: 2021-10-29T00:01:41.651682Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40429

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
asn_build_string
snmpv3_packet_build
snmp_build
```
Vulnerability: OSV-2021-495
Summary: Heap-double-free in bit_chain_free
Severity: HIGH
Published: 2021-03-06T00:00:08.738235Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31724

```
Crash type: Heap-double-free
Crash state:
bit_chain_free
dwg_encode_MTEXT
dwg_encode_add_object
```
Vulnerability: OSV-2021-1381
Summary: Heap-buffer-overflow in OT::MathValueRecord::copy
Severity: MEDIUM
Published: 2021-09-27T00:01:25.282839Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39225

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
OT::MathValueRecord::copy
OT::MathGlyphAssembly::subset
OT::MathGlyphConstruction::subset
```
Vulnerability: OSV-2020-1519
Summary: Index-out-of-bounds in DHT::hide_hots
Severity: MEDIUM
Published: 2020-07-28T00:00:36.268160Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23837

```
Crash type: Index-out-of-bounds
Crash state:
DHT::hide_hots
LibRaw::dht_interpolate
LibRaw::dcraw_process
```
Vulnerability: OSV-2022-34
Summary: Heap-buffer-overflow in LZ4_decompress_safe
Severity: MEDIUM
Published: 2022-01-12T00:01:27.704351Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43513

```
Crash type: Heap-buffer-overflow READ 16
Crash state:
LZ4_decompress_safe
blosc_d
do_job
```
Vulnerability: OSV-2021-929
Summary: Heap-buffer-overflow in extract_name
Severity: HIGH
Published: 2021-07-08T00:00:32.006993Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35858

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
extract_name
hash_questions
fuzz_util.c
```
Vulnerability: OSV-2020-180
Summary: Heap-buffer-overflow in parquet::PlainByteArrayDecoder::DecodeArrowDense
Severity: MEDIUM
Published: 2020-06-24T01:51:17.681643Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21009

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
parquet::PlainByteArrayDecoder::DecodeArrowDense
parquet::PlainByteArrayDecoder::DecodeArrow
parquet::internal::ByteArrayChunkedRecordReader::ReadValuesSpaced
```
Vulnerability: OSV-2018-129
Summary: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short
Severity: MEDIUM
Published: 2021-01-13T00:00:57.916141Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11657

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
OT::IntType<unsigned short, 2u>::operator unsigned int
CFF::Charset1_2<OT::IntType<unsigned char, 1u> >::get_glyph
```
Vulnerability: OSV-2021-1694
Summary: Stack-buffer-overflow in pdfi_read_cff_dict
Severity: HIGH
Published: 2021-12-14T00:01:48.327020Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42298

Crash type: Stack-buffer-overflow WRITE 4
Crash state:
pdfi_read_cff_dict
pdfi_read_cff_dict
pdfi_read_cff_dict
Vulnerability: OSV-2020-2159
Summary: Heap-buffer-overflow in flb_parser_json_do
Severity: MEDIUM
Published: 2020-11-15T22:34:00.821965Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27499

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
flb_parser_json_do
flb_parser_do
parser_fuzzer.c
```
Vulnerability: OSV-2020-303
Summary: UNKNOWN READ in dav1d_put_bilin_avx2
Severity: MEDIUM
Published: 2020-06-30T00:00:48.527659Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16954

Crash type: UNKNOWN READ
Crash state:
dav1d_put_bilin_avx2
Vulnerability: OSV-2021-1417
Summary: Heap-buffer-overflow in openhtj2k::T1OpenHTJ2K::decompress
Severity: HIGH
Published: 2021-10-07T00:00:22.505600Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39632

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
openhtj2k::T1OpenHTJ2K::decompress
std::__1::__packaged_task_func<std::__1::__bind<grk::T1DecompressScheduler::deco
std::__1::packaged_task<int
```
Vulnerability: OSV-2018-200
Summary: Heap-buffer-overflow in SplashPath::lineTo
Severity: MEDIUM
Published: 2021-01-13T00:01:22.340872Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10148

Crash type: Heap-buffer-overflow READ 1
Crash state:
SplashPath::lineTo
Splash::makeDashedPath
Splash::stroke
Vulnerability: OSV-2020-1325
Summary: Global-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short
Published: 2020-07-22T21:50:06.762604Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21769

```
Crash type: Global-buffer-overflow READ 2
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
OT::IntType<unsigned short, 2u>::operator unsigned int
CFF::Charset0::get_glyph
```
Vulnerability: OSV-2021-616
Summary: Heap-buffer-overflow in Camellia_Ekeygen
Severity: MEDIUM
Published: 2021-04-09T00:00:12.734210Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33028

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Camellia_Ekeygen
Camellia_set_key
cipher_hw_camellia_initkey
```
Vulnerability: OSV-2021-1102
Summary: Heap-use-after-free in usbredirparser_serialize
Severity: HIGH
Published: 2021-08-06T00:02:18.278086Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36861

Crash type: Heap-use-after-free WRITE 4
Crash state:
usbredirparser_serialize
try_serialize
usbredirparserfuzz.cc
Vulnerability: OSV-2021-246
Summary: Memcpy-param-overlap in frame_get_usermeta
Severity: MEDIUM
Published: 2021-01-29T00:00:06.969079Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29973

```
Crash type: Memcpy-param-overlap
Crash state:
frame_get_usermeta
blosc2_frame_to_schunk
blosc2_schunk_open_sframe
```
Vulnerability: OSV-2020-1260
Summary: Negative-size-param in heif::HeifPixelImage::fill_RGB_16bit
Published: 2020-07-22T21:50:01.133969Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13563

```
Crash type: Negative-size-param
Crash state:
heif::HeifPixelImage::fill_RGB_16bit
heif::HeifContext::decode_overlay_image
heif::HeifContext::decode_image
```
Vulnerability: OSV-2017-53
Summary: Stack-buffer-overflow in _psl_idna_toASCII
Severity: MEDIUM
Published: 2021-01-13T21:56:23.412375Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2600

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
_psl_idna_toASCII
_add_punycode_if_needed
psl_load_fp
```
Vulnerability: OSV-2018-152
Summary: Heap-buffer-overflow in dhcp6_option_parse_status
Severity: MEDIUM
Published: 2021-01-13T00:01:04.855220Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10746

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
dhcp6_option_parse_status
dhcp6_option_parse_pdprefix
dhcp6_option_parse_ia
```
Vulnerability: OSV-2020-1427
Summary: Use-of-uninitialized-value in TextEndsWithNewline
Severity: MEDIUM
Published: 2020-07-28T00:00:17.183105Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13191

```
Crash type: Use-of-uninitialized-value
Crash state:
TextEndsWithNewline
PPrintText
PPrintScriptStyle
```
Vulnerability: OSV-2021-401
Summary: Segv on unknown address in us_internal_dispatch_ready_poll
Published: 2021-02-16T00:00:19.243505Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30951

```
Crash type: Segv on unknown address
Crash state:
us_internal_dispatch_ready_poll
us_loop_run
test
```
Vulnerability: OSV-2021-1745
Summary: Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
Severity: MEDIUM
Published: 2021-12-24T00:00:18.937291Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42862

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
bool SmilesParseOps::parser::parse_data_sgroup<std::__1::__wrap_iter<char const*
bool SmilesParseOps::parser::parse_it<std::__1::__wrap_iter<char const*> >
```
Vulnerability: OSV-2021-1250
Summary: Segv on unknown address in ft_free
Published: 2021-09-14T00:00:09.257971Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38635

Crash type: Segv on unknown address
Crash state:
ft_free
ft_mem_free
cff_cmap_unicode_done
Vulnerability: OSV-2020-1098
Summary: Heap-use-after-free in WelsDec::MapColToList0
Severity: HIGH
Published: 2020-07-22T21:49:47.088363Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14060

```
Crash type: Heap-use-after-free READ 4
Crash state:
WelsDec::MapColToList0
WelsDec::PredBDirectTemporal
WelsDec::ParseInterBInfo
```
Vulnerability: OSV-2020-114
Summary: Use-of-uninitialized-value in read_non_idat_chunks
Severity: MEDIUM
Published: 2020-06-24T01:51:14.708164Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22646

```
Crash type: Use-of-uninitialized-value
Crash state:
read_non_idat_chunks
read_chunks
spng_get_plte
```
Vulnerability: OSV-2020-72
Summary: Use-of-uninitialized-value in print_crl
Severity: MEDIUM
Published: 2020-06-24T01:51:12.820554Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21153

```
Crash type: Use-of-uninitialized-value
Crash state:
print_crl
gnutls_x509_crl_print
gnutls_x509_crl_parser_fuzzer.c
```
Vulnerability: OSV-2021-397
Summary: Heap-buffer-overflow in Crypto::UnsignedBigInteger::UnsignedBigInteger
Severity: MEDIUM
Published: 2021-02-15T00:00:26.730634Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30920

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Crypto::UnsignedBigInteger::UnsignedBigInteger
Crypto::UnsignedBigInteger::import_data
Crypto::der_decode_integer
```
Vulnerability: OSV-2021-1179
Summary: UNKNOWN READ
Severity: HIGH
Published: 2021-08-30T00:00:39.163462Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37759

```
Crash type: UNKNOWN READ
Crash state:
NULL```
Vulnerability: OSV-2020-2067
Summary: Heap-buffer-overflow in WelsDec::DecodeCurrentAccessUnit
Severity: HIGH
Published: 2020-10-14T00:00:41.933918Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26302

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
WelsDec::DecodeCurrentAccessUnit
WelsDec::ConstructAccessUnit
WelsDecodeBs
```
Vulnerability: OSV-2020-2122
Summary: Heap-buffer-overflow in void parquet::internal::DefRepLevelsToListInfo<int>
Severity: HIGH
Published: 2020-11-02T00:00:35.960641Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26829

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
void parquet::internal::DefRepLevelsToListInfo<int>
parquet::internal::DefRepLevelsToBitmap
parquet::arrow::StructReader::BuildArray
```
Vulnerability: OSV-2020-728
Summary: Stack-buffer-overflow in ot::Ip6::OptionPadN::Init
Severity: HIGH
Published: 2020-07-01T00:00:26.997848Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14854

```
Crash type: Stack-buffer-overflow WRITE 9
Crash state:
ot::Ip6::OptionPadN::Init
ot::Ip6::Ip6::RemoveMplOption
ot::Ip6::Ip6::ProcessReceiveCallback
```
Vulnerability: OSV-2020-682
Summary: Heap-use-after-free in condition_free_list_type
Severity: HIGH
Published: 2020-07-01T00:00:24.557576Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13878

```
Crash type: Heap-use-after-free READ 8
Crash state:
condition_free_list_type
link_config_free
link_load_one
```
Vulnerability: OSV-2021-1196
Summary: Heap-buffer-overflow in parse_content_length
Severity: MEDIUM
Published: 2021-09-04T00:00:36.456594Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38050

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
parse_content_length
get_hdr_field
parse_headers
```
Vulnerability: OSV-2021-728
Summary: UNKNOWN WRITE in _fini
Severity: HIGH
Published: 2021-05-05T00:00:31.085366Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33944

```
Crash type: UNKNOWN WRITE
Crash state:
_fini
```
Vulnerability: OSV-2021-456
Summary: Heap-buffer-overflow in grk::Quantizer::read_SQcd_SQcc
Severity: MEDIUM
Published: 2021-02-28T00:01:15.686942Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31460

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
grk::Quantizer::read_SQcd_SQcc
grk::CodeStreamDecompress::read_qcd
grk::CodeStreamDecompress::process_marker
```
Vulnerability: OSV-2021-1712
Summary: Heap-buffer-overflow in ndlz8_decompress
Severity: HIGH
Published: 2021-12-18T00:00:41.642240Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42537

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
ndlz8_decompress
blosc_d
do_job
```
Vulnerability: OSV-2018-105
Summary: UNKNOWN READ in dotnet_parse_tilde_2
Severity: MEDIUM
Published: 2021-01-13T00:00:46.327625Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11300

```
Crash type: UNKNOWN READ
Crash state:
dotnet_parse_tilde_2
dotnet_parse_tilde
dotnet_parse_com
```
Vulnerability: OSV-2020-1923
Summary: Heap-buffer-overflow in do_print_ex
Severity: MEDIUM
Published: 2020-10-02T00:00:28.271775Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13914

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
do_print_ex
asn1_item_print_ctx
ASN1_item_print
```
Vulnerability: OSV-2020-513
Summary: Use-of-uninitialized-value in icalcomponent_remove_component
Severity: MEDIUM
Published: 2020-07-01T00:00:13.868635Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14738

```
Crash type: Use-of-uninitialized-value
Crash state:
icalcomponent_remove_component
icalcomponent_free
icalparser_free
```
Vulnerability: OSV-2022-18
Summary: UNKNOWN READ in gx_restrict_Pattern
Severity: MEDIUM
Published: 2022-01-07T00:02:01.270812Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43354

```
Crash type: UNKNOWN READ
Crash state:
gx_restrict_Pattern
gs_setcolor
pdfi_gs_setrgbcolor
```
Vulnerability: OSV-2020-143
Summary: Heap-buffer-overflow in QSpecialInteger<QBigEndianStorageType<unsigned int> >::operator unsigned int
Severity: MEDIUM
Published: 2020-06-24T01:51:16.055970Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21909

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
QSpecialInteger<QBigEndianStorageType<unsigned int> >::operator unsigned int
QIcc::fromIccProfile
QColorSpace::fromIccProfile
```
Vulnerability: OSV-2021-840
Summary: Use-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr
Severity: HIGH
Published: 2021-06-07T00:00:35.428789Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34971

```
Crash type: Use-after-poison WRITE 8
Crash state:
AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr
AK::String::String
JS::abstract_relation
```
Vulnerability: OSV-2020-1165
Summary: Global-buffer-overflow in parse_headers
Published: 2020-07-22T21:49:52.512552Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14154

Crash type: Global-buffer-overflow READ 4
Crash state:
parse_headers
parse_http_request
fuzz_parse_http_request
Vulnerability: OSV-2018-369
Summary: Negative-size-param in get_urls_css
Published: 2021-01-15T00:00:59.859441Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8032

Crash type: Negative-size-param
Crash state:
get_urls_css
wget_css_fuzzer.c
Vulnerability: OSV-2017-90
Summary: Use-of-uninitialized-value in ComprDataIO::UnpRead
Severity: MEDIUM
Published: 2021-01-13T21:57:39.385103Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4283

```
Crash type: Use-of-uninitialized-value
Crash state:
ComprDataIO::UnpRead
Unpack::UnpReadBuf
Unpack::Unpack15
```
Vulnerability: OSV-2021-913
Summary: Heap-buffer-overflow in dispatch
Severity: MEDIUM
Published: 2021-07-03T00:00:29.297612Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35727

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
dispatch
dispatch_linked
codegen
```
Vulnerability: OSV-2020-440
Summary: UNKNOWN READ in r_uleb128
Severity: MEDIUM
Published: 2020-07-01T00:00:09.710794Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13915

```
Crash type: UNKNOWN READ
Crash state:
r_uleb128
parse_class
dex_loadcode
```