TQRG/raw-osv-data huggingface dataset:
Vulnerability: GHSA-pv36-h7jh-qm62
Summary: Heap buffer overflow in CefSharp
Aliases: CVE-2020-15999
Severity: MODERATE
CWE: CWE-787, CWE-119
Published: 2020-10-27T19:47:38Z

### Impact
A memory corruption bug(Heap overflow) in the FreeType font rendering library.

> This can be exploited by attackers to execute arbitrary code by using specially crafted fonts with embedded PNG images .

As per https://www.secpod.com/blog/chrome-zero-day-under-active-exploitation-patch-now/ 

Google is aware of reports that an exploit for CVE-2020-15999 exists in the wild.

### Patches
Upgrade to 85.3.130 or higher

### References
- https://www.secpod.com/blog/chrome-zero-day-under-active-exploitation-patch-now/
- https://www.zdnet.com/article/google-releases-chrome-security-update-to-patch-actively-exploited-zero-day/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15999
- https://magpcss.org/ceforum/viewtopic.php?f=10&t=17942

To review the `CEF/Chromium` patch see https://bitbucket.org/chromiumembedded/cef/commits/cd6cbe008b127990036945fb75e7c2c1594ab10d
Vulnerability: GHSA-pjxv-w3qj-j8m3
Summary: Directory Traversal in elFinder.AspNet
Aliases: CVE-2021-23415
Severity: HIGH
CWE: CWE-22
Published: 2021-08-09T20:42:13Z

This affects the package elFinder.AspNet before 1.1.1.
 The user-controlled file name is not properly sanitized before it is used to create a file system path.
Vulnerability: GHSA-r8pr-83cc-ccv7
Summary: Umbraco Persistent Password Reset Poison
Aliases: CVE-2022-22691
Severity: HIGH
CWE: CWE-444, CWE-640
Published: 2022-01-21T23:34:27Z

The password reset component deployed within Umbraco uses the hostname supplied within the request host header when building a password reset URL. It may be possible to manipulate the URL sent to Umbraco users when so that it points to the attackers server thereby disclosing the password reset token if/when the link is followed. A related vulnerability (CVE-2022-22690) could allow this flaw to become persistent so that all password reset URLs are affected persistently following a successful attack. See the AppCheck advisory for further information and associated caveats.
Vulnerability: GHSA-mjww-934m-h4jw
Summary: Improper Certificate Validation in OPCFoundation.NetStandard.Opc.Ua
Aliases: CVE-2020-29457
Severity: MODERATE
CWE: CWE-295
Published: 2021-11-19T20:19:53Z

A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 allows attackers to establish a connection using invalid certificates.
Vulnerability: GHSA-ph3v-2hq5-5qfq
Summary: Code injection in RazorEngine
Aliases: CVE-2021-46703
Severity: MODERATE
Published: 2022-03-07T00:00:41Z

In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Vulnerability: GHSA-53r4-h27g-rg3x
Summary: Out-of-bounds write
Aliases: CVE-2019-0992
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:59:07Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0989, CVE-2019-0991, CVE-2019-0993, CVE-2019-1002, CVE-2019-1003, CVE-2019-1024, CVE-2019-1051, CVE-2019-1052.
Vulnerability: GHSA-h2xm-2p6w-mj2v
Summary: Out-of-bounds Write in ChakraCore
Aliases: CVE-2020-0831
Severity: HIGH
CWE: CWE-787
Published: 2021-07-28T18:58:14Z

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-2020-0830, CVE-2020-0832, CVE-2020-0833, CVE-2020-0848.
Vulnerability: GHSA-fxh6-w476-hgr4
Summary: Directory Traversal in SharpCompress
Aliases: CVE-2018-1002206
Severity: MODERATE
CWE: CWE-22
Published: 2019-09-11T22:59:57Z

SharpCompress prior to version 0.21 is vulnerable to path traversal issue in archive extraction.
Vulnerability: GHSA-mvvp-gwgc-5hrp
Summary: Path Traversal in elFinder.Net.Core
Aliases: CVE-2021-23407
Severity: HIGH
CWE: CWE-22
Published: 2021-08-02T17:30:27Z

This affects the package elFinder.Net.Core from 0 and before 1.2.4. The user-controlled file name is not properly sanitized before it is used to create a file system path.
Vulnerability: GHSA-6jf5-rmhv-38cw
Summary: High severity vulnerability that affects Microsoft.ChakraCore
Aliases: CVE-2019-0639
Severity: HIGH
CWE: CWE-190
Published: 2019-04-09T19:44:03Z

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0680, CVE-2019-0769, CVE-2019-0770, CVE-2019-0771, CVE-2019-0773, CVE-2019-0783.
Vulnerability: OSV-2021-1168
Summary: Heap-buffer-overflow in exif_get_slong
Severity: MEDIUM
Published: 2021-08-25T00:01:25.325827Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37570

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
exif_get_slong
exif_get_long
exif_get_rational
```
Vulnerability: OSV-2021-386
Summary: Stack-buffer-overflow in ot::Coap::Message::AppendUintOption
Severity: MEDIUM
Published: 2021-02-13T00:00:59.547439Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30831

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
ot::Coap::Message::AppendUintOption
ot::Coap::Message::AppendBlockOption
otCoapMessageAppendBlock2Option
```
Vulnerability: OSV-2020-386
Summary: Heap-buffer-overflow in OPENSSL_strlcpy
Severity: HIGH
Published: 2020-07-01T00:00:06.528477Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16107

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
OPENSSL_strlcpy
OPENSSL_strlcat
ERR_add_error_vdata
```
Vulnerability: OSV-2017-39
Summary: Use-of-uninitialized-value in IsRelativeSymlinkSafe
Severity: MEDIUM
Published: 2021-01-13T21:56:03.501889Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4308

```
Crash type: Use-of-uninitialized-value
Crash state:
IsRelativeSymlinkSafe
ExtractUnixLink30
ExtractSymlink
```
Vulnerability: OSV-2020-2076
Summary: Use-of-uninitialized-value in UpdateDecStatNoFreezingInfo
Severity: MEDIUM
Published: 2020-10-16T00:00:42.366443Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26346

```
Crash type: Use-of-uninitialized-value
Crash state:
UpdateDecStatNoFreezingInfo
UpdateDecStat
WelsDec::DecodeFrameConstruction
```
Vulnerability: OSV-2020-369
Summary: UNKNOWN READ in ot::TimerScheduler::Remove
Severity: MEDIUM
Published: 2020-07-01T00:00:05.571696Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13383

```
Crash type: UNKNOWN READ
Crash state:
ot::TimerScheduler::Remove
ot::Mle::Mle::Stop
otThreadSetEnabled
```
Vulnerability: OSV-2020-693
Summary: Heap-buffer-overflow in parse_sec_attr_44
Severity: MEDIUM
Published: 2020-07-01T00:00:25.178023Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18798

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
parse_sec_attr_44
setcos_select_file
sc_select_file
```
Vulnerability: OSV-2020-2099
Summary: Heap-buffer-overflow in decode_chars
Severity: HIGH
Published: 2020-10-28T00:00:05.887987Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26674

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
decode_chars
decode_font
process_text
```
Vulnerability: OSV-2020-2133
Summary: Heap-buffer-overflow in tdefl_compress_lz_codes
Severity: HIGH
Published: 2020-11-08T00:00:05.283717Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27263

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
tdefl_compress_lz_codes
tdefl_compress_block
tdefl_flush_block
```
Vulnerability: OSV-2020-739
Summary: UNKNOWN READ in str_decref
Severity: MEDIUM
Published: 2020-07-01T00:00:27.971876Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18756

```
Crash type: UNKNOWN READ
Crash state:
str_decref
obj_free
mrb_gc_destroy
```
Vulnerability: OSV-2021-369
Summary: Segv on unknown address in blosc_read_header
Published: 2021-02-11T00:01:00.831869Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30761

```
Crash type: Segv on unknown address
Crash state:
blosc_read_header
blosc2_getitem_ctx
blosc_getitem
```
Vulnerability: OSV-2021-739
Summary: Stack-buffer-overflow in flb_sds_cat
Severity: MEDIUM
Published: 2021-05-08T00:01:15.452663Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34025

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
flb_sds_cat
flb_ra_translate
record_ac_fuzzer.c
```
Vulnerability: OSV-2020-410
Summary: Global-buffer-overflow in lex_multiline_string
Published: 2020-07-01T00:00:07.995615Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18455

Crash type: Global-buffer-overflow READ 1
Crash state:
lex_multiline_string
lex_next
parse_config
Vulnerability: OSV-2020-1965
Summary: UNKNOWN READ in asn1_item_print_ctx
Severity: MEDIUM
Published: 2020-10-03T00:00:22.855250Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13920

```
Crash type: UNKNOWN READ
Crash state:
asn1_item_print_ctx
asn1_template_print_ctx
asn1_item_print_ctx
```
Vulnerability: OSV-2021-1754
Summary: UNKNOWN READ in insert_free_size
Severity: MEDIUM
Published: 2021-12-25T00:01:31.295369Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42917

```
Crash type: UNKNOWN READ
Crash state:
insert_free_size
chunk_free_object
pdfi_pscript_stack_finit
```
Vulnerability: OSV-2020-943
Summary: Heap-buffer-overflow in pcpp::HeaderField::HeaderField
Severity: MEDIUM
Published: 2020-07-22T00:00:21.373584Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22528

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pcpp::HeaderField::HeaderField
pcpp::TextBasedProtocolMessage::parseFields
pcpp::SipResponseLayer::SipResponseLayer
```
Vulnerability: OSV-2020-1066
Summary: Heap-buffer-overflow in dav1dFeedData
Severity: MEDIUM
Published: 2020-07-22T21:49:44.588962Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21947

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
dav1dFeedData
dav1dCodecGetNextImage
avifDecoderNextImage
```
Vulnerability: OSV-2018-143
Summary: Global-buffer-overflow in CFF::BlendArg::set_blends
Published: 2021-01-13T00:01:01.540340Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11714

```
Crash type: Global-buffer-overflow READ 8
Crash state:
CFF::BlendArg::set_blends
CFF::CFF2CSOpSet<CFF2CSOpSet_SubrSubset, CFF::SubrSubsetParam, CFF::PathProcsNul
CFF2CSOpSet_SubrSubset::process_op
```
Vulnerability: OSV-2021-555
Summary: Uncaught exception in java.base/java.util.concurrent.ConcurrentHashMap.putVal
Severity: LOW
Published: 2021-03-25T00:00:09.158172Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32395

```
Crash type: Uncaught exception
Crash state:
java.base/java.util.concurrent.ConcurrentHashMap.putVal
java.base/java.util.concurrent.ConcurrentHashMap.put
com.fasterxml.jackson.core.util.InternCache.intern
```
Vulnerability: OSV-2020-1573
Summary: Use-of-uninitialized-value in void ArduinoJsonNUMBER_71::Utf8::encodeCodepoint<ArduinoJsonNUMBER_71::StringCop
Severity: MEDIUM
Published: 2020-08-04T00:00:11.334079Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24633

```
Crash type: Use-of-uninitialized-value
Crash state:
void ArduinoJsonNUMBER_71::Utf8::encodeCodepoint<ArduinoJsonNUMBER_71::StringCop
ArduinoJsonNUMBER_71::JsonDeserializer<ArduinoJsonNUMBER_71::BoundedReader<unsig
ArduinoJsonNUMBER_71::JsonDeserializer<ArduinoJsonNUMBER_71::BoundedReader<unsig
```
Vulnerability: OSV-2021-1241
Summary: Heap-buffer-overflow in wabt::string_view::compare
Severity: MEDIUM
Published: 2021-09-12T00:01:27.535685Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38404

```
Crash type: Heap-buffer-overflow READ 6
Crash state:
wabt::string_view::compare
wabt::ReadBinary
wabt::ReadBinaryIr
```
Vulnerability: OSV-2020-806
Summary: Segv on unknown address in process_ndpi_collected_info
Published: 2020-07-14T05:37:42.995133Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22122

```
Crash type: Segv on unknown address
Crash state:
process_ndpi_collected_info
packet_processing
ndpi_workflow_process_packet
```
Vulnerability: OSV-2020-1123
Summary: Index-out-of-bounds in store_reg_arm
Severity: MEDIUM
Published: 2020-07-22T21:49:48.909471Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20026

```
Crash type: Index-out-of-bounds
Crash state:
store_reg_arm
gen_load_exclusive_arm
disas_arm_insn_arm
```
Vulnerability: OSV-2020-63
Summary: UNKNOWN READ in arrow::BaseBinaryBuilder<arrow::BinaryType>::UnsafeAppend
Severity: MEDIUM
Published: 2020-06-24T01:51:12.364400Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20697

```
Crash type: UNKNOWN READ
Crash state:
arrow::BaseBinaryBuilder<arrow::BinaryType>::UnsafeAppend
parquet::PlainByteArrayDecoder::DecodeArrowDense
parquet::PlainByteArrayDecoder::DecodeArrow
```
Vulnerability: OSV-2020-555
Summary: Heap-use-after-free in WelsDec::CWelsDecoder::SetOption
Severity: HIGH
Published: 2020-07-01T00:00:16.726929Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18747

```
Crash type: Heap-use-after-free WRITE 1
Crash state:
WelsDec::CWelsDecoder::SetOption
decoder_fuzzer.cpp
WelsCommon::WelsFree
```
Vulnerability: OSV-2020-105
Summary: Segv on unknown address in cbor_typeof
Published: 2020-06-24T01:51:14.307336Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21387

```
Crash type: Segv on unknown address
Crash state:
cbor_typeof
_cbor_nested_describe
_cbor_nested_describe
```
Vulnerability: OSV-2020-1820
Summary: Stack-buffer-overflow in hermes::regex::Parser<hermes::regex::Regex<hermes::regex::UTF16RegexTraits>, cha
Severity: MEDIUM
Published: 2020-09-21T00:00:18.040780Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25815

```
Crash type: Stack-buffer-overflow READ 2
Crash state:
hermes::regex::Parser<hermes::regex::Regex<hermes::regex::UTF16RegexTraits>, cha
hermes::regex::Parser<hermes::regex::Regex<hermes::regex::UTF16RegexTraits>, cha
hermes::regex::Parser<hermes::regex::Regex<hermes::regex::UTF16RegexTraits>, cha
```
Vulnerability: OSV-2020-781
Summary: Heap-buffer-overflow in __libcpp_memchr
Severity: MEDIUM
Published: 2020-07-14T05:37:32.830824Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23328

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
__libcpp_memchr
memchr
pcpp::HeaderField::HeaderField
```
Vulnerability: OSV-2021-781
Summary: UNKNOWN READ in Json::decodePrefixedString
Severity: MEDIUM
Published: 2021-05-21T00:00:06.420076Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34484

```
Crash type: UNKNOWN READ
Crash state:
Json::decodePrefixedString
Json::Value::asString
perfetto::trace_processor::json::AddJsonValueToArgs
```
Vulnerability: OSV-2021-1580
Summary: Heap-buffer-overflow in H5G__node_found
Severity: MEDIUM
Published: 2021-11-15T00:00:41.528810Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41011

```
Crash type: Heap-buffer-overflow READ 15
Crash state:
H5G__node_found
H5B_find
H5G__stab_lookup
```
Vulnerability: OSV-2020-294
Summary: Heap-buffer-overflow in ihevcd_process
Severity: MEDIUM
Published: 2020-06-30T00:00:47.385955Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18058

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ihevcd_process
ihevcd_process_thread
clone
```
Vulnerability: OSV-2021-1353
Summary: Heap-buffer-overflow in MqttClient_DecodePacket
Severity: HIGH
Published: 2021-09-22T00:01:32.692141Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39056

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
MqttClient_DecodePacket
MqttClient_WaitType
MqttClient_Unsubscribe
```
Vulnerability: OSV-2018-114
Summary: Heap-buffer-overflow in BEInt<unsigned int, 4>::operator unsigned int
Severity: MEDIUM
Published: 2021-01-13T00:00:52.786317Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10933

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
BEInt<unsigned int, 4>::operator unsigned int
OT::OffsetTo<OT::UnsizedArrayOf<OT::IntType<short, 2u> >, OT::IntType<unsigned i
AAT::KerxSubTableFormat2::get_kerning
```
Vulnerability: OSV-2021-1703
Summary: UNKNOWN in pdfi_fapi_get_gsubr
Published: 2021-12-17T00:00:08.818935Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42485

Crash type: UNKNOWN
Crash state:
pdfi_fapi_get_gsubr
gs_fapi_serialize_type2_font
gs_fapi_ft_get_scaled_font
Vulnerability: OSV-2021-447
Summary: Heap-buffer-overflow in luaG_runerror
Severity: MEDIUM
Published: 2021-02-25T00:02:41.560298Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31331

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
luaG_runerror
luaD_pretailcall
luaV_execute
```
Vulnerability: OSV-2021-914
Summary: UNKNOWN READ in mrb_vm_ci_env
Severity: MEDIUM
Published: 2021-07-03T00:01:26.278614Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35718

```
Crash type: UNKNOWN READ
Crash state:
mrb_vm_ci_env
cipop
mrb_vm_exec
```
Vulnerability: OSV-2020-1898
Summary: Heap-buffer-overflow in WelsDec::UpdateP16x16RefIdx
Severity: HIGH
Published: 2020-10-02T00:00:14.116993Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26078

```
Crash type: Heap-buffer-overflow WRITE 2
Crash state:
WelsDec::UpdateP16x16RefIdx
WelsDec::PredBDirectTemporal
WelsDec::ParseInterBInfo
```
Vulnerability: OSV-2020-447
Summary: UNKNOWN READ in yyparse
Severity: MEDIUM
Published: 2020-07-01T00:00:10.057682Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17968

```
Crash type: UNKNOWN READ
Crash state:
yyparse
mrb_parser_parse
mrb_parse_nstring
```
Vulnerability: OSV-2020-1877
Summary: Use-of-uninitialized-value in FAPI_FF_get_glyph
Severity: MEDIUM
Published: 2020-09-29T00:00:31.177432Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23115

Crash type: Use-of-uninitialized-value
Crash state:
FAPI_FF_get_glyph
get_fapi_glyph_data
load_truetype_glyph
Vulnerability: OSV-2020-502
Summary: Heap-use-after-free in WelsDec::SetUnRef
Severity: HIGH
Published: 2020-07-01T00:00:13.377454Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18644

```
Crash type: Heap-use-after-free WRITE 1
Crash state:
WelsDec::SetUnRef
WelsDec::WelsResetRefPic
WelsFreeDynamicMemory
```
Vulnerability: OSV-2020-2308
Summary: Heap-buffer-overflow in derive_collocated_motion_vectors
Severity: MEDIUM
Published: 2021-02-10T00:00:17.357392Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30568

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
derive_collocated_motion_vectors
derive_temporal_luma_vector_prediction
fill_luma_motion_vector_predictors
```
Vulnerability: OSV-2020-34
Summary: UNKNOWN READ in parquet::LevelDecoder::SetData
Severity: MEDIUM
Published: 2020-06-24T01:51:11.146400Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20666

```
Crash type: UNKNOWN READ
Crash state:
parquet::LevelDecoder::SetData
parquet::ColumnReaderImplBase<parquet::PhysicalType<
parquet::ColumnReaderImplBase<parquet::PhysicalType<
```
Vulnerability: OSV-2020-851
Summary: Use-of-uninitialized-value in Mat_VarRead5
Severity: MEDIUM
Published: 2020-07-14T22:13:45.821146Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17115

```
Crash type: Use-of-uninitialized-value
Crash state:
Mat_VarRead5
ReadNextStructField
Mat_VarReadNextInfo5
```
Vulnerability: OSV-2021-152
Summary: Stack-buffer-overflow in ot::NetworkData::ServerTlv::GetServer16
Severity: MEDIUM
Published: 2021-01-13T21:56:33.613485Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5878

```
Crash type: Stack-buffer-overflow READ 2
Crash state:
ot::NetworkData::ServerTlv::GetServer16
ot::NetworkData::Leader::RlocLookup
ot::NetworkData::Leader::RegisterNetworkData
```
Vulnerability: OSV-2021-1216
Summary: Global-buffer-overflow in fr_is_base16_nstd
Published: 2021-09-10T00:00:35.488094Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38283

```
Crash type: Global-buffer-overflow READ 1
Crash state:
fr_is_base16_nstd
fr_base16_decode_nstd
fr_value_box_from_str
```
Vulnerability: OSV-2021-1646
Summary: Heap-buffer-overflow in uncompress_b44_impl
Severity: MEDIUM
Published: 2021-12-04T00:01:33.435462Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41625

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
uncompress_b44_impl
default_decompress_chunk
exr_decoding_run
```
Vulnerability: OSV-2022-321
Summary: Stack-use-after-scope in std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<g
Published: 2022-04-09T00:00:21.286205Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46468

```
Crash type: Stack-use-after-scope WRITE 1
Crash state:
std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<g
tf::Executor::_invoke
tf::Executor::_consume_task
```
Vulnerability: OSV-2021-1083
Summary: Heap-buffer-overflow in flb_hash_get_by_id
Severity: MEDIUM
Published: 2021-08-01T00:00:59.162586Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36718

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
flb_hash_get_by_id
utils_fuzzer.c
```
Vulnerability: OSV-2020-797
Summary: Use-of-uninitialized-value in MipsAsmParser::isPicAndNotNxxAbi
Severity: MEDIUM
Published: 2020-07-14T05:37:37.559643Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22778

```
Crash type: Use-of-uninitialized-value
Crash state:
MipsAsmParser::isPicAndNotNxxAbi
MipsAsmParser::processInstruction
MipsAsmParser::MatchAndEmitInstruction
```
Vulnerability: OSV-2017-78
Summary: Negative-size-param in UA_SecureChannel_processChunk
Published: 2021-01-13T21:57:35.111717Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3609

```
Crash type: Negative-size-param
Crash state:
UA_SecureChannel_processChunk
processCompleteChunk
UA_Connection_processChunks
```
Vulnerability: OSV-2020-328
Summary: UNKNOWN READ in dotnet_parse_tilde_2
Severity: MEDIUM
Published: 2020-07-01T00:00:03.116576Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16448

```
Crash type: UNKNOWN READ
Crash state:
dotnet_parse_tilde_2
dotnet_parse_tilde
dotnet_parse_com
```
Vulnerability: OSV-2017-97
Summary: Use-after-poison in rawspeed::unroll_loop_t<void rawspeed::LJpegDecompressor::decodeN<4>
Severity: HIGH
Published: 2021-01-13T21:57:40.779998Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4451

```
Crash type: Use-after-poison WRITE 2
Crash state:
rawspeed::unroll_loop_t<void rawspeed::LJpegDecompressor::decodeN<4>
void rawspeed::LJpegDecompressor::decodeN<4>
rawspeed::AbstractLJpegDecompressor::decode
```
Vulnerability: OSV-2020-778
Summary: Heap-use-after-free in void draco::Metadata::AddEntry<std::__1::vector<unsigned char, std::__1::allocat
Severity: HIGH
Published: 2020-07-14T05:37:30.449855Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24044

```
Crash type: Heap-use-after-free READ 8
Crash state:
void draco::Metadata::AddEntry<std::__1::vector<unsigned char, std::__1::allocat
draco::MetadataDecoder::DecodeEntry
draco::MetadataDecoder::DecodeMetadata
```
Vulnerability: OSV-2022-264
Summary: Heap-buffer-overflow in jxl::N_AVX2::BlendingStage::ProcessRow
Severity: MEDIUM
Published: 2022-03-21T00:00:16.278407Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45822

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
jxl::N_AVX2::BlendingStage::ProcessRow
jxl::LowMemoryRenderPipeline::RenderRect
jxl::LowMemoryRenderPipeline::ProcessBuffers
```
Vulnerability: OSV-2021-282
Summary: Heap-buffer-overflow in LibRaw_buffer_datastream::read
Severity: HIGH
Published: 2021-02-06T00:00:24.519678Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30324

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
LibRaw_buffer_datastream::read
LibRaw::uncompressed_fp_dng_load_raw
LibRaw::unpack
```
Vulnerability: OSV-2021-778
Summary: UNKNOWN READ in helper_uc_tracecode
Severity: MEDIUM
Published: 2021-05-20T00:01:16.313104Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34457

Crash type: UNKNOWN READ
Crash state:
helper_uc_tracecode
Vulnerability: OSV-2021-902
Summary: Heap-buffer-overflow in ebitmap_match_any
Severity: MEDIUM
Published: 2021-06-27T00:01:23.702334Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35553

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
ebitmap_match_any
avtab_map
cil_check_neverallow
```
Vulnerability: OSV-2021-451
Summary: Heap-buffer-overflow in void apply_sao_internal<unsigned short>
Severity: MEDIUM
Published: 2021-02-28T00:00:09.511962Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31485

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
void apply_sao_internal<unsigned short>
void apply_sao<unsigned char>
thread_task_sao::work
```
Vulnerability: OSV-2021-1715
Summary: Segv on unknown address in sreadbuf
Published: 2021-12-18T00:01:42.169089Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42489

Crash type: Segv on unknown address
Crash state:
sreadbuf
spgetcc
sgets
Vulnerability: OSV-2018-102
Summary: Heap-buffer-overflow in r_read_le32
Severity: MEDIUM
Published: 2021-01-13T00:00:44.549063Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11303

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
r_read_le32
r_bin_file_get_strings
r_bin_object_set_items
```
Vulnerability: OSV-2020-902
Summary: Index-out-of-bounds in QUnicodeTables::qGetProp
Severity: MEDIUM
Published: 2020-07-21T00:00:16.344765Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24266

```
Crash type: Index-out-of-bounds
Crash state: 
QUnicodeTables::qGetProp
QString QUnicodeTables::convertCase<QString>
QString::toLower_helper
```
Vulnerability: OSV-2021-514
Summary: UNKNOWN READ in _fini
Severity: MEDIUM
Published: 2021-03-12T00:00:13.850530Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31953

```
Crash type: UNKNOWN READ
Crash state:
_fini
```
Vulnerability: OSV-2018-417
Summary: UNKNOWN READ in boost::sub_match<std::__1::__wrap_iter<char const*> >::sub_match
Severity: MEDIUM
Published: 2021-01-15T00:01:14.949558Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9539

```
Crash type: UNKNOWN READ
Crash state:
boost::sub_match<std::__1::__wrap_iter<char const*> >::sub_match
_ZNSt3__16vectorIN5boost9sub_matchINS_11__wrap_iterIPKcEEEENS_9allocatorIS7_EEE1
boost::match_results<std::__1::__wrap_iter<char const*>, std::__1::allocator<boo
```
Vulnerability: OSV-2021-144
Summary: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized
Severity: MEDIUM
Published: 2021-01-13T21:56:24.820945Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7171

```
Crash type: Use-of-uninitialized-value
Crash state:
rawspeed::RawImageData::checkMemIsInitialized
Cr2Decompressor.cpp
rawspeed::alignedMalloc
```
Vulnerability: OSV-2020-847
Summary: Use-of-uninitialized-value in ycck_cmyk_convert
Severity: MEDIUM
Published: 2020-07-14T22:13:44.357655Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18732

```
Crash type: Use-of-uninitialized-value
Crash state:
ycck_cmyk_convert
sep_upsample
process_data_simple_main
```
Vulnerability: OSV-2020-22
Summary: Container-overflow in parquet::schema::Unflatten
Severity: MEDIUM
Published: 2020-06-24T01:51:10.604817Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20897

```
Crash type: Container-overflow READ 4
Crash state:
parquet::schema::Unflatten
parquet::FileMetaData::FileMetaDataImpl::FileMetaDataImpl
parquet::FileMetaData::FileMetaData
```
Vulnerability: OSV-2020-514
Summary: UNKNOWN READ in asn1_item_print_ctx
Severity: MEDIUM
Published: 2020-07-01T00:00:13.902833Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14546

```
Crash type: UNKNOWN READ
Crash state:
asn1_item_print_ctx
asn1_template_print_ctx
asn1_item_print_ctx
```
Vulnerability: OSV-2021-847
Summary: Heap-buffer-overflow in frame_get_vlmetalayers
Severity: MEDIUM
Published: 2021-06-10T00:01:13.857277Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35086

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
frame_get_vlmetalayers
frame_to_schunk
blosc2_schunk_from_buffer
```
Vulnerability: OSV-2020-144
Summary: Heap-use-after-free in int arrow::BitUtil::BitReader::GetBatch<short>
Severity: HIGH
Published: 2020-06-24T01:51:16.108113Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20685

```
Crash type: Heap-use-after-free WRITE 2
Crash state:
int arrow::BitUtil::BitReader::GetBatch<short>
parquet::LevelDecoder::Decode
parquet::internal::TypedRecordReader<parquet::PhysicalType<
```
Vulnerability: OSV-2020-2060
Summary: Heap-buffer-overflow in fp_to_unsigned_bin_at_pos
Severity: HIGH
Published: 2020-10-14T00:00:10.194970Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26295

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
fp_to_unsigned_bin_at_pos
fp_to_unsigned_bin
mp_to_unsigned_bin
```
Vulnerability: OSV-2018-293
Summary: Use-of-uninitialized-value in pdf_load_version
Severity: MEDIUM
Published: 2021-01-15T00:00:24.294870Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5496

```
Crash type: Use-of-uninitialized-value
Crash state:
pdf_load_version
pdf_init_document
pdf_open_document_with_stream
```
Vulnerability: OSV-2022-376
Summary: Heap-buffer-overflow in ndpi_search_raknet
Severity: MEDIUM
Published: 2022-04-26T00:01:35.220458Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47000

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
ndpi_search_raknet
check_ndpi_detection_func
ndpi_check_flow_func
```
Vulnerability: OSV-2020-685
Summary: Global-buffer-overflow in backup
Published: 2020-07-01T00:00:24.689135Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18464

Crash type: Global-buffer-overflow READ 1
Crash state:
backup
peek
lex_config
Vulnerability: OSV-2021-1312
Summary: Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha
Severity: MEDIUM
Published: 2021-09-18T00:01:03.273096Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38808

```
Crash type: Use-of-uninitialized-value
Crash state:
std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha
print_json
fuzz_dump.cpp
```
Vulnerability: OSV-2018-155
Summary: Stack-buffer-overflow in cff_parser_run
Severity: MEDIUM
Published: 2021-01-13T00:01:06.516725Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9865

```
Crash type: Stack-buffer-overflow READ 8
Crash state:
cff_parser_run
cff_subfont_load
cff_font_load
```
Vulnerability: OSV-2020-955
Summary: UNKNOWN WRITE in vcf_parse_format
Severity: HIGH
Published: 2020-07-22T00:00:25.417163Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24097

```
Crash type: UNKNOWN WRITE
Crash state:
vcf_parse_format
vcf_parse
vcf_read
```
Vulnerability: OSV-2020-1420
Summary: Bad-cast to Sass::PreValue from Sass::Unary_Expression
Severity: HIGH
Published: 2020-07-28T00:00:14.887375Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15896

```
Crash type: Bad-cast
Crash state:
Bad-cast to Sass::PreValue from Sass::Unary_Expression
Sass::SharedImpl<Sass::PreValue>::SharedImpl<Sass::Expression>
Sass::Parser::parse_ie_keyword_arg
```
Vulnerability: OSV-2020-406
Summary: Global-buffer-overflow in lwan_strbuf_append_str
Published: 2020-07-01T00:00:07.709109Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18448

Crash type: Global-buffer-overflow READ {*}
Crash state:
lwan_strbuf_append_str
parse_section
parse_section_shorthand
Vulnerability: OSV-2020-1836
Summary: Heap-buffer-overflow in hextoint
Severity: MEDIUM
Published: 2020-09-25T00:00:11.266571Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25885

```
Crash type: Heap-buffer-overflow READ 7
Crash state:
hextoint
get_name_from_EF_DatiPersonali
itacns_add_data_files
```
Vulnerability: OSV-2020-113
Summary: Heap-buffer-overflow in vorbis_book_decodev_add
Severity: MEDIUM
Published: 2020-06-24T01:51:14.665804Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22207

Crash type: Heap-buffer-overflow READ 4
Crash state:
vorbis_book_decodev_add
_01inverse
res1_inverse
Vulnerability: OSV-2021-810
Summary: Global-buffer-overflow in SubstitutePhonemes
Published: 2021-05-29T00:00:08.420998Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34747

```
Crash type: Global-buffer-overflow READ 2
Crash state:
SubstitutePhonemes
MakePhonemeList
TranslateClause
```
Vulnerability: OSV-2020-543
Summary: Heap-buffer-overflow in circular_memcpy
Severity: MEDIUM
Published: 2020-07-01T00:00:15.879739Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14574

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
circular_memcpy
run_arm_filter
run_filter
```
Vulnerability: OSV-2022-48
Summary: Heap-buffer-overflow in processClientServerHello
Severity: MEDIUM
Published: 2022-01-16T00:01:02.352424Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43664

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
processClientServerHello
processTLSBlock
ndpi_search_tls_udp
```
Vulnerability: OSV-2020-75
Summary: Index-out-of-bounds in der_tag
Severity: MEDIUM
Published: 2020-06-24T01:51:12.970172Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20753

```
Crash type: Index-out-of-bounds
Crash state:
der_tag
der_cmp
magiccheck
```
Vulnerability: OSV-2020-1135
Summary: Heap-buffer-overflow in sas_read4
Severity: MEDIUM
Published: 2020-07-22T21:49:49.811983Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12584

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
sas_read4
sas7bcat_parse_block
readstat_parse_sas7bcat
```
Vulnerability: OSV-2020-810
Summary: Use-of-uninitialized-value in pcap_filter_with_aux_data
Severity: MEDIUM
Published: 2020-07-14T05:37:43.627443Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22220

```
Crash type: Use-of-uninitialized-value
Crash state:
pcap_filter_with_aux_data
pcap_filter
pcap_offline_filter
```
Vulnerability: OSV-2021-1257
Summary: Stack-buffer-overflow in GRIBDataset::Open
Severity: MEDIUM
Published: 2021-09-14T00:01:43.346984Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38610

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
GRIBDataset::Open
GDALOpenEx
GDALOpen
```
Vulnerability: OSV-2020-1565
Summary: Heap-buffer-overflow in allocate_field
Severity: HIGH
Published: 2020-08-02T00:00:39.707050Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24586

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
allocate_field
pb_dec_string
decode_basic_field
```
Vulnerability: OSV-2021-543
Summary: Heap-use-after-free in dxf_objects_read
Severity: HIGH
Published: 2021-03-21T00:01:06.640931Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32275

```
Crash type: Heap-use-after-free READ 2
Crash state:
dxf_objects_read
dwg_read_dxf
llvmfuzz.c
```
Vulnerability: OSV-2021-1607
Summary: Container-overflow in void jxl::CopyImageTo<int>
Severity: MEDIUM
Published: 2021-11-22T00:01:39.687600Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41235

```
Crash type: Container-overflow READ 4
Crash state:
void jxl::CopyImageTo<int>
jxl::ModularFrameDecoder::DecodeGroup
jxl::FrameDecoder::ProcessACGroup
```
Vulnerability: OSV-2020-1288
Summary: Heap-buffer-overflow in asn1_decode_entry
Severity: MEDIUM
Published: 2020-07-22T21:50:03.236534Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16620

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
asn1_decode_entry
asn1_decode
asn1_decode_entry
```
Vulnerability: OSV-2021-1410
Summary: Heap-buffer-overflow in generic_unpack
Severity: HIGH
Published: 2021-10-05T00:00:18.081765Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39571

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
generic_unpack
exr_decoding_run
Imf_3_1::checkCoreFile
```
Vulnerability: OSV-2021-23
Summary: UNKNOWN READ in blosc_getitem
Severity: MEDIUM
Published: 2021-01-07T00:01:14.405652Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29287

```
Crash type: UNKNOWN READ
Crash state:
blosc_getitem
get_coffset
frame_get_lazychunk
```
Vulnerability: OSV-2021-304
Summary: Stack-buffer-overflow in processClientServerHello
Severity: HIGH
Published: 2021-02-08T00:00:05.010743Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30393

```
Crash type: Stack-buffer-overflow WRITE 6
Crash state:
processClientServerHello
processTLSBlock
ndpi_search_tls_tcp
```
Vulnerability: OSV-2022-248
Summary: Uncaught exception in java.base/java.nio.Bits.reserveMemory
Severity: LOW
Published: 2022-03-16T00:01:40.965144Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45563

```
Crash type: Uncaught exception
Crash state:
java.base/java.nio.Bits.reserveMemory
java.base/java.nio.DirectByteBuffer.<init>
java.base/java.nio.ByteBuffer.allocateDirect
```
Vulnerability: OSV-2017-54
Summary: Use-of-uninitialized-value in macho_parse_file_32_be
Severity: MEDIUM
Published: 2021-01-13T21:56:24.033170Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4375

```
Crash type: Use-of-uninitialized-value
Crash state:
macho_parse_file_32_be
macho__load
yr_modules_load
```
Vulnerability: OSV-2017-116
Summary: Use-after-poison in rawspeed::OrfDecoder::decodeCompressed
Severity: HIGH
Published: 2021-01-13T21:57:50.232817Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3012

```
Crash type: Use-after-poison WRITE 2
Crash state:
rawspeed::OrfDecoder::decodeCompressed
rawspeed::OrfDecoder::decodeRawInternal
rawspeed::RawDecoder::decodeRaw
```
Vulnerability: OSV-2021-1806
Summary: Stack-buffer-overflow in pdfi_open_CIDFont_substitute_file
Severity: HIGH
Published: 2022-01-26T00:01:49.919350Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44034

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
pdfi_open_CIDFont_substitute_file
pdfi_load_font
pdfi_read_type0_font
```
Vulnerability: OSV-2021-1105
Summary: Heap-buffer-overflow in read_config
Severity: MEDIUM
Published: 2021-08-07T00:03:09.706987Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36908

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
read_config
snmp_config_fuzzer.c
```
Vulnerability: OSV-2020-2298
Summary: UNKNOWN READ in ndpi_free
Severity: MEDIUM
Published: 2020-12-31T00:01:07.805100Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29081

```
Crash type: UNKNOWN READ
Crash state:
ndpi_free
ndpi_free_flow
fuzz_process_packet.c
```
Vulnerability: OSV-2022-33
Summary: Heap-buffer-overflow in ndlz8_decompress
Severity: MEDIUM
Published: 2022-01-12T00:00:34.083560Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43519

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
ndlz8_decompress
blosc_d
do_job
```
Vulnerability: OSV-2021-1386
Summary: Container-overflow in std::__1::__function::__func<uWS::TemplatedApp<true>&& uWS::TemplatedApp<true>::
Severity: MEDIUM
Published: 2021-09-28T00:00:12.139414Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39355

```
Crash type: Container-overflow READ 1
Crash state:
std::__1::__function::__func<uWS::TemplatedApp<true>&& uWS::TemplatedApp<true>::
uWS::TopicTree<uWS::TopicTreeMessage>::publish
uWS::TemplatedApp<true>::publish
```
Vulnerability: OSV-2021-538
Summary: Heap-buffer-overflow in sc_pkcs15emu_oberthur_add_pubkey
Severity: MEDIUM
Published: 2021-03-20T00:01:07.086960Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32202

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
sc_pkcs15emu_oberthur_add_pubkey
sc_oberthur_parse_publicinfo
sc_pkcs15emu_oberthur_init
```
Vulnerability: OSV-2021-1693
Summary: Global-buffer-overflow in pdfi_fapi_get_glyph
Published: 2021-12-14T00:01:47.956886Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42310

Crash type: Global-buffer-overflow READ {*}
Crash state:
pdfi_fapi_get_glyph
get_fapi_glyph_data
cff_slot_load
Vulnerability: OSV-2020-187
Summary: UNKNOWN READ in arrow::ipc::MessageDecoder::MessageDecoderImpl::ConsumeDataBufferInt32
Severity: MEDIUM
Published: 2020-06-24T01:51:18.041219Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21680

```
Crash type: UNKNOWN READ
Crash state:
arrow::ipc::MessageDecoder::MessageDecoderImpl::ConsumeDataBufferInt32
arrow::ipc::MessageDecoder::MessageDecoderImpl::ConsumeInitialBuffer
arrow::ipc::MessageDecoder::MessageDecoderImpl::ConsumeBuffer
```
Vulnerability: OSV-2020-353
Summary: Stack-buffer-overflow in ot::MeshCoP::Commissioner::GeneratePskc
Severity: HIGH
Published: 2020-07-01T00:00:04.770226Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19386

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
ot::MeshCoP::Commissioner::GeneratePskc
ot::Ncp::NcpBase::HandlePropertySet_SPINEL_PROP_MESHCOP_COMMISSIONER_GENERATE_PS
ot::Ncp::NcpBase::HandlePropertySetForSpecialProperties
```
Vulnerability: OSV-2021-1017
Summary: Stack-buffer-overflow in piv_compute_signature
Severity: HIGH
Published: 2021-07-16T00:00:22.598607Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36200

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
piv_compute_signature
sc_compute_signature
use_key
```
Vulnerability: OSV-2021-703
Summary: Container-overflow in unsigned long jsoncons::detail::escape_string<char, jsoncons::string_sink<std::_
Severity: MEDIUM
Published: 2021-04-29T00:00:31.595556Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33781

```
Crash type: Container-overflow READ 1
Crash state:
unsigned long jsoncons::detail::escape_string<char, jsoncons::string_sink<std::_
jsoncons::basic_json_encoder<char, jsoncons::string_sink<std::__1::basic_string<
jsoncons::basic_json_visitor<char>::key
```
Vulnerability: OSV-2021-1447
Summary: UNKNOWN READ
Severity: MEDIUM
Published: 2021-10-14T00:00:18.116118Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39900

```
Crash type: UNKNOWN READ
Crash state:
NULL```
Vulnerability: OSV-2021-1152
Summary: UNKNOWN READ in exif_mnote_data_apple_load
Severity: MEDIUM
Published: 2021-08-20T00:00:16.563182Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37334

```
Crash type: UNKNOWN READ
Crash state:
exif_mnote_data_apple_load
exif_mnote_data_load
interpret_maker_note
```
Vulnerability: OSV-2020-1230
Summary: Heap-buffer-overflow in to_u32
Severity: MEDIUM
Published: 2020-07-22T21:49:58.592376Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16734

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
to_u32
fuzz_get_tlv_comn
fuzz_add_mime_part
```
Vulnerability: OSV-2021-646
Summary: Heap-use-after-free in std::__1::__tree_iterator<std::__1::__value_type<std::__1::basic_string<char, st
Severity: HIGH
Published: 2021-04-17T00:00:31.031765Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33315

```
Crash type: Heap-use-after-free READ 8
Crash state:
std::__1::__tree_iterator<std::__1::__value_type<std::__1::basic_string<char, st
draco::Metadata::AddSubMetadata
draco::MetadataDecoder::DecodeMetadata
```
Vulnerability: OSV-2021-1502
Summary: Heap-buffer-overflow in asn_realloc_rbuild_string
Severity: MEDIUM
Published: 2021-10-29T00:01:25.958637Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40431

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
asn_realloc_rbuild_string
snmpv3_scopedPDU_header_realloc_rbuild
snmpv3_packet_realloc_rbuild
```
Vulnerability: OSV-2018-196
Summary: Use-of-uninitialized-value in _pkcs12_decode_safe_contents
Severity: MEDIUM
Published: 2021-01-13T00:01:21.384798Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10216

```
Crash type: Use-of-uninitialized-value
Crash state:
_pkcs12_decode_safe_contents
_parse_safe_contents
gnutls_pkcs12_get_bag
```
Vulnerability: OSV-2020-1549
Summary: UNKNOWN WRITE in hb_vector_t<CFF::op_str_t>::resize
Severity: HIGH
Published: 2020-07-31T00:00:39.916125Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24500

```
Crash type: UNKNOWN WRITE
Crash state:
hb_vector_t<CFF::op_str_t>::resize
hb_vector_t<CFF::op_str_t>::push
CFF::parsed_values_t<CFF::op_str_t>::add_op
```
Vulnerability: OSV-2021-1781
Summary: Heap-buffer-overflow in read_xref
Severity: MEDIUM
Published: 2021-12-29T00:01:43.525190Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43045

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
read_xref
pdfi_read_xref
pdfi_set_input_stream
```
Vulnerability: OSV-2020-59
Summary: Heap-buffer-overflow in ndpi_add_connection_as_bittorrent
Severity: MEDIUM
Published: 2020-06-24T01:51:12.217599Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20777

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
ndpi_add_connection_as_bittorrent
ndpi_int_search_bittorrent_tcp_zero
check_ndpi_tcp_flow_func
```
Vulnerability: OSV-2020-2220
Summary: Heap-buffer-overflow in mk_rconf_read
Severity: MEDIUM
Published: 2020-12-04T00:00:07.219620Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28241

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
mk_rconf_read
mk_rconf_open
flb_parser_conf_file
```
Vulnerability: OSV-2021-979
Summary: Heap-buffer-overflow in stbi__convert_16_to_8
Severity: MEDIUM
Published: 2021-07-13T00:01:26.986629Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36087

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
stbi__convert_16_to_8
stbi__load_and_postprocess_8bit
stbi_load_from_memory
```
Vulnerability: OSV-2020-580
Summary: Heap-buffer-overflow in ots::OpenTypeSTAT::Serialize
Severity: MEDIUM
Published: 2020-07-01T00:00:18.191041Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12840

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
ots::OpenTypeSTAT::Serialize
ProcessGeneric
ProcessTTF
```
Vulnerability: OSV-2018-179
Summary: Heap-buffer-overflow in OT::post::accelerator_t::cmp_gids
Severity: MEDIUM
Published: 2021-01-13T00:01:14.304385Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11290

```
Crash type: Heap-buffer-overflow READ 5
Crash state:
OT::post::accelerator_t::cmp_gids
sort_r_cmpswap
sort_r_simple
```
Vulnerability: OSV-2022-136
Summary: Heap-buffer-overflow in cli_js_parse_done
Severity: MEDIUM
Published: 2022-02-10T00:01:30.573024Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44490

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
cli_js_parse_done
cli_html_normalise
html_normalise_map
```
Vulnerability: OSV-2021-1451
Summary: Heap-buffer-overflow in Imf_3_1::memstream_read
Severity: HIGH
Published: 2021-10-15T00:00:15.606456Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39936

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
Imf_3_1::memstream_read
dispatch_read
read_uncompressed_direct
```