TQRG/raw-osv-data huggingface dataset:
Vulnerability: OSV-2020-785
Summary: Heap-buffer-overflow in sctp_handle_packet_dropped
Severity: HIGH
Published: 2020-07-14T05:37:33.243806Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23656

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
sctp_handle_packet_dropped
sctp_process_control
sctp_common_input_processing
```
Vulnerability: OSV-2022-299
Summary: Heap-use-after-free in read_data_compressed
Severity: HIGH
Published: 2022-04-04T00:00:06.861660Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46279

```
Crash type: Heap-use-after-free READ 4
Crash state:
read_data_compressed
archive_read_format_rar_read_data
_archive_read_data_block
```
Vulnerability: OSV-2020-1609
Summary: Heap-buffer-overflow in fdisk_partname
Severity: MEDIUM
Published: 2020-08-14T00:01:33.935815Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24859

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
fdisk_partname
write_file_sfdisk
fdisk_script_write_file
```
Vulnerability: OSV-2020-1577
Summary: Heap-buffer-overflow in QPointF::x
Severity: MEDIUM
Published: 2020-08-04T00:00:33.938651Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24615

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
QPointF::x
QBezier::fromPoints
QOutlineMapper::curveTo
```
Vulnerability: OSV-2021-1615
Summary: Heap-buffer-overflow in jxl::ModularFrameDecoder::DecodeGroup
Severity: MEDIUM
Published: 2021-11-24T00:00:37.422188Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41283

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
jxl::ModularFrameDecoder::DecodeGroup
jxl::FrameDecoder::ProcessACGroup
jxl::ThreadPool::RunCallState<jxl::FrameDecoder::ProcessSections
```
Vulnerability: OSV-2020-1127
Summary: Use-of-uninitialized-value in WelsDec::CWelsDecoder::ReorderPicturesInDisplay
Severity: MEDIUM
Published: 2020-07-22T21:49:49.163030Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12647

```
Crash type: Use-of-uninitialized-value
Crash state:
WelsDec::CWelsDecoder::ReorderPicturesInDisplay
WelsDec::CWelsDecoder::DecodeFrame2
WelsDec::CWelsDecoder::DecodeFrameNoDelay
```
Vulnerability: OSV-2020-802
Summary: UNKNOWN READ
Severity: MEDIUM
Published: 2020-07-14T05:37:41.456127Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22234

```
Crash type: UNKNOWN READ
Crash state:
NULL```
Vulnerability: OSV-2020-67
Summary: Heap-buffer-overflow in ndpi_workflow_process_packet
Severity: MEDIUM
Published: 2020-06-24T01:51:12.608279Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21348

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
ndpi_workflow_process_packet
fuzz_ndpi_reader.c
```
Vulnerability: OSV-2020-101
Summary: UNKNOWN READ in apache::thrift::transport::TMemoryBuffer::readSlow
Severity: MEDIUM
Published: 2020-06-24T01:51:14.107760Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20681

```
Crash type: UNKNOWN READ
Crash state:
apache::thrift::transport::TMemoryBuffer::readSlow
apache::thrift::transport::TBufferBase::read
unsigned int apache::thrift::transport::readAll<apache::thrift::transport::TBuff
```
Vulnerability: OSV-2021-802
Summary: Stack-buffer-overflow in InterpretCondition
Severity: MEDIUM
Published: 2021-05-27T00:00:31.797718Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34692

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
InterpretCondition
InterpretPhoneme
MakePhonemeList
```
Vulnerability: OSV-2020-414
Summary: Heap-use-after-free in WelsDec::MapColToList0
Severity: HIGH
Published: 2020-07-01T00:00:08.178314Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14035

```
Crash type: Heap-use-after-free READ 4
Crash state:
WelsDec::MapColToList0
WelsDec::PredBDirectTemporal
WelsDec::WelsDecodeMbCavlcBSlice
```
Vulnerability: OSV-2021-947
Summary: Dynamic-stack-buffer-overflow in hsql::SQLParserResult::addStatement
Published: 2021-07-10T00:01:12.069383Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35946

```
Crash type: Dynamic-stack-buffer-overflow WRITE 8
Crash state:
hsql::SQLParserResult::addStatement
hsql_parse
hsql::SQLParser::parse
```
Vulnerability: OSV-2020-88
Summary: Segv on unknown address in cbor_decref
Published: 2020-06-24T01:51:13.521395Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21386

```
Crash type: Segv on unknown address
Crash state:
cbor_decref
cbor_decref
cbor_load
```
Vulnerability: OSV-2021-414
Summary: Heap-use-after-free in us_socket_close
Severity: HIGH
Published: 2021-02-18T00:02:35.938517Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31047

```
Crash type: Heap-use-after-free READ 8
Crash state:
us_socket_close
__wrap_epoll_wait
us_loop_run
```
Vulnerability: OSV-2021-1300
Summary: UNKNOWN READ in get_body
Severity: MEDIUM
Published: 2021-09-17T00:01:33.668747Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38750

```
Crash type: UNKNOWN READ
Crash state:
get_body
parse_sdp
fuzz_parse_msg.c
```
Vulnerability: OSV-2020-1598
Summary: Use-of-uninitialized-value in longest_match
Severity: MEDIUM
Published: 2020-08-12T00:00:12.956208Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24804

```
Crash type: Use-of-uninitialized-value
Crash state:
longest_match
deflate_fast
deflate
```
Vulnerability: OSV-2020-1062
Summary: Use-of-uninitialized-value in ihevc_recon_4x4_ttype1
Severity: MEDIUM
Published: 2020-07-22T21:49:44.388184Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18991

```
Crash type: Use-of-uninitialized-value
Crash state:
ihevc_recon_4x4_ttype1
ihevcd_iquant_itrans_recon_ctb
ihevcd_process
```
Vulnerability: OSV-2022-108
Summary: Heap-buffer-overflow in void apply_string<GSUBProxy>
Severity: MEDIUM
Published: 2022-01-31T00:01:43.533565Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44212

Crash type: Heap-buffer-overflow READ 2
Crash state:
void apply_string<GSUBProxy>
void hb_ot_map_t::apply<GSUBProxy>
hb_ot_map_t::substitute
Vulnerability: OSV-2021-1479
Summary: Heap-buffer-overflow in hufDecode
Severity: MEDIUM
Published: 2021-10-24T00:00:36.769120Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40231

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
hufDecode
internal_huf_decompress
internal_exr_undo_piz
```
Vulnerability: OSV-2021-1183
Summary: UNKNOWN WRITE in draco::DepthFirstTraverser<draco::CornerTable, draco::MeshAttributeIndicesEncodi
Severity: HIGH
Published: 2021-09-01T00:00:21.323146Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37864

```
Crash type: UNKNOWN WRITE
Crash state:
draco::DepthFirstTraverser<draco::CornerTable, draco::MeshAttributeIndicesEncodi
draco::MeshTraversalSequencer<draco::DepthFirstTraverser<draco::CornerTable, dra
draco::SequentialAttributeDecodersController::DecodeAttributes
```
Vulnerability: OSV-2021-1496
Summary: Heap-buffer-overflow in jxl::JxlBoxContentDecoder::Process
Severity: HIGH
Published: 2021-10-28T00:00:18.879739Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40396

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
jxl::JxlBoxContentDecoder::Process
JxlDecoderProcessInput
djxl_fuzzer.cc
```
Vulnerability: OSV-2021-228
Summary: Heap-buffer-overflow in safe_ltf8_get
Severity: MEDIUM
Published: 2021-01-24T00:00:16.807322Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29837

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
safe_ltf8_get
cram_varint_decode_init
cram_decoder_init
```
Vulnerability: OSV-2021-382
Summary: Heap-buffer-overflow in frame_get_vlmetalayers
Severity: MEDIUM
Published: 2021-02-13T00:00:14.343423Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30868

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
frame_get_vlmetalayers
frame_to_schunk
blosc2_schunk_from_buffer
```
Vulnerability: OSV-2021-678
Summary: UNKNOWN WRITE in CompileBlock
Severity: HIGH
Published: 2021-04-23T00:00:13.900793Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33555

```
Crash type: UNKNOWN WRITE
Crash state:
CompileBlock
Compile_LoopOrBlock
CompileBlockStatements
```
Vulnerability: OSV-2020-2072
Summary: Heap-buffer-overflow in _conv_num
Severity: MEDIUM
Published: 2020-10-15T00:00:40.514544Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26327

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
_conv_num
_flb_strptime
flb_strptime
```
Vulnerability: OSV-2021-696
Summary: UNKNOWN READ in ntlm_decode_type2_target
Severity: MEDIUM
Published: 2021-04-28T00:00:54.883431Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33720

```
Crash type: UNKNOWN READ
Crash state:
ntlm_decode_type2_target
Curl_auth_decode_ntlm_type2_message
Curl_sasl_continue
```
Vulnerability: OSV-2022-220
Summary: Stack-buffer-overflow in load_regex_matcher
Severity: HIGH
Published: 2022-03-07T00:00:32.716453Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45247

```
Crash type: Stack-buffer-overflow WRITE 1
Crash state:
load_regex_matcher
cli_loadpdb
cli_load
```
Vulnerability: OSV-2021-229
Summary: Heap-buffer-overflow in cram_xpack_decode_init
Severity: HIGH
Published: 2021-01-24T00:00:18.032169Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29827

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
cram_xpack_decode_init
cram_decoder_init
cram_decode_compression_header
```
Vulnerability: OSV-2021-383
Summary: Heap-buffer-overflow in des_ede3_wrap
Severity: HIGH
Published: 2021-02-13T00:00:16.616574Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30847

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
des_ede3_wrap
tdes_wrap_cipher_internal
tdes_wrap_cipher
```
Vulnerability: OSV-2021-679
Summary: Heap-buffer-overflow in strlcpy
Severity: HIGH
Published: 2021-04-23T00:01:10.860169Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33556

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
strlcpy
parse_lxc_mntopts
set_config_rootfs_options
```
Vulnerability: OSV-2018-280
Summary: Heap-buffer-overflow in xstrdup
Severity: MEDIUM
Published: 2021-01-15T00:00:20.694236Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7931

Crash type: Heap-buffer-overflow READ {*}
Crash state:
xstrdup
ftp_parse_winnt_ls
wget_ftpls_fuzzer.c
Vulnerability: OSV-2020-679
Summary: Use-of-uninitialized-value in printUInt32
Severity: MEDIUM
Published: 2020-07-01T00:00:24.413748Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14642

```
Crash type: Use-of-uninitialized-value
Crash state:
printUInt32
printU1ImmOperand
printInstruction
```
Vulnerability: OSV-2020-383
Summary: Stack-buffer-overflow in ot::NetworkData::Leader::IsStableUpdated
Severity: MEDIUM
Published: 2020-07-01T00:00:06.392501Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15971

```
Crash type: Stack-buffer-overflow READ 8
Crash state:
ot::NetworkData::Leader::IsStableUpdated
ot::NetworkData::Leader::RegisterNetworkData
ot::NetworkData::Leader::HandleServerData
```
Vulnerability: OSV-2020-66
Summary: Heap-buffer-overflow in CPLErr GDALResampleChunk32R_AverageT<unsigned char, int>
Severity: MEDIUM
Published: 2020-06-24T01:51:12.546926Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21558

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
CPLErr GDALResampleChunk32R_AverageT<unsigned char, int>
GDALResampleChunk32R_Average
GDALRasterBand::RasterIOResampled
```
Vulnerability: OSV-2021-803
Summary: Heap-buffer-overflow in sampled_data_finish
Severity: HIGH
Published: 2021-05-27T00:01:05.378775Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34675

Crash type: Heap-buffer-overflow WRITE 16
Crash state:
sampled_data_finish
sampled_data_continue
interp
Vulnerability: OSV-2020-89
Summary: Heap-use-after-free in __xmlRaiseError
Severity: HIGH
Published: 2020-06-24T01:51:13.556119Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23120

Crash type: Heap-use-after-free READ 2
Crash state:
__xmlRaiseError
xmlErrValidNode
xmlValidateRef
Vulnerability: OSV-2021-1301
Summary: Use-of-uninitialized-value in std::__1::__hash_iterator<std::__1::__hash_node<std::__1::__hash_value_type<std:
Severity: MEDIUM
Published: 2021-09-17T00:01:36.462295Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38823

```
Crash type: Use-of-uninitialized-value
Crash state:
std::__1::__hash_iterator<std::__1::__hash_node<std::__1::__hash_value_type<std:
opencensus::tags::TagKeyRegistry::Register
opencensus::tags::TagKey::Register
```
Vulnerability: OSV-2020-1599
Summary: Use-of-uninitialized-value in slide_hash
Severity: MEDIUM
Published: 2020-08-12T00:00:13.402621Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24820

```
Crash type: Use-of-uninitialized-value
Crash state:
slide_hash
fill_window
deflate_fast
```
Vulnerability: OSV-2018-146
Summary: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short
Severity: MEDIUM
Published: 2021-01-13T00:01:03.602875Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11526

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
OT::KernSubTable<OT::KernOTSubTableHeader>::get_size
void hb_sanitize_context_t::set_object<OT::KernSubTable<OT::KernOTSubTableHeader
```
Vulnerability: OSV-2022-109
Summary: UNKNOWN READ in unescape_string
Severity: MEDIUM
Published: 2022-02-01T00:01:34.223287Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44237

```
Crash type: UNKNOWN READ
Crash state:
unescape_string
parse_string
parse_object
```
Vulnerability: OSV-2021-1585
Summary: Heap-buffer-overflow in _parse_to
Severity: MEDIUM
Published: 2021-11-18T00:00:17.931643Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41073

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
_parse_to
parse_to
get_hdr_field
```
Vulnerability: OSV-2020-2161
Summary: Heap-buffer-overflow in msix_vector_masked
Severity: MEDIUM
Published: 2020-11-15T22:34:13.437070Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27418

Crash type: Heap-buffer-overflow READ 1
Crash state:
msix_vector_masked
msix_is_masked
msix_table_mmio_write
Vulnerability: OSV-2017-84
Summary: Heap-buffer-overflow in macho_handle_segment_64_be
Severity: MEDIUM
Published: 2021-01-13T21:57:36.399042Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4382

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
macho_handle_segment_64_be
macho_parse_file_64_be
macho__load
```
Vulnerability: OSV-2020-2024
Summary: Heap-buffer-overflow in pixFindHorizontalRuns
Severity: HIGH
Published: 2020-10-13T00:00:08.718271Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26268

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
pixFindHorizontalRuns
pixFillPolygon
graphics_fuzzer.cc
```
Vulnerability: OSV-2020-784
Summary: Bad-cast to zmq::session_base_t from invalid vptr
Severity: HIGH
Published: 2020-07-14T05:37:33.175193Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24018

```
Crash type: Bad-cast
Crash state:
Bad-cast to zmq::session_base_t from invalid vptr
zmq::stream_engine_base_t::in_event_internal
zmq::stream_engine_base_t::in_event
```
Vulnerability: OSV-2021-784
Summary: Heap-buffer-overflow in processClientServerHello
Severity: MEDIUM
Published: 2021-05-22T00:00:27.949231Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34500

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
processClientServerHello
processTLSBlock
ndpi_search_tls_tcp
```
Vulnerability: OSV-2020-1258
Summary: Heap-use-after-free in WelsDec::MapColToList0
Severity: HIGH
Published: 2020-07-22T21:50:00.916036Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13457

```
Crash type: Heap-use-after-free READ 4
Crash state:
WelsDec::MapColToList0
WelsDec::PredBDirectTemporal
WelsDec::ParseInterBMotionInfoCabac
```
Vulnerability: OSV-2020-1872
Summary: Use-of-uninitialized-value in s_exD_process
Severity: MEDIUM
Published: 2020-09-29T00:00:20.147910Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21643

Crash type: Use-of-uninitialized-value
Crash state:
s_exD_process
sreadbuf
sgets
Vulnerability: OSV-2020-31
Summary: Heap-use-after-free in AES_wrap_key
Severity: HIGH
Published: 2020-06-24T01:51:10.989967Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23014

```
Crash type: Heap-use-after-free READ 8
Crash state:
AES_wrap_key
aes_wrap_cipher
EVP_EncryptUpdate
```
Vulnerability: OSV-2021-1213
Summary: UNKNOWN WRITE in mrb_vm_exec
Severity: HIGH
Published: 2021-09-10T00:00:14.325174Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38251

```
Crash type: UNKNOWN WRITE
Crash state:
mrb_vm_exec
mrb_vm_run
mrb_top_run
```
Vulnerability: OSV-2020-854
Summary: UNKNOWN READ in std::__1::__hash_node_base<std::__1::__hash_node<std::__1::__hash_value_type<std
Severity: MEDIUM
Published: 2020-07-14T22:13:46.858160Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20959

```
Crash type: UNKNOWN READ
Crash state:
std::__1::__hash_node_base<std::__1::__hash_node<std::__1::__hash_value_type<std
std::__1::__hash_table<std::__1::__hash_value_type<std::__1::basic_string<char, 
std::__1::__hash_table<std::__1::__hash_value_type<std::__1::basic_string<char, 
```
Vulnerability: OSV-2020-1171
Summary: Heap-use-after-free in JS_ReadObjectRec
Severity: HIGH
Published: 2020-07-22T21:49:53.004112Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21532

Crash type: Heap-use-after-free READ 4
Crash state:
JS_ReadObjectRec
JS_ReadObject
fuzz_compile.c
Vulnerability: OSV-2020-1521
Summary: Use-of-uninitialized-value in stbi__jpeg_huff_decode
Severity: MEDIUM
Published: 2020-07-28T00:00:36.454613Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22598

```
Crash type: Use-of-uninitialized-value
Crash state:
stbi__jpeg_huff_decode
stbi__jpeg_decode_block_prog_ac
stbi__parse_entropy_coded_data
```
Vulnerability: OSV-2020-911
Summary: Heap-buffer-overflow in arrow::Status arrow::ConcatenateOffsets<int>
Severity: MEDIUM
Published: 2020-07-21T00:00:27.530378Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23916

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
arrow::Status arrow::ConcatenateOffsets<int>
arrow::ConcatenateImpl::Visit
arrow::Status arrow::VisitTypeInline<arrow::ConcatenateImpl>
```
Vulnerability: OSV-2018-111
Summary: Heap-buffer-overflow in format_generic_odp_key
Severity: MEDIUM
Published: 2021-01-13T00:00:49.915963Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10850

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
format_generic_odp_key
check_attr_len
format_odp_key_attr
```
Vulnerability: OSV-2021-442
Summary: Heap-buffer-overflow in fnv_32a_buf
Severity: MEDIUM
Published: 2021-02-24T00:00:23.135123Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31301

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
fnv_32a_buf
font_hash
ass_cache_get
```
Vulnerability: OSV-2021-1706
Summary: Segv on unknown address in gx_adjust_color_Pattern
Published: 2021-12-17T00:00:24.541194Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42453

Crash type: Segv on unknown address
Crash state:
gx_adjust_color_Pattern
gs_setcolor
pdfi_setfillcolor
Vulnerability: OSV-2018-58
Summary: Heap-buffer-overflow in tag_parse
Severity: MEDIUM
Published: 2021-01-13T00:00:29.755710Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10999

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
tag_parse
git_tag__parse_raw
git_object__from_raw
```
Vulnerability: OSV-2020-442
Summary: Heap-buffer-overflow in CRYPTO_strdup
Severity: MEDIUM
Published: 2020-07-01T00:00:09.812508Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17715

```
Crash type: Heap-buffer-overflow READ 14
Crash state:
CRYPTO_strdup
X509V3_add_value
i2v_GENERAL_NAME
```
Vulnerability: OSV-2020-287
Summary: Heap-use-after-free in condition_free_list_type
Severity: HIGH
Published: 2020-06-30T00:00:46.614113Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13882

```
Crash type: Heap-use-after-free READ 8
Crash state:
condition_free_list_type
config_parse_net_condition
next_assignment
```
Vulnerability: OSV-2021-1069
Summary: Segv on unknown address in helper_uc_tracecode
Published: 2021-07-29T00:00:26.940432Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36616

```
Crash type: Segv on unknown address
Crash state:
helper_uc_tracecode
```
Vulnerability: OSV-2022-261
Summary: Segv on unknown address in flb_ra_create
Published: 2022-03-19T00:01:36.425719Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45659

```
Crash type: Segv on unknown address
Crash state:
flb_ra_create
record_ac_fuzzer.c
```
Vulnerability: OSV-2018-384
Summary: Use-of-uninitialized-value in template_affine_N_lerp
Severity: MEDIUM
Published: 2021-01-15T00:01:07.085645Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5616

```
Crash type: Use-of-uninitialized-value
Crash state:
template_affine_N_lerp
paint_affine_lerp_da_sa_0
fz_paint_image_imp
```
Vulnerability: OSV-2021-1086
Summary: Heap-buffer-overflow in dwg_convert_SAB_to_SAT1
Severity: MEDIUM
Published: 2021-08-02T00:00:31.888461Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36728

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
dwg_convert_SAB_to_SAT1
dxf_3dsolid
dwg_dxf_REGION_private
```
Vulnerability: OSV-2020-792
Summary: Use-of-uninitialized-value in ihevc_inter_pred_chroma_copy_ssse3
Severity: MEDIUM
Published: 2020-07-14T05:37:35.331259Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23197

```
Crash type: Use-of-uninitialized-value
Crash state:
ihevc_inter_pred_chroma_copy_ssse3
ihevcd_inter_pred_ctb
ihevcd_process
```
Vulnerability: OSV-2020-638
Summary: Heap-buffer-overflow in OT::UnsizedArrayOf<OT::IntType<unsigned char, 1u> >::copy
Severity: MEDIUM
Published: 2020-07-01T00:00:21.866519Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14637

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
OT::UnsizedArrayOf<OT::IntType<unsigned char, 1u> >::copy
bool OT::OffsetTo<OT::UnsizedArrayOf<OT::IntType<unsigned char, 1u> >, OT::IntTy
OT::NameRecord::copy
```
Vulnerability: OSV-2020-1167
Summary: Heap-buffer-overflow in tiffReadCallback
Severity: MEDIUM
Published: 2020-07-22T21:49:52.626033Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14773

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
tiffReadCallback
OJPEGReadHeaderInfoSecTablesQTable
OJPEGReadHeaderInfoSec
```
Vulnerability: OSV-2020-842
Summary: Heap-buffer-overflow in H5A_read
Severity: HIGH
Published: 2020-07-14T22:13:42.073797Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18943

```
Crash type: Heap-buffer-overflow WRITE 3
Crash state:
H5A_read
H5Aread
Mat_H5ReadVarInfo
```
Vulnerability: OSV-2021-141
Summary: Use-of-uninitialized-value in H5G__traverse_real
Severity: MEDIUM
Published: 2021-01-13T21:56:17.197324Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29546

```
Crash type: Use-of-uninitialized-value
Crash state:
H5G__traverse_real
H5G_traverse
H5G_loc_info
```
Vulnerability: OSV-2021-1205
Summary: Heap-buffer-overflow in backup_lpf
Severity: HIGH
Published: 2021-09-06T00:00:42.136598Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38152

Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
backup_lpf
dav1d_lr_copy_lpf_16bpc
dav1d_filter_sbrow_deblock_rows_16bpc
Vulnerability: OSV-2020-27
Summary: Heap-buffer-overflow in parquet::LevelDecoder::SetData
Severity: MEDIUM
Published: 2020-06-24T01:51:10.819423Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20940

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
parquet::LevelDecoder::SetData
parquet::ColumnReaderImplBase<parquet::PhysicalType<
parquet::internal::TypedRecordReader<parquet::PhysicalType<
```
Vulnerability: OSV-2020-141
Summary: Heap-use-after-free in pixcmapDestroy
Severity: HIGH
Published: 2020-06-24T01:51:15.964708Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22110

```
Crash type: Heap-use-after-free READ 8
Crash state:
pixcmapDestroy
colorquant_fuzzer.cc
pixcmapDestroy
```
Vulnerability: OSV-2021-907
Summary: Heap-buffer-overflow in decode_header_value_literal
Severity: MEDIUM
Published: 2021-07-01T00:00:08.550315Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35675

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
decode_header_value_literal
decode_header
h2o_hpack_parse_request
```
Vulnerability: OSV-2021-1710
Summary: Heap-buffer-overflow in ndlz4_decompress
Severity: HIGH
Published: 2021-12-17T00:01:06.310525Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42472

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
ndlz4_decompress
ndlz_decompress
blosc_d
```
Vulnerability: OSV-2020-1188
Summary: Heap-buffer-overflow in pcpp::IPv6Extension::getExtensionLen
Severity: MEDIUM
Published: 2020-07-22T21:49:54.616174Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22105

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pcpp::IPv6Extension::getExtensionLen
pcpp::IPv6Layer::parseExtensions
pcpp::IPv6Layer::IPv6Layer
```
Vulnerability: OSV-2021-454
Summary: Heap-buffer-overflow in irc_parse_message_tags
Severity: MEDIUM
Published: 2021-02-28T00:00:59.573272Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31443

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
irc_parse_message_tags
irc_server_event_tags
signal_emit_real
```
Vulnerability: OSV-2020-1472
Summary: Heap-buffer-overflow in stbi__YCbCr_to_RGB_simd
Severity: MEDIUM
Published: 2020-07-28T00:00:27.093869Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22605

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
stbi__YCbCr_to_RGB_simd
load_jpeg_image
stbi__jpeg_load
```
Vulnerability: OSV-2021-1340
Summary: Heap-buffer-overflow in mrb_vm_exec
Published: 2021-09-21T00:00:36.045422Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38989

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
mrb_vm_exec
mrb_vm_run
mrb_top_run
```
Vulnerability: OSV-2020-1022
Summary: Heap-buffer-overflow in ptls_set_negotiated_protocol
Severity: MEDIUM
Published: 2020-07-22T21:49:40.455457Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13682

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
ptls_set_negotiated_protocol
client_handle_encrypted_extensions
handle_handshake_record
```
Vulnerability: OSV-2021-1194
Summary: Heap-use-after-free in zend_string_release
Severity: HIGH
Published: 2021-09-03T00:00:12.853762Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38014

```
Crash type: Heap-use-after-free READ 4
Crash state:
zend_string_release
zend_closure_free_storage
zend_objects_store_del
```
Vulnerability: OSV-2018-279
Summary: Use-of-uninitialized-value in fz_drop_hash_table
Severity: MEDIUM
Published: 2021-01-15T00:00:20.648060Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5609

Crash type: Use-of-uninitialized-value
Crash state:
fz_drop_hash_table
fz_fin_cached_color_converter
fz_paint_shade
Vulnerability: OSV-2020-680
Summary: Bad-free in sc_pkcs15_decode_prkdf_entry
Published: 2020-07-01T00:00:24.475752Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18482

```
Crash type: Bad-free
Crash state:
sc_pkcs15_decode_prkdf_entry
fuzz_pkcs15_decode.c
```
Vulnerability: OSV-2020-2065
Summary: Use-of-uninitialized-value in WelsDec::NeedErrorCon
Severity: MEDIUM
Published: 2020-10-14T00:00:29.948003Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26291

```
Crash type: Use-of-uninitialized-value
Crash state:
WelsDec::NeedErrorCon
WelsDec::CheckAndFinishLastPic
WelsDecodeBs
```
Vulnerability: OSV-2021-395
Summary: Heap-buffer-overflow in Crypto::der_decode_integer
Severity: MEDIUM
Published: 2021-02-14T00:01:07.503942Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30907

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Crypto::der_decode_integer
Crypto::der_decode_sequence
Crypto::der_decode_sequence_many<4ul>::operator bool
```
Vulnerability: OSV-2020-1833
Summary: Heap-buffer-overflow in avifROStreamRead
Severity: MEDIUM
Published: 2020-09-25T00:00:04.438974Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25903

Crash type: Heap-buffer-overflow READ 4
Crash state:
avifROStreamRead
avifROStreamReadU32
avifROStreamReadBoxHeader
Vulnerability: OSV-2020-70
Summary: Heap-buffer-overflow in ndpi_handle_ipv6_extension_headers
Severity: MEDIUM
Published: 2020-06-24T01:51:12.729868Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21719

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_handle_ipv6_extension_headers
ndpi_workflow_process_packet
fuzz_ndpi_reader.c
```
Vulnerability: OSV-2020-1999
Summary: Bad-cast to pcpp::IDnsResource from invalid vptr
Severity: HIGH
Published: 2020-10-09T00:00:05.287047Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26196

```
Crash type: Bad-cast
Crash state:
Bad-cast to pcpp::IDnsResource from invalid vptr
pcpp::DnsLayer::parseResources
pcpp::DnsLayer::DnsLayer
```
Vulnerability: OSV-2020-546
Summary: Heap-buffer-overflow in ih264d_decode_slice_thread
Severity: MEDIUM
Published: 2020-07-01T00:00:16.058420Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18960

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
ih264d_decode_slice_thread
ih264d_decode_picture_thread
start_thread
```
Vulnerability: OSV-2020-1130
Summary: Heap-buffer-overflow in xsltFormatNumberConversion
Severity: MEDIUM
Published: 2020-07-22T21:49:49.395683Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17171

Crash type: Heap-buffer-overflow READ 1
Crash state:
xsltFormatNumberConversion
xsltFormatNumberFunction
xmlXPathCompOpEval
Vulnerability: OSV-2020-1075
Summary: Use-of-uninitialized-value in processClientServerHello
Severity: MEDIUM
Published: 2020-07-22T21:49:45.481040Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21349

```
Crash type: Use-of-uninitialized-value
Crash state:
processClientServerHello
processTLSBlock
ndpi_search_tls_tcp
```
Vulnerability: OSV-2018-150
Summary: Global-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short
Published: 2021-01-13T00:01:04.544450Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11010

```
Crash type: Global-buffer-overflow READ 1
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
AAT::ContextualSubtable::driver_context_t::transition
void AAT::StateTableDriver<AAT::ContextualSubtable::EntryData>::drive<AAT::Conte
```
Vulnerability: OSV-2021-1317
Summary: Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha
Severity: MEDIUM
Published: 2021-09-18T00:01:38.031586Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38824

```
Crash type: Use-of-uninitialized-value
Crash state:
std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha
ostream
std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha
```
Vulnerability: OSV-2021-1747
Summary: Heap-buffer-overflow in seturl
Severity: MEDIUM
Published: 2021-12-24T00:00:40.494852Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42808

```
Crash type: Heap-buffer-overflow READ 16
Crash state:
seturl
parseurl
curl_url_set
```
Vulnerability: OSV-2018-19
Summary: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized
Severity: MEDIUM
Published: 2021-01-13T00:00:08.496128Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6796

```
Crash type: Use-of-uninitialized-value
Crash state:
rawspeed::RawImageData::checkMemIsInitialized
rawspeed::RawDecoder::decodeRaw
rawspeed::alignedMalloc
```
Vulnerability: OSV-2020-1976
Summary: Use-of-uninitialized-value in FLAC::Decoder::FuzzerStream::write_callback
Severity: MEDIUM
Published: 2020-10-03T00:00:34.944603Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16503

```
Crash type: Use-of-uninitialized-value
Crash state:
FLAC::Decoder::FuzzerStream::write_callback
write_audio_frame_to_client_
read_frame_
```
Vulnerability: OSV-2021-950
Summary: Dynamic-stack-buffer-overflow in std::__1::__wrap_iter<hsql::Expr**>::__wrap_iter
Published: 2021-07-10T00:01:24.552480Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35944

```
Crash type: Dynamic-stack-buffer-overflow WRITE 8
Crash state:
std::__1::__wrap_iter<hsql::Expr**>::__wrap_iter
std::__1::vector<hsql::Expr*, std::__1::allocator<hsql::Expr*> >::__make_iter
std::__1::vector<hsql::Expr*, std::__1::allocator<hsql::Expr*> >::begin
```
Vulnerability: OSV-2020-614
Summary: Use-of-uninitialized-value in __RefHead_ZIP_INSERT
Severity: MEDIUM
Published: 2020-07-01T00:00:20.478171Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15133

```
Crash type: Use-of-uninitialized-value
Crash state:
__RefHead_ZIP_INSERT
__RefHead_ZIP_INSERT
RefTree_add
```
Vulnerability: OSV-2017-113
Summary: Use-of-uninitialized-value in CommandData::IsProcessFile
Severity: MEDIUM
Published: 2021-01-13T21:57:48.978734Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4411

```
Crash type: Use-of-uninitialized-value
Crash state:
CommandData::IsProcessFile
CmdExtract::ExtractCurrentFile
CmdExtract::ExtractArchive
```
Vulnerability: OSV-2021-1803
Summary: UNKNOWN READ in chunk_obj_alloc
Published: 2022-01-17T00:01:26.621940Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43680

Crash type: UNKNOWN READ
Crash state:
chunk_obj_alloc
chunk_alloc_bytes
cmap_endfbrange_func
Vulnerability: OSV-2020-244
Summary: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short
Severity: MEDIUM
Published: 2020-06-26T00:00:09.734552Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20036

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
OT::IntType<unsigned short, 2u>::operator unsigned int
OT::IndexArray::add_indexes_to
```
Vulnerability: OSV-2021-614
Summary: Heap-buffer-overflow in ossl_aria_set_encrypt_key
Severity: MEDIUM
Published: 2021-04-09T00:00:06.878364Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33022

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ossl_aria_set_encrypt_key
cipher_hw_aria_initkey
cipher_generic_init_internal
```
Vulnerability: OSV-2022-308
Summary: Null-dereference READ in ubsan_GetStackTrace
Published: 2022-04-06T00:00:09.670188Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46341

```
Crash type: Null-dereference READ
Crash state:
ubsan_GetStackTrace
```
Vulnerability: OSV-2018-347
Summary: Heap-use-after-free in fz_drop_key_storable
Published: 2021-01-15T00:00:48.480542Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5521

Crash type: Heap-use-after-free READ 4
Crash state:
fz_drop_key_storable
fz_drop_default_colorspaces
fz_draw_drop_device
Vulnerability: OSV-2020-1777
Summary: Heap-buffer-overflow in exif_process_IFD_in_MAKERNOTE
Severity: MEDIUM
Published: 2020-09-16T00:00:31.920721Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19044

```
Crash type: Heap-buffer-overflow READ 9
Crash state:
exif_process_IFD_in_MAKERNOTE
exif_process_IFD_TAG
exif_process_IFD_in_TIFF
```
Vulnerability: OSV-2021-1415
Summary: Heap-buffer-overflow in Imf_3_1::memstream_read
Severity: MEDIUM
Published: 2021-10-07T00:00:14.846615Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39616

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
Imf_3_1::memstream_read
dispatch_read
exr_read_scanline_chunk_info
```
Vulnerability: OSV-2020-1327
Summary: UNKNOWN READ in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>
Severity: MEDIUM
Published: 2020-07-22T21:50:06.904891Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20135

```
Crash type: UNKNOWN READ
Crash state:
arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>
arrow::Status arrow::internal::ValidateArrayDataVisitor::ValidateListArray<arrow
arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>
```
Vulnerability: OSV-2018-202
Summary: Heap-buffer-overflow in parse_mode
Severity: MEDIUM
Published: 2021-01-13T00:01:22.703610Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11167

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
parse_mode
git_tree__parse_raw
git_object__from_raw
```
Vulnerability: OSV-2021-1045
Summary: Heap-buffer-overflow in mrb_vm_exec
Published: 2021-07-24T00:00:15.642447Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36464

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
mrb_vm_exec
mrb_vm_run
mrb_top_run
```
Vulnerability: OSV-2020-751
Summary: Heap-buffer-overflow in readcfgfile
Severity: HIGH
Published: 2020-07-04T00:00:14.603582Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23653

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
readcfgfile
fuzz_cfg_parser.c
```
Vulnerability: OSV-2020-881
Summary: Heap-buffer-overflow in read_uleb128
Severity: MEDIUM
Published: 2020-07-14T22:13:57.548799Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18549

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
read_uleb128
walk_exports
get_symbols
```
Vulnerability: OSV-2018-62
Summary: Heap-buffer-overflow in parse_odp_key_mask_attr
Severity: MEDIUM
Published: 2021-01-13T00:00:31.395003Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11170

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
parse_odp_key_mask_attr
parse_odp_action
odp_actions_from_string
```
Vulnerability: OSV-2020-182
Summary: Heap-buffer-overflow in hb_array_t<OT::IntType<unsigned char, 1u> const> hb_array_t<OT::IntType<unsigned
Severity: HIGH
Published: 2020-06-24T01:51:17.758402Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20249

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
hb_array_t<OT::IntType<unsigned char, 1u> const> hb_array_t<OT::IntType<unsigned
OT::UnsizedArrayOf<OT::IntType<unsigned char, 1u> >::copy
OT::SBIXGlyph::copy
```
Vulnerability: OSV-2020-497
Summary: Heap-buffer-overflow in str_table_entry
Severity: MEDIUM
Published: 2020-07-01T00:00:13.107969Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13956

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
str_table_entry
parse_elf_header_64_be
elf__load
```
Vulnerability: OSV-2020-1848
Summary: Heap-buffer-overflow in sc_oberthur_parse_publicinfo
Severity: MEDIUM
Published: 2020-09-26T00:00:10.945991Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25943

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
sc_oberthur_parse_publicinfo
sc_pkcs15emu_oberthur_init
sc_pkcs15emu_oberthur_init_ex
```
Vulnerability: OSV-2022-36
Summary: Heap-buffer-overflow in void absl::BytesToHexStringInternal<std::__1::basic_string<char, std::__1::char_
Severity: MEDIUM
Published: 2022-01-13T00:00:36.808390Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43553

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
void absl::BytesToHexStringInternal<std::__1::basic_string<char, std::__1::char_
absl::BytesToHexString
```
Vulnerability: OSV-2021-1229
Summary: Heap-buffer-overflow in flatbuffers::JsonPrinter::GenFieldOffset
Severity: MEDIUM
Published: 2021-09-12T00:00:09.534319Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38371

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
flatbuffers::JsonPrinter::GenFieldOffset
flatbuffers::JsonPrinter::GenStruct
flatbuffers::GenerateText
```
Vulnerability: OSV-2021-1679
Summary: Heap-buffer-overflow in ap_is_chunked
Severity: MEDIUM
Published: 2021-12-13T00:01:43.762348Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42226

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ap_is_chunked
fuzz_utils.c
```
Vulnerability: OSV-2020-1235
Summary: Heap-buffer-overflow in mbc_case_fold
Severity: MEDIUM
Published: 2020-07-22T21:49:59.040421Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21977

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
mbc_case_fold
string_cmp_ic
match_at
```
Vulnerability: OSV-2018-310
Summary: Use-of-uninitialized-value in jbig2_arith_decode
Severity: MEDIUM
Published: 2021-01-15T00:00:34.416235Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5636

Crash type: Use-of-uninitialized-value
Crash state:
jbig2_arith_decode
jbig2_decode_generic_template0_unopt
jbig2_decode_generic_region
Vulnerability: OSV-2021-213
Summary: Heap-use-after-free in ZSTD_freeDDict
Severity: HIGH
Published: 2021-01-20T00:01:17.956363Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29705

```
Crash type: Heap-use-after-free READ {*}
Crash state:
ZSTD_freeDDict
blosc2_free_ctx
blosc2_schunk_free
```
Vulnerability: OSV-2021-1157
Summary: Heap-use-after-free in TranslateRules
Severity: HIGH
Published: 2021-08-21T00:01:35.555020Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37410

```
Crash type: Heap-use-after-free READ 1
Crash state:
TranslateRules
TranslateWord3
TranslateWord
```
Vulnerability: OSV-2021-1507
Summary: Heap-buffer-overflow in handle_gets
Severity: HIGH
Published: 2021-10-30T00:00:17.677101Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40452

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
handle_gets
uudecodeFile
cli_uuencode
```
Vulnerability: OSV-2020-213
Summary: Heap-buffer-overflow in Op_YCbCr422_to_RGB_16bit::convert_colorspace
Severity: MEDIUM
Published: 2020-06-24T01:51:19.218628Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21114

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
Op_YCbCr422_to_RGB_16bit::convert_colorspace
heif::ColorConversionPipeline::convert_image
heif::convert_colorspace
```
Vulnerability: OSV-2017-144
Summary: Global-buffer-overflow in csnStreamDissector
Published: 2021-01-15T00:01:17.650107Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1436

```
Crash type: Global-buffer-overflow READ 2
Crash state:
csnStreamDissector
csnStreamDissector
csnStreamDissector
```
Vulnerability: OSV-2020-643
Summary: UNKNOWN READ in ot::Ip6::UdpSocket::GetNext
Severity: MEDIUM
Published: 2020-07-01T00:00:22.120107Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13405

```
Crash type: UNKNOWN READ
Crash state:
ot::Ip6::UdpSocket::GetNext
ot::Ip6::Udp::AddSocket
ot::Ip6::UdpSocket::Open
```
Vulnerability: OSV-2018-255
Summary: Heap-use-after-free in add_range
Published: 2021-01-15T00:00:09.207387Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5492

Crash type: Heap-use-after-free READ 4
Crash state:
add_range
pdf_map_range_to_range
pdf_parse_bf_range
Vulnerability: OSV-2021-1442
Summary: Heap-use-after-free in find_es_header
Severity: HIGH
Published: 2021-10-12T00:01:42.721228Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39842

```
Crash type: Heap-use-after-free READ 4
Crash state:
find_es_header
analyze_chunk
probe_stream
```
Vulnerability: OSV-2020-1720
Summary: Heap-buffer-overflow in hextoint
Severity: MEDIUM
Published: 2020-09-08T00:01:07.773084Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25473

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
hextoint
get_name_from_EF_DatiPersonali
itacns_add_data_files
```
Vulnerability: OSV-2020-585
Summary: Heap-buffer-overflow in ihevcd_get_mv_ctb
Severity: HIGH
Published: 2020-07-01T00:00:18.469990Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17286

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
ihevcd_get_mv_ctb
ihevcd_process
ihevcd_decode
```
Vulnerability: OSV-2020-1409
Summary: UNKNOWN READ in cpu_arm_exec_armeb
Severity: MEDIUM
Published: 2020-07-28T00:00:12.058612Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23109

```
Crash type: UNKNOWN READ
Crash state:
cpu_arm_exec_armeb
tcg_cpu_exec_armeb
tcg_exec_all_armeb
```
Vulnerability: OSV-2022-133
Summary: Heap-buffer-overflow in coap_split_uri_sub
Severity: MEDIUM
Published: 2022-02-10T00:00:28.319288Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44503

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
coap_split_uri_sub
coap_get_uri_path
```
Vulnerability: OSV-2021-585
Summary: Heap-buffer-overflow in ebitmap_match_any
Severity: MEDIUM
Published: 2021-03-31T00:00:26.273923Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32675

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
ebitmap_match_any
avtab_map
cil_check_neverallow
```
Vulnerability: OSV-2020-993
Summary: Stack-buffer-overflow in write_png_comment
Severity: HIGH
Published: 2020-07-22T21:49:38.743050Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16154

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
write_png_comment
vips_slist_map2
vips_image_map
```
Vulnerability: OSV-2022-61
Summary: Heap-buffer-overflow in cli_loadcrt
Severity: MEDIUM
Published: 2022-01-21T00:00:05.087581Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43828

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
cli_loadcrt
cli_load
cl_load
```
Vulnerability: OSV-2017-10
Summary: Heap-use-after-free in UA_Subscription_answerPublishRequestsNoSubscription
Severity: HIGH
Published: 2021-01-13T00:00:22.415687Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4097

```
Crash type: Heap-use-after-free READ 8
Crash state:
UA_Subscription_answerPublishRequestsNoSubscription
UA_Server_run_shutdown
_start
```
Vulnerability: OSV-2021-1141
Summary: Heap-use-after-free in TranslateLetter
Severity: HIGH
Published: 2021-08-17T00:01:54.252372Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37238

```
Crash type: Heap-use-after-free READ 4
Crash state:
TranslateLetter
TranslateWord3
TranslateWord
```
Vulnerability: OSV-2021-205
Summary: Heap-use-after-free in lua_closeslot
Severity: HIGH
Published: 2021-01-16T00:01:03.500860Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29610

```
Crash type: Heap-use-after-free WRITE 1
Crash state:
lua_closeslot
luaL_traceback
msghandler
```
Vulnerability: OSV-2021-710
Summary: Heap-use-after-free in iov_from_buf_full
Severity: HIGH
Published: 2021-05-01T00:00:22.994253Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33785

Crash type: Heap-use-after-free WRITE 2
Crash state:
iov_from_buf_full
iov_from_buf
virtio_net_receive_rcu
Vulnerability: OSV-2021-1454
Summary: Uncaught exception in org.jsoup.parser.HtmlTreeBuilder.process
Severity: LOW
Published: 2021-10-15T00:01:43.342560Z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39939

```
Crash type: Uncaught exception
Crash state:
org.jsoup.parser.HtmlTreeBuilder.process
org.jsoup.parser.HtmlTreeBuilderState$9.process
org.jsoup.parser.HtmlTreeBuilder.process
```