Most recent entries from osv_ossfuzz

OSV-2020-1 — Use-of-uninitialized-value in numaCrossingsByThreshold

Wed, 24 Jun 2020 01:51:08 +0000

Affected: OSS-Fuzz: leptonica

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22764

``` Crash type: Use-of-uninitialized-value Crash state: numaCrossingsByThreshold numaSelectCrossingThreshold pixExtractBarcodeCrossings ```

OSV-2020-3 — UNKNOWN WRITE in std::__1::basic_string, std::1::allocator
Wed, 24 Jun 2020 01:51:08 +0000

Affected: OSS-Fuzz: pcapplusplus

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22962

``` Crash type: UNKNOWN WRITE Crash state: std::1::basic_string<char, std::__1::char_traits<char>, std::1::allocator<ch std::1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch pcpp::IDnsResource::IDnsResource ```

OSV-2020-4 — Use-of-uninitialized-value in ndpi_check_dga_name

Wed, 24 Jun 2020 01:51:09 +0000

Affected: OSS-Fuzz: ndpi

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23524

``` Crash type: Use-of-uninitialized-value Crash state: ndpi_check_dga_name ndpi_search_dns check_ndpi_udp_flow_func ```

OSV-2020-5 — Heap-buffer-overflow in virtual thunk to parquet::ByteStreamSplitDecoder
Wed, 24 Jun 2020 01:51:09 +0000

Affected: OSS-Fuzz: arrow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21453

``` Crash type: Heap-buffer-overflow READ 1 Crash state: virtual thunk to parquet::ByteStreamSplitDecoder<parquet::PhysicalType< parquet::TypedDecoder<parquet::PhysicalType< parquet::internal::TypedRecordReader<parquet::PhysicalType< ```

OSV-2020-7 — Segv on unknown address in pvector_free_elem

Wed, 24 Jun 2020 01:51:09 +0000

Affected: OSS-Fuzz: radare2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22734

``` Crash type: Segv on unknown address Crash state: pvector_free_elem vector_free_elems r_vector_clear ```

OSV-2020-8 — Heap-buffer-overflow in findNextBorderPixel

Wed, 24 Jun 2020 01:51:09 +0000

Affected: OSS-Fuzz: leptonica

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23433

``` Crash type: Heap-buffer-overflow READ 4 Crash state: findNextBorderPixel pixGetHoleBorder pixGetCCBorders ```

OSV-2020-10 — Heap-use-after-free in ndpi_workflow_process_packet

Wed, 24 Jun 2020 01:51:09 +0000

Affected: OSS-Fuzz: ndpi

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20164

``` Crash type: Heap-use-after-free READ 2 Crash state: ndpi_workflow_process_packet fuzz_ndpi_reader.c node_release ```

OSV-2020-11 — Heap-buffer-overflow in jbig2_image_get_pixel_fast

Wed, 24 Jun 2020 01:51:10 +0000

Affected: OSS-Fuzz: jbig2dec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20440

``` Crash type: Heap-buffer-overflow READ 1 Crash state: jbig2_image_get_pixel_fast jbig2_decode_generic_template0_TPGDON jbig2_immediate_generic_region ```

OSV-2020-12 — Use-of-uninitialized-value in ndpi_parse_packet_line_info

Wed, 24 Jun 2020 01:51:10 +0000

Affected: OSS-Fuzz: ndpi

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23058

``` Crash type: Use-of-uninitialized-value Crash state: ndpi_parse_packet_line_info ndpi_check_http_tcp ndpi_search_http_tcp ```

OSV-2020-14 — Stack-buffer-overflow in fmt_setup

Wed, 24 Jun 2020 01:51:10 +0000

Affected: OSS-Fuzz: mruby

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22507

``` Crash type: Stack-buffer-overflow WRITE 1 Crash state: fmt_setup mrb_str_format mrb_f_sprintf ```