Summary: Security exception in java.base/java.nio.Bits.reserveMemory

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51044

```
Crash type: Security exception
Crash state:
java.base/java.nio.Bits.reserveMemory
java.base/java.nio.DirectByteBuffer.<init>
java.base/java.nio.ByteBuffer.allocateDirect
```


Summary: Heap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51022

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor
perfetto::trace_processor::TrackEventModule::ParsePacket
perfetto::trace_processor::ProtoTraceParser::ParseTracePacketImpl
```


Summary: UNKNOWN WRITE in Ins_ISECT

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51045

```
Crash type: UNKNOWN WRITE
Crash state:
Ins_ISECT
RunIns
Instance_Reset
```


Summary: Heap-double-free in fuzz_textfile.c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51072

```
Crash type: Heap-double-free
Crash state:
fuzz_textfile.c
fuzz_textfile.c
```


Summary: UNKNOWN READ in write_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51081

```
Crash type: UNKNOWN READ
Crash state:
write_key
textfile_put
fuzz_textfile.c
```


Summary: Heap-use-after-free in std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<geos::geom::Coor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51083

```
Crash type: Heap-use-after-free READ 8
Crash state:
std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<geos::geom::Coor
geos::geomgraph::NodeMap::addNode
geos::operation::overlay::OverlayOp::copyPoints
```


Summary: Heap-use-after-free in user_wrapper_opendir

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51047

```
Crash type: Heap-use-after-free READ 10
Crash state:
user_wrapper_opendir
_php_stream_opendir
_php_do_opendir
```


Summary: Heap-buffer-overflow in SuggestMgr::badcharkey_utf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51102

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
SuggestMgr::badcharkey_utf
SuggestMgr::suggest
HunspellImpl::suggest_internal
```


Summary: Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51101

```
Crash type: Security exception
Crash state:
com.ctc.wstx.dtd.FullDTDReader.readContentSpec
java.base/java.lang.StringUTF16.newString
java.base/java.lang.String.substring
```


Summary: Stack-buffer-underflow in gs_type2_interpret

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51089

```
Crash type: Stack-buffer-underflow READ 4
Crash state:
gs_type2_interpret
copied_type1_glyph_outline
gs_default_glyph_info
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51090

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
get_utf_8_string
dissect_form_urlencoded
call_dissector_work
```

Summary: Heap-buffer-overflow in get_utf_8_string


Summary: Heap-buffer-overflow in AffixMgr::redundant_condition

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51124

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
AffixMgr::redundant_condition
AffixMgr::parse_affix
AffixMgr::parse_file
```


Summary: Heap-use-after-free in zend_std_get_property_ptr_ptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43988

```
Crash type: Heap-use-after-free READ 8
Crash state:
zend_std_get_property_ptr_ptr
zend_fetch_property_address
ZEND_FETCH_OBJ_W_SPEC_CV_CONST_HANDLER
```


Summary: Security exception in java.base/java.util.Collections$UnmodifiableCollection.forEach

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51154

```
Crash type: Security exception
Crash state:
java.base/java.util.Collections$UnmodifiableCollection.forEach
org.apache.commons.configuration2.tree.NodeTreeWalker.dfs
org.apache.commons.configuration2.tree.NodeTreeWalker.lambda$dfs$0
```


Summary: Stack-buffer-overflow in PfxEntry::test_condition

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51134

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
PfxEntry::test_condition
PfxEntry::checkword
AffixMgr::prefix_check
```


Summary: UNKNOWN WRITE in from8to16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51128

```
Crash type: UNKNOWN WRITE
Crash state:
from8to16
_cmsHandleExtraChannels
CachedXFORM
```


Summary: Heap-double-free in flb_sds_destroy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51132

```
Crash type: Heap-double-free
Crash state:
flb_sds_destroy
flb_parser_conf_file
config_random_fuzzer.c
```


Summary: Global-buffer-overflow in _getBaseCellNeighbor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51208

```
Crash type: Global-buffer-overflow READ 4
Crash state:
_getBaseCellNeighbor
localIjkToCell
localIjToCell
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51182

```
Crash type: Heap-use-after-free READ 8
Crash state:
AcquireCodePageWithCapacity
CompileElseBlock
Compile_If
```

Summary: Heap-use-after-free in AcquireCodePageWithCapacity


Summary: Use-of-uninitialized-value in SfxEntry::test_condition

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51218

```
Crash type: Use-of-uninitialized-value
Crash state:
SfxEntry::test_condition
SfxEntry::add
AffixMgr::expand_rootword
```


Summary: Segv on unknown address in HashMgr::add_word

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51187

```
Crash type: Segv on unknown address
Crash state:
HashMgr::add_word
HashMgr::load_tables
HashMgr::HashMgr
```


Summary: Heap-buffer-overflow in SfxEntry::add

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51242

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
SfxEntry::add
AffixMgr::expand_rootword
SuggestMgr::ngsuggest
```


Summary: Stack-buffer-overflow in gs_type2_interpret

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51275

```
Crash type: Stack-buffer-overflow READ 4
Crash state:
gs_type2_interpret
copied_type1_glyph_outline
gs_default_glyph_info
```


Summary: Heap-use-after-free in AffixMgr::prefix_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51277

```
Crash type: Heap-use-after-free READ 2
Crash state:
AffixMgr::prefix_check
AffixMgr::affix_check
HunspellImpl::checkword
```


Summary: Stack-buffer-overflow in flb_env_var_translate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51278

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
flb_env_var_translate
flb_parser_conf_file
config_random_fuzzer.c
```


Summary: Segv on unknown address in ddsi_config_init

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51292

```
Crash type: Segv on unknown address
Crash state:
ddsi_config_init
fuzz_config_init.c
```


Summary: UNKNOWN READ in AffixMgr::suffix_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51294

```
Crash type: UNKNOWN READ
Crash state:
AffixMgr::suffix_check
PfxEntry::checkword
AffixMgr::prefix_check
```


Summary: Segv on unknown address in Sass::unifyComplex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51316

```
Crash type: Segv on unknown address
Crash state:
Sass::unifyComplex
Sass::Extender::extendCompound
Sass::Extender::extendComplex
```


Summary: Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51390

```
Crash type: Heap-buffer-overflow READ 7
Crash state:
std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
PfxEntry::add
AffixMgr::expand_rootword
```


Summary: Heap-double-free in HashMgr::~HashMgr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51432

```
Crash type: Heap-double-free
Crash state:
HashMgr::~HashMgr
HunspellImpl::~HunspellImpl
Hunspell::~Hunspell
```


Summary: Invalid-free in function signature specialization <Arg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51434

```
Crash type: Invalid-free
Crash state:
function signature specialization <Arg
NIOHTTP1.HTTPDecoder.didFinishHead
protocol witness for NIOHTTP1.
```


Summary: Heap-buffer-overflow in AffixMgr::compound_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51437

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
AffixMgr::compound_check
SuggestMgr::checkword
SuggestMgr::testsug
```


Summary: Heap-use-after-free in std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<geos::geom::Coor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51406

```
Crash type: Heap-use-after-free READ 8
Crash state:
std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<geos::geom::Coor
geos::geomgraph::NodeMap::addNode
geos::geomgraph::GeometryGraph::addSelfIntersectionNode
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51480

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
element_end
emit_end_element
g_markup_parse_context_parse
```

Summary: Heap-buffer-overflow in element_end


Summary: Heap-buffer-overflow in pixCountArbInRect

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44008

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pixCountArbInRect
pix3_fuzzer.cc
```


Summary: Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51552

```
Crash type: Security exception
Crash state:
com.ctc.wstx.dtd.FullDTDReader.readContentSpec
java.base/java.io.StringReader.read
com.ctc.wstx.io.MergedReader.read
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51565

```
Crash type: Container-overflow WRITE 4
Crash state:
wabt::interp::BinaryReaderInterp::BeginFunctionBody
wabt::ReadBinary
wabt::interp::ReadBinaryInterp
```

Summary: Container-overflow in wabt::interp::BinaryReaderInterp::BeginFunctionBody


Summary: Heap-buffer-overflow in file_magwarn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51603

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
file_magwarn
parse_strength
load_1
```


Summary: Heap-buffer-overflow in file_zmagic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51608

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
file_zmagic
file_buffer
magic_buffer
```


Summary: Heap-buffer-overflow in Ins_PUSHW

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51618

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Ins_PUSHW
RunIns
Instance_Reset
```


Summary: Heap-buffer-overflow in strtol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44089

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
strtol
parse_primitive
plist_from_json
```


Summary: Index-out-of-bounds in LibRaw::parse_tiff_ifd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51657

```
Crash type: Index-out-of-bounds
Crash state:
LibRaw::parse_tiff_ifd
LibRaw::parse_tiff
LibRaw::identify
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51687

```
Crash type: Use-after-poison READ 1
Crash state:
rx_ip
mip_rx
fuzz.c
```

Summary: Use-after-poison in rx_ip


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44087

Crash type: Heap-buffer-overflow WRITE 1
Crash state:
cli_strlcat
yara_yyparse
yr_lex_parse_rules_file

Summary: Heap-buffer-overflow in cli_strlcat


Summary: UNKNOWN WRITE in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51695

```
Crash type: UNKNOWN WRITE
Crash state:
perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor
perfetto::trace_processor::TrackEventModule::ParsePacket
perfetto::trace_processor::ProtoTraceParser::ParseTracePacketImpl
```


Summary: Heap-buffer-overflow in Exiv2::MemIo::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51707

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
Exiv2::MemIo::read
Exiv2::BasicIo::readOrThrow
Exiv2::QuickTimeVideo::userDataDecoder
```


Summary: Heap-use-after-free in s_file_write_flush

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51745

```
Crash type: Heap-use-after-free READ 8
Crash state:
s_file_write_flush
sclose
stream_finalize
```


Summary: UNKNOWN WRITE in regcomp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51778

```
Crash type: UNKNOWN WRITE
Crash state:
regcomp
file_regcomp
load_1
```


Summary: Dynamic-stack-buffer-overflow in rx_icmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51757

```
Crash type: Dynamic-stack-buffer-overflow WRITE {*}
Crash state:
rx_icmp
rx_ip
mip_rx
```


Summary: Use-of-uninitialized-value in FileWrite

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51808

```
Crash type: Use-of-uninitialized-value
Crash state:
FileWrite
_cmsWriteUInt16Number
Type_MLU_Write
```


Summary: Heap-buffer-overflow in sequence_compression_api.c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44122

```
Crash type: Heap-buffer-overflow WRITE 16
Crash state:
sequence_compression_api.c
```


Summary: Heap-double-free in sc_pkcs15_encode_df

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51837

```
Crash type: Heap-double-free
Crash state:
sc_pkcs15_encode_df
sc_pkcs15init_update_any_df
sc_pkcs15init_add_object
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51840

```
Crash type: Security exception
Crash state:
com.ctc.wstx.dtd.FullDTDReader.readContentSpec
java.base/sun.nio.cs.CESU_8.updatePositions
java.base/sun.nio.cs.CESU_8$Encoder.encodeArrayLoop
```


Summary: Security exception in org.codehaus.janino.Parser.parseConditionalExpression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51821

```
Crash type: Security exception
Crash state:
org.codehaus.janino.Parser.parseConditionalExpression
java.base/sun.nio.cs.CESU_8$Encoder.encodeLoop
java.base/java.nio.charset.CharsetEncoder.encode
```


Summary: Use-of-uninitialized-value in cmsMLUgetASCII

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51841

```
Crash type: Use-of-uninitialized-value
Crash state:
cmsMLUgetASCII
Type_Text_Description_Write
SaveTags
```


Summary: Heap-buffer-overflow in SkMatrix::Persp_pts

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51873

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
SkMatrix::Persp_pts
SkPath::addPath
FuzzNicePath
```


Summary: Heap-buffer-overflow in SkPath::Iter::next

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51875

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
SkPath::Iter::next
SkRegion::setPath
SkRasterClip::SkRasterClip
```


Summary: Heap-buffer-overflow in gs_interpret

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44123

```
Crash type: Heap-buffer-overflow WRITE 16
Crash state:
gs_interpret
gs_main_run_string_with_length
gs_main_run_string
```


Summary: Heap-buffer-overflow in SkPath::reverseAddPath

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51868

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
SkPath::reverseAddPath
FuzzNicePath
FuzzRegionSetPath
```


Summary: Use-of-uninitialized-value in SkFindQuadMaxCurvature

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51876

```
Crash type: Use-of-uninitialized-value
Crash state:
SkFindQuadMaxCurvature
AAHairlineOp::onPrepareDraws
GrMeshDrawOp::onPrepare
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51925

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
SkPath::Iter::next
SkParsePath::ToSVGString
SkSVGDevice::drawPath
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51926

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
SkPath::Iter::next
SkPath1DPathEffectImpl::next
Sk1DPathEffect::onFilterPath
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51915

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
SkPath::Iter::next
SkStroke::strokePath
SkStrokeRec::applyToPath
```


Summary: Heap-buffer-overflow in SkPathPriv::IsRectContour

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51909

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
SkPathPriv::IsRectContour
SkPath::isRect
SkCanvas::clipPath
```


Summary: Heap-buffer-overflow in SkEdgeClipper::ClipPath

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51917

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
SkEdgeClipper::ClipPath
SkPathPriv::PerspectiveClip
SkPath::transform
```


Summary: Heap-buffer-overflow in onig_vsnprintf_with_pattern

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51934

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
onig_vsnprintf_with_pattern
onig_syntax_warn
fetch_token
```


Summary: Use-of-uninitialized-value in SkPathStroker::CheckCubicLinear

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51942

```
Crash type: Use-of-uninitialized-value
Crash state:
SkPathStroker::CheckCubicLinear
SkPathStroker::cubicTo
SkStroke::strokePath
```


Summary: UNKNOWN WRITE in helper_shl_cc_arm

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44136

```
Crash type: UNKNOWN WRITE
Crash state:
helper_shl_cc_arm
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51910

```
Crash type: Stack-use-after-return READ 1
Crash state:
check_buffer
r_bin_get_binplugin_by_buffer
r_bin_file_new_from_buffer
```

Summary: Stack-use-after-return in check_buffer


Summary: Heap-buffer-overflow in onig_node_str_cat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51920

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
onig_node_str_cat
parse_exp
parse_branch
```


Summary: Use-of-uninitialized-value in GrTriangulator::sanitizeContours

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51921

```
Crash type: Use-of-uninitialized-value
Crash state:
GrTriangulator::sanitizeContours
GrTriangulator::contoursToPolys
GrTriangulator::pathToPolys
```


Summary: Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51972

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
Exiv2::QuickTimeVideo::userDataDecoder
Exiv2::QuickTimeVideo::tagDecoder
```


Summary: Heap-use-after-free in xmlParserPrintFileContextInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63157

```
Crash type: Heap-use-after-free READ 1
Crash state:
xmlParserPrintFileContextInternal
xmlReportError
__xmlRaiseError
```


Summary: Security exception in java.base/java.lang.String.repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63154

```
Crash type: Security exception
Crash state:
java.base/java.lang.String.repeat
org.springframework.expression.spel.ast.OpMultiply.getValueInternal
org.springframework.expression.spel.ast.MethodReference.getArguments
```


Summary: Heap-buffer-overflow in iasecc_parse_get_tlv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63163

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
iasecc_parse_get_tlv
iasecc_parse_docp
iasecc_sdo_parse_data
```


Summary: Heap-buffer-overflow in ndpi_snprintf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63179

```
Crash type: Heap-buffer-overflow WRITE 11
Crash state:
ndpi_snprintf
ndpi_serialize_string_int32
fuzz_serialization.cpp
```


Summary: Heap-use-after-free in gx_image_enum_begin

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63185

```
Crash type: Heap-use-after-free WRITE 8
Crash state:
gx_image_enum_begin
gx_begin_image1
gx_default_begin_typed_image
```


Summary: Security exception in net.jsign.bouncycastle.asn1.ASN1StreamParser.readVector

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63217

```
Crash type: Security exception
Crash state:
net.jsign.bouncycastle.asn1.ASN1StreamParser.readVector
net.jsign.bouncycastle.asn1.ASN1StreamParser.loadTaggedIL
net.jsign.bouncycastle.asn1.BERTaggedObjectParser.getLoadedObject
```


Summary: Heap-use-after-free in pci_enum

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56243

```
Crash type: Heap-use-after-free READ 4
Crash state:
pci_enum
g_ptr_array_foreach
generic_fuzz
```


Summary: Global-buffer-overflow in iusace_quantize_lines

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63230

```
Crash type: Global-buffer-overflow READ 4
Crash state:
iusace_quantize_lines
iusace_quantize_spec
iusace_fd_encode
```


Summary: Security exception in org.jsoup.parser.HtmlTreeBuilder.process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63242

```
Crash type: Security exception
Crash state:
org.jsoup.parser.HtmlTreeBuilder.process
org.jsoup.parser.HtmlTreeBuilderState$14.handleMissingTr
org.jsoup.parser.HtmlTreeBuilderState$14.process
```


Summary: Use-of-uninitialized-value in Render_Single_Pass

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63241

```
Crash type: Use-of-uninitialized-value
Crash state:
Render_Single_Pass
Render_Glyph
ft_black_render
```


Summary: Segv on unknown address in ndpi_free_flow_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56272

```
Crash type: Segv on unknown address
Crash state:
ndpi_free_flow_data
ndpi_free_flow
fuzz_process_packet.c
```


Summary: Security exception in org.apache.poi.util.IOUtils.safelyAllocate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63288

```
Crash type: Security exception
Crash state:
org.apache.poi.util.IOUtils.safelyAllocate
org.apache.poi.hssf.record.RecordInputStream.readRemainder
org.apache.poi.hssf.record.UnknownRecord.<init>
```


Summary: Heap-buffer-overflow in Gfx::InputStreamer::read_u32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63357

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Gfx::InputStreamer::read_u32
Gfx::set_dib_bitmasks
Gfx::decode_bmp_dib
```


Summary: Heap-buffer-overflow in H5FS__sect_link

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56234

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
H5FS__sect_link
H5FS_sect_add
H5MF__add_sect
```


Summary: Heap-buffer-overflow in decode_preR13_entities

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63463

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
decode_preR13_entities
decode_preR13
dwg_decode
```


Summary: Heap-buffer-overflow in H5D__scatter_mem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63495

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
H5D__scatter_mem
H5D__scatgath_read
H5D__contig_read
```


Summary: Heap-buffer-overflow in dwg_json_VPORT_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63483

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
dwg_json_VPORT_private
json_objects_write
dwg_write_json
```


Summary: UNKNOWN WRITE in sudo_lbuf_append_quoted_v1

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56278

```
Crash type: UNKNOWN WRITE
Crash state:
sudo_lbuf_append_quoted_v1
sudoers_format_member_int
sudoers_format_member_int
```


Summary: Heap-buffer-overflow in H5MM_xstrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63566

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
H5MM_xstrdup
H5G__ent_to_link
H5G__node_iterate
```


Summary: Heap-double-free in dwg_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63537

```
Crash type: Heap-double-free
Crash state:
dwg_free_object
dwg_free
llvmfuzz.c
```


Summary: Heap-buffer-overflow in iasecc_parse_size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63587

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
iasecc_parse_size
iasecc_parse_get_tlv
iasecc_parse_docp
```


Summary: Heap-use-after-free in igraph_pajek_yyparse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63590

```
Crash type: Heap-use-after-free READ 3
Crash state:
igraph_pajek_yyparse
igraph_read_graph_pajek
read_pajek.cpp
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56308

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
DecodeBasicOcspResponse
OcspResponseDecode
ocsp.c
```

Summary: Heap-buffer-overflow in DecodeBasicOcspResponse


Summary: Segv on unknown address in igraph_strvector_set_len

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63599

```
Crash type: Segv on unknown address
Crash state:
igraph_strvector_set_len
igraph_i_pajek_add_string_attribute
igraph_pajek_yyparse
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63609

```
Crash type: Heap-use-after-free READ 11
Crash state:
igraph_pajek_yyparse
igraph_read_graph_pajek
read_pajek.cpp
```


Summary: UNKNOWN READ in igraph_strvector_set_len

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63622

```
Crash type: UNKNOWN READ
Crash state:
igraph_strvector_set_len
igraph_strvector_set
add_string_attribute
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63610

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
H5D__scatter_mem
H5D__scatgath_read
H5D__contig_read
```


Summary: Segv on unknown address in cleanup_live_vars

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63601

```
Crash type: Segv on unknown address
Crash state:
cleanup_live_vars
zend_dispatch_try_catch_finally_helper_SPEC
ZEND_HANDLE_EXCEPTION_SPEC_HANDLER
```


Summary: Heap-buffer-overflow in Calc_Length

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63648

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Calc_Length
RunIns
Instance_Reset
```


Summary: Heap-buffer-overflow in arrow::Status arrow::Result<std::__1::unique_ptr<arrow::Buffer, std::__1::defaul

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63679

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
arrow::Status arrow::Result<std::__1::unique_ptr<arrow::Buffer, std::__1::defaul
arrow::ipc::ArrayLoader::GetBuffer
arrow::ipc::ArrayLoader::Visit
```


Summary: Heap-buffer-overflow in H5F_addr_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63743

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
H5F_addr_decode
H5O__shared_decode
H5O__fill_new_shared_decode
```


Summary: Stack-buffer-overflow in ndpi_handle_rule

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63746

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
ndpi_handle_rule
ndpi_load_protocols_file_fd
fuzz_filecfg_protocols.c
```


Summary: Heap-use-after-free in zend_jit_trace_execute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63725

```
Crash type: Heap-use-after-free READ 4
Crash state:
zend_jit_trace_execute
zend_jit_trace_hot_side
zend_jit_trace_exit
```


Summary: Security exception in com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63766

```
Crash type: Security exception
Crash state:
com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst
java.base/java.util.stream.ReferencePipeline$3$1.accept
java.base/java.util.ArrayList$ArrayListSpliterator.forEachRemaining
```


Summary: Segv on unknown address in ZEND_HANDLE_EXCEPTION_SPEC_HANDLER

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63749

```
Crash type: Segv on unknown address
Crash state:
ZEND_HANDLE_EXCEPTION_SPEC_HANDLER
zero
zend_execute
```


Summary: Heap-buffer-overflow in dwg_geojson_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63761

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
dwg_geojson_object
dwg_write_geojson
llvmfuzz.c
```


Summary: Heap-buffer-overflow in node_from_openstep

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55146

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
node_from_openstep
node_from_openstep
plist_from_openstep
```


Summary: Heap-buffer-overflow in decode_preR13_entities

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63776

```
Crash type: Heap-buffer-overflow READ 10
Crash state:
decode_preR13_entities
decode_preR13
dwg_decode
```


Summary: Heap-buffer-overflow in OpenType::be_u32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63777

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
OpenType::be_u32
OpenType::Cmap::subtable
OpenType::Font::try_load_from_offset
```


Summary: Heap-buffer-overflow in bit_read_RC

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63814

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
bit_read_RC
bit_read_fixed
bit_read_TF
```


Summary: Stack-buffer-overflow in dynapi_set_helper

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63824

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
dynapi_set_helper
dwg_dynapi_header_set_value
json_HEADER
```


Summary: Use-of-uninitialized-value in fp_uninit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63867

```
Crash type: Use-of-uninitialized-value
Crash state:
fp_uninit
cryptofuzz::module::libecc::OpECC_ValidatePubkey
cryptofuzz::ExecutorBase<bool, cryptofuzz::operation::ECC_ValidatePubkey>::callM
```


Summary: Heap-buffer-overflow in cmsMLUsetWide

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63861

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
cmsMLUsetWide
Type_Text_Description_Read
cmsReadTag
```


Summary: Segv on unknown address in FunctionCompiler::compileReturn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63885

```
Crash type: Segv on unknown address
Crash state:
FunctionCompiler::compileReturn
WasmEdge::AOT::Compiler::compile
WasmEdge::AOT::Compiler::compile
```


Summary: Stack-buffer-overflow in dxf_header_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63919

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
dxf_header_read
dwg_read_dxf
llvmfuzz.c
```


Summary: UNKNOWN READ in cmsIT8GetDataRowColDbl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63954

```
Crash type: UNKNOWN READ
Crash state:
cmsIT8GetDataRowColDbl
cms_cgats_fuzzer.c
```


Summary: Heap-buffer-overflow in iasecc_parse_acls

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63949

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
iasecc_parse_acls
iasecc_parse_docp
iasecc_sdo_parse_data
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63990

```
Crash type: UNKNOWN READ
Crash state:
HeifPixelImage::overlay
HeifContext::decode_overlay_image
HeifContext::decode_image_planar
```

Summary: UNKNOWN READ in HeifPixelImage::overlay


Summary: Stack-buffer-overflow in dump_stats

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56339

```
Crash type: Stack-buffer-overflow READ 4
Crash state:
dump_stats
flac__analyze_frame
write_callback
```


Summary: Segv on unknown address in flb_sds_cat_safe

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64049

```
Crash type: Segv on unknown address
Crash state:
flb_sds_cat_safe
flb_cf_key_translate
flb_cf_section_property_add
```


Summary: Security exception in org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.isNeverEncryptedRecord

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64051

```
Crash type: Security exception
Crash state:
org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.isNeverEncryptedRecord
org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.readRecordSID
org.apache.poi.hssf.record.RecordInputStream.readNextSid
```


Summary: Heap-buffer-overflow in H5MM_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64092

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
H5MM_strdup
H5G__stab_get_name_by_idx_cb
H5G__node_by_idx
```


Summary: Heap-buffer-overflow in pcpp::GREv1Layer::computeCalculateFields

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64110

```
Crash type: Heap-buffer-overflow WRITE 2
Crash state:
pcpp::GREv1Layer::computeCalculateFields
pcpp::Packet::computeCalculateFields
FuzzTarget.cpp
```


Summary: Negative-size-param in pcpp::RawPacket::insertData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64111

```
Crash type: Negative-size-param
Crash state:
pcpp::RawPacket::insertData
pcpp::Packet::extendLayer
pcpp::BgpUpdateMessageLayer::setNetworkLayerReachabilityInfo
```


Summary: Heap-buffer-overflow in parse_by_block_type

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64114

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
parse_by_block_type
light_read_record
light_get_next_packet
```


Summary: Heap-buffer-overflow in bit_read_fixed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64118

```
Crash type: Heap-buffer-overflow READ 16
Crash state:
bit_read_fixed
bit_read_TF
decode_preR13_sentinel
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64122

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
pcpp::computeChecksum
pcpp::IPv4Layer::computeCalculateFields
pcpp::Packet::computeCalculateFields
```

Summary: Heap-buffer-overflow in pcpp::computeChecksum


Summary: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64130

```
Crash type: Security exception
Crash state:
com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
java.base/java.nio.ByteBuffer.position
java.base/sun.nio.cs.UTF_8.updatePositions
```


Summary: Heap-buffer-overflow in pcpp::SSLClientHelloMessage::getCipherSuite

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64124

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
pcpp::SSLClientHelloMessage::getCipherSuite
readParsedPacket
FuzzTarget.cpp
```


Summary: Heap-buffer-overflow in pcpp::SomeIpSdEntry::SomeIpSdEntry

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64127

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
pcpp::SomeIpSdEntry::SomeIpSdEntry
pcpp::SomeIpSdLayer::getEntries
readParsedPacket
```


Summary: Heap-buffer-overflow in IEC104Stats::processPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64147

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
IEC104Stats::processPacket
Flow::processIEC60870Packet
NetworkInterface::processPacket
```


Summary: Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64151

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
Exiv2::QuickTimeVideo::NikonTagsDecoder
Exiv2::QuickTimeVideo::userDataDecoder
```


Summary: Invalid-free in sc_file_clear_acl_entries

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64181

```
Crash type: Invalid-free
Crash state:
sc_file_clear_acl_entries
sc_file_free
setcos_create_key
```


Summary: Heap-buffer-overflow in WriteCLUT

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64166

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
WriteCLUT
cmsGetPostScriptColorResource
cmsGetPostScriptCRD
```


Summary: UNKNOWN WRITE in php_strip_url_passwd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64209

```
Crash type: UNKNOWN WRITE
Crash state:
php_strip_url_passwd
php_message_handler_for_zend
zend_message_dispatcher
```


Summary: Heap-buffer-overflow in pcpp::PPP_PPTPLayer::computeCalculateFields

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64196

```
Crash type: Heap-buffer-overflow WRITE 2
Crash state:
pcpp::PPP_PPTPLayer::computeCalculateFields
pcpp::Packet::computeCalculateFields
FuzzTarget.cpp
```


Summary: Heap-buffer-overflow in epassNUMBER_pkcs15_generate_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64215

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
epassNUMBER_pkcs15_generate_key
sc_pkcs15init_generate_key
do_generate_key
```


Summary: Heap-buffer-overflow in isvcd_nal_byte_swap_emulation

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56386

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
isvcd_nal_byte_swap_emulation
isvcd_nal_parse_non_vcl_nal
isvcd_pre_parse_refine_au
```


Summary: UNKNOWN READ in loader_log

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42530193

```
Crash type: UNKNOWN READ
Crash state:
loader_log
loader_scanned_icd_add
loader_icd_scan
```


Summary: Heap-buffer-overflow in pcpp::SomeIpSdLayer::SomeIpSdLayer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64190

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
pcpp::SomeIpSdLayer::SomeIpSdLayer
pcpp::SomeIpLayer::parseSomeIpLayer
pcpp::SomeIpLayer::parseNextLayer
```


Summary: Heap-buffer-overflow in pcpp::TLVRecordReader<pcpp::TcpOption>::getTLVRecord

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64205

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pcpp::TLVRecordReader<pcpp::TcpOption>::getTLVRecord
pcpp::TcpLayer::addTcpOptionAfter
readParsedPacket
```


Summary: Heap-buffer-overflow in fill_lines

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64218

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
fill_lines
rb_dump_backtrace_with_lines
rb_vm_bugreport
```


Summary: Stack-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64237

```
Crash type: Stack-buffer-overflow READ 5
Crash state:
std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
pcpp::NtpLayer::getReferenceIdentifierString
readParsedPacket
```


Summary: Heap-buffer-overflow in Gfx::ICC::TextDescriptionTagData::from_bytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64219

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Gfx::ICC::TextDescriptionTagData::from_bytes
Gfx::ICC::Profile::try_load_from_externally_owned_memory
FuzzICCProfile.cpp
```


Summary: Index-out-of-bounds in iaace_calc_sfb_dist

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64267

```
Crash type: Index-out-of-bounds
Crash state:
iaace_calc_sfb_dist
iaace_estimate_scfs_chan
ia_enhaacplus_enc_qc_main
```


Summary: Heap-use-after-free in mrb_gc_mark

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56406

```
Crash type: Heap-use-after-free READ 4
Crash state:
mrb_gc_mark
mrb_gc_mark_iv
gc_mark_children
```


Summary: Heap-buffer-overflow in ih264d_sev

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64286

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ih264d_sev
ih264d_parse_fgc
ih264d_parse_sei_payload
```


Summary: Global-buffer-overflow in dissect_zcl_read_attr_struct

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64290

```
Crash type: Global-buffer-overflow READ 4
Crash state:
dissect_zcl_read_attr_struct
dissect_zbee_zcl
call_dissector_work_error
```


Summary: Heap-use-after-free in dxf_tables_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64318

```
Crash type: Heap-use-after-free READ 8
Crash state:
dxf_tables_read
dwg_read_dxf
llvmfuzz.c
```


Summary: Use-of-uninitialized-value in rename_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56401

```
Crash type: Use-of-uninitialized-value
Crash state:
rename_process
safe_fork_full
parse_timestamp
```


Summary: Security exception in java.base/java.util.HashMap.resize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64367

```
Crash type: Security exception
Crash state:
java.base/java.util.HashMap.resize
java.base/java.util.HashMap.putVal
java.base/java.util.HashMap.put
```


Summary: Negative-size-param in pcpp::RawPacket::insertData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64418

```
Crash type: Negative-size-param
Crash state:
pcpp::RawPacket::insertData
pcpp::Packet::extendLayer
pcpp::BgpUpdateMessageLayer::setNetworkLayerReachabilityInfo
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64363

```
Crash type: Global-buffer-overflow READ 4
Crash state:
dissect_zcl_read_attr_struct
dissect_zbee_zcl
call_dissector_work
```


Summary: Heap-buffer-overflow in isvcd_populate_res_prms

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64431

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
isvcd_populate_res_prms
isvcd_parse_interlayer_resamp_func_init
isvcd_mark_err_slice_skip
```


Summary: Heap-buffer-overflow in ih264d_format_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64432

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
ih264d_format_convert
isvcd_video_decode
isvcd_api_function
```


Summary: Heap-buffer-overflow in isvcd_start_of_pic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64436

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
isvcd_start_of_pic
isvcd_parse_decode_slice
isvcd_parse_nal_unit
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64438

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
ih264d_format_convert
ih264d_decode_picture_thread
```


Summary: Heap-buffer-overflow in NetworkInterface::dissectPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64454

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
NetworkInterface::dissectPacket
fuzz_dissect_packet.cpp
```


Summary: Security exception in jaz.Zer.reportFinding

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64488

```
Crash type: Security exception
Crash state:
jaz.Zer.reportFinding
jaz.Zer.reportFindingIfEnabled
jaz.Zer.readObject
```


Summary: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64514

```
Crash type: Security exception
Crash state:
com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
java.base/java.nio.ByteBuffer.position
java.base/sun.nio.cs.UTF_8.updatePositions
```


Summary: Heap-buffer-overflow in H5O__shared_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64525

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
H5O__shared_decode
H5O__dtype_shared_decode
H5O_msg_read_oh
```


Summary: Stack-buffer-overflow in io_memory_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64529

```
Crash type: Stack-buffer-overflow WRITE 11
Crash state:
io_memory_read
r_io_plugin_read
r_io_desc_read
```


Summary: Stack-buffer-overflow in asn1_decode_entry

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64522

```
Crash type: Stack-buffer-overflow READ 8
Crash state:
asn1_decode_entry
asn1_decode
_sc_asn1_decode
```


Summary: Global-buffer-overflow in iaace_estimate_scfs_chan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64532

```
Crash type: Global-buffer-overflow READ 4
Crash state:
iaace_estimate_scfs_chan
ia_enhaacplus_enc_qc_main
ia_enhaacplus_enc_aac_core_encode
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64543

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pcpp::TLSECPointFormatExtension::getECPointFormatList
pcpp::SSLClientHelloMessage::generateTLSFingerprint
readParsedPacket
```

Summary: Heap-buffer-overflow in pcpp::TLSECPointFormatExtension::getECPointFormatList


Summary: Heap-buffer-overflow in decToString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64574

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
decToString
decNumberToString
jv_number_get_literal
```


Summary: UNKNOWN READ in MqttProps_Free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64570

```
Crash type: UNKNOWN READ
Crash state:
MqttProps_Free
Handle_Props
MqttClient_DecodePacket
```


Summary: Heap-use-after-free in zend_reference_destroy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64579

```
Crash type: Heap-use-after-free READ 4
Crash state:
zend_reference_destroy
rc_dtor_func
zend_leave_helper_SPEC
```


Summary: Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64641

```
Crash type: Security exception
Crash state:
org.springframework.expression.spel.ast.OpPlus.getValueInternal
org.springframework.util.ConcurrentReferenceHashMap$Segment.restructureIfNecessa
org.springframework.util.ConcurrentReferenceHashMap.purgeUnreferencedEntries
```


Summary: Heap-buffer-overflow in r_bin_coff_new_buf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64638

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
r_bin_coff_new_buf
load
r_bin_object_new
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64665

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
H5T__bit_copy
H5T__bit_get_d
H5T__conv_f_f
```

Summary: Heap-buffer-overflow in H5T__bit_copy


Summary: Use-of-uninitialized-value in std::__1::__stdoutbuf<char>::xsputn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64693

```
Crash type: Use-of-uninitialized-value
Crash state:
std::__1::__stdoutbuf<char>::xsputn
std::__1::ostreambuf_iterator<char, std::__1::char_traits<char> > std::__1::__pa
std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha
```


Summary: Heap-buffer-overflow in js_is_live_code

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64726

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
js_is_live_code
js_parse_statement_or_decl
js_parse_block
```


Summary: Security exception in org.apache.poi.hdgf.streams.ChunkStream.findChunks

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64782

```
Crash type: Security exception
Crash state:
org.apache.poi.hdgf.streams.ChunkStream.findChunks
org.apache.poi.hdgf.streams.PointerContainingStream.findChildren
org.apache.poi.hdgf.streams.PointerContainingStream.findChildren
```


Summary: Security exception in java.base/javax.crypto.spec.SecretKeySpec.<init>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64768

```
Crash type: Security exception
Crash state:
java.base/javax.crypto.spec.SecretKeySpec.<init>
org.apache.poi.poifs.crypt.binaryrc4.BinaryRC4Decryptor.initCipherForBlock
org.apache.poi.poifs.crypt.binaryrc4.BinaryRC4Decryptor.initCipherForBlock
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64829

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
dwg_free_object
dwg_free
llvmfuzz.c
```

Summary: Heap-buffer-overflow in dwg_free_object


Summary: Stack-buffer-overflow in decNaNs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64771

```
Crash type: Stack-buffer-overflow WRITE 2
Crash state:
decNaNs
decCompareOp
decNumberCompare
```


Summary: Heap-buffer-overflow in is_decl_requires_met

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64849

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
is_decl_requires_met
enable_avrules
link_modules
```


Summary: Heap-buffer-overflow in OT::cff2::accelerator_templ_t<CFF::cff2_private_dict_opset_t, CFF::cff2_private_

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64859

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
OT::cff2::accelerator_templ_t<CFF::cff2_private_dict_opset_t, CFF::cff2_private_
hb_ot_draw_glyph
hb_font_draw_glyph
```


Summary: Heap-use-after-free in authentic_emu_update_tokeninfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64898

```
Crash type: Heap-use-after-free READ 8
Crash state:
authentic_emu_update_tokeninfo
sc_pkcs15init_update_tokeninfo
sc_pkcs15init_update_lastupdate
```


Summary: Security exception in org.apache.poi.poifs.crypt.binaryrc4.BinaryRC4Decryptor.initCipherForBlock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64979

```
Crash type: Security exception
Crash state:
org.apache.poi.poifs.crypt.binaryrc4.BinaryRC4Decryptor.initCipherForBlock
org.apache.poi.poifs.crypt.binaryrc4.BinaryRC4Decryptor.initCipherForBlock
org.apache.poi.poifs.crypt.binaryrc4.BinaryRC4Decryptor$BinaryRC4CipherInputStre
```


Summary: Heap-buffer-overflow in ih264d_compute_bs_non_mbaff

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65031

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ih264d_compute_bs_non_mbaff
ih264d_mv_pred_ref_tfr_nby2_pmb
isvcd_mark_err_slice_skip
```


Summary: Global-buffer-overflow in libraw_tagtype_dataunit_bytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65027

```
Crash type: Global-buffer-overflow READ 4
Crash state:
libraw_tagtype_dataunit_bytes
checked_buffer_t::tiff_sget
LibRaw::parseSonySR2
```


Summary: Heap-buffer-overflow in loongarch_split_args_by_comma

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65018

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
loongarch_split_args_by_comma
print_insn_loongarch
disassemble_section
```


Summary: Global-buffer-overflow in pcre_get_compiled_regex_cache_ex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65021

```
Crash type: Global-buffer-overflow READ 1
Crash state:
pcre_get_compiled_regex_cache_ex
php_do_pcre_match
zif_preg_match
```


Summary: Heap-buffer-overflow in wc_AesCbcEncrypt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55161

```
Crash type: Heap-buffer-overflow WRITE 16
Crash state:
wc_AesCbcEncrypt
evpCipherBlock
wolfSSL_EVP_CipherUpdate
```


Summary: Security exception in com.fasterxml.jackson.core.JsonParser.currentName

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65024

```
Crash type: Security exception
Crash state:
com.fasterxml.jackson.core.JsonParser.currentName
com.fasterxml.jackson.dataformat.yaml.YAMLParser.currentName
com.fasterxml.jackson.dataformat.yaml.YAMLParser.getCurrentName
```


Summary: Global-buffer-overflow in xmlDictLookupInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65012

```
Crash type: Global-buffer-overflow READ 1
Crash state:
xmlDictLookupInternal
xmlDictLookupHashed
xmlParseNCName
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65030

```
Crash type: Global-buffer-overflow READ 1
Crash state:
pcre_get_compiled_regex_cache_ex
php_replace_in_subject
preg_replace_common
```


Summary: Heap-use-after-free in htmlCurrentChar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65043

```
Crash type: Heap-use-after-free READ 1
Crash state:
htmlCurrentChar
htmlParseComment
htmlParseDocument
```


Summary: Check failed in CheckUnwind

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65035

```
Crash type: Check failed
Crash state:
CheckUnwind
iv_aligned_free
ih264d_free_dynamic_bufs
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65051

```
Crash type: Heap-use-after-free READ 1
Crash state:
pcpp::TLVRecordReader<pcpp::DhcpOption>::getTLVRecord
pcpp::DhcpLayer::toString
pcpp::Packet::toStringList
```

Summary: Heap-use-after-free in pcpp::TLVRecordReader<pcpp::DhcpOption>::getTLVRecord


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65047

```
Crash type: UNKNOWN READ
Crash state:
init_struct_ops_maps
bpf_object__init_maps
bpf_object_open
```

Summary: UNKNOWN READ in init_struct_ops_maps


Summary: Heap-buffer-overflow in ih264d_format_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65057

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
ih264d_format_convert
ih264d_decode_picture_thread
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65059

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
ih264d_format_convert
isvcd_video_decode
isvcd_api_function
```


Summary: Heap-buffer-overflow in isvcd_start_of_pic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65060

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
isvcd_start_of_pic
isvcd_parse_decode_slice
isvcd_parse_nal_unit
```


Summary: Heap-use-after-free in htmlParseDocument

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65112

```
Crash type: Heap-use-after-free READ 1
Crash state:
htmlParseDocument
htmlDoRead
htmlCtxtReadMemory
```


Summary: Heap-use-after-free in memory_bstat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65108

```
Crash type: Heap-use-after-free READ 8
Crash state:
memory_bstat
bfd_get_size
bfd_get_file_size
```


Summary: UNKNOWN READ in ih264d_filter_boundary_left_nonmbaff

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65132

```
Crash type: UNKNOWN READ
Crash state:
ih264d_filter_boundary_left_nonmbaff
ih264d_deblock_mb_nonmbaff
ih264d_decode_recon_tfr_nmb
```


Summary: Heap-use-after-free in memory_bclose

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65104

```
Crash type: Heap-use-after-free READ 8
Crash state:
memory_bclose
bfd_close_all_done
fuzz_dwarf.c
```


Summary: UNKNOWN WRITE in zero

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65135

```
Crash type: UNKNOWN WRITE
Crash state:
zero
zend_execute
fuzzer_do_request_from_buffer
```


Summary: Security exception in java.base/java.lang.reflect.Array.newArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65139

```
Crash type: Security exception
Crash state:
java.base/java.lang.reflect.Array.newArray
java.base/java.lang.reflect.Array.newInstance
java.base/java.io.ObjectInputStream.readArray
```


Summary: Security exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65140

```
Crash type: Security exception
Crash state:
com.github.javaparser.CommentsInserter.insertComments
java.base/java.util.Objects.equals
com.github.javaparser.Position.equals
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65128

```
Crash type: Stack-buffer-overflow WRITE 1
Crash state:
icu_75::TZDBTimeZoneNames::getMetaZoneNames
icu_75::TZDBTimeZoneNames::getMetaZoneDisplayName
TestNames
```

Summary: Stack-buffer-overflow in icu_75::TZDBTimeZoneNames::getMetaZoneNames


Summary: Stack-buffer-overflow in decNaNs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65130

```
Crash type: Stack-buffer-overflow WRITE 2
Crash state:
decNaNs
decCompareOp
decNumberCompare
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56501

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
H5L__extern_traverse
H5G__traverse_special
H5G__traverse_real
```

Summary: Heap-buffer-overflow in H5L__extern_traverse


Summary: Heap-buffer-overflow in _libssh2_kex_agree_instr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65212

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
_libssh2_kex_agree_instr
_libssh2_packet_add
fullpacket
```


Summary: Heap-buffer-overflow in jv_string_vfmt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65198

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
jv_string_vfmt
jv_string_fmt
jv_get
```


Summary: Heap-buffer-overflow in json_cquote

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56473

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
json_cquote
dwg_json_LTYPE
json_objects_write
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65236

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
inflate
uncompress2
uncompress
```

Summary: Heap-buffer-overflow in inflate


Summary: Heap-buffer-overflow in Flow::dissectMDNS

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65271

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
Flow::dissectMDNS
NetworkInterface::processPacket
NetworkInterface::dissectPacket
```


Summary: Security exception in org.apache.poi.ddf.EscherContainerRecord.fillFields

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65303

```
Crash type: Security exception
Crash state:
org.apache.poi.ddf.EscherContainerRecord.fillFields
org.apache.poi.hslf.record.Record.findChildRecords
org.apache.poi.hslf.record.DummyPositionSensitiveRecordWithChildren.<init>
```


Summary: Heap-buffer-overflow in processClientServerHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65304

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
processClientServerHello
processTLSBlock
ndpi_search_tls_udp
```


Summary: Heap-buffer-overflow in rawspeed::DngDecoder::parseWhiteBalance

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65309

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
rawspeed::DngDecoder::parseWhiteBalance
rawspeed::DngDecoder::decodeMetaDataInternal
rawspeed::RawDecoder::decodeMetaData
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65307

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
processClientServerHello
process_tls
fuzz_quic_get_crypto_data.c
```


Summary: Heap-buffer-overflow in js_free_function_def

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65317

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
js_free_function_def
js_parse_function_decl2
js_parse_postfix_expr
```


Summary: Heap-buffer-overflow in NetworkInterface::dissectPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65332

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
NetworkInterface::dissectPacket
fuzz_dissect_packet.cpp
```


Summary: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65333

```
Crash type: Security exception
Crash state:
com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
java.base/sun.nio.cs.UTF_8.updatePositions
java.base/sun.nio.cs.UTF_8$Encoder.encodeArrayLoop
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65362

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
processClientServerHello
processTLSBlock
ndpi_search_tls_udp
```


Summary: Heap-use-after-free in xmlStaticCopyNode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65363

```
Crash type: Heap-use-after-free READ 8
Crash state:
xmlStaticCopyNode
xmlDocCopyNode
xmlParseReference
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56510

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
OT::Layout::Common::Coverage::get_population
OT::Layout::GPOS_impl::SinglePosFormat1::sanitize
hb_sanitize_context_t::return_t OT::Layout::GPOS_impl::PosLookupSubTable::dispat
```

Summary: Heap-buffer-overflow in OT::Layout::Common::Coverage::get_population


Summary: Heap-buffer-overflow in process_one_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65383

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
process_one_read
cram_encode_container
cram_flush_container_mt
```


Summary: Heap-use-after-free in JS_NewObjectFromShape

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65393

```
Crash type: Heap-use-after-free WRITE 8
Crash state:
JS_NewObjectFromShape
js_parse_template
js_parse_postfix_expr
```


Summary: Heap-use-after-free in xmlRemoveID

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65409

```
Crash type: Heap-use-after-free READ 8
Crash state:
xmlRemoveID
xmlFreeProp
xmlFreeNodeList
```


Summary: Heap-buffer-overflow in IEC104Stats::processPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65402

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
IEC104Stats::processPacket
Flow::processIEC60870Packet
NetworkInterface::processPacket
```


Summary: Heap-buffer-overflow in ih264d_get_bits_h264

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65418

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ih264d_get_bits_h264
ih264d_parse_fgc
ih264d_parse_sei_payload
```


Summary: Heap-buffer-overflow in NetworkInterface::processPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65428

```
Crash type: Heap-buffer-overflow READ 10
Crash state:
NetworkInterface::processPacket
NetworkInterface::dissectPacket
fuzz_dissect_packet.cpp
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65429

```
Crash type: Security exception
Crash state:
com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
java.base/sun.nio.cs.UTF_8.updatePositions
java.base/sun.nio.cs.UTF_8$Encoder.encodeArrayLoop
```


Summary: Heap-buffer-overflow in load_1

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376515517

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
load_1
apprentice_load
file_apprentice
```


Summary: Stack-buffer-overflow in AffixMgr::compound_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55191

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
AffixMgr::compound_check
SuggestMgr::checkword
SuggestMgr::testsug
```


Summary: Heap-buffer-overflow in pdf14_preserve_backdrop

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56544

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
pdf14_preserve_backdrop
pdf14_push_transparency_group
pdf14_begin_transparency_group
```


Summary: UNKNOWN READ in mrb_vm_find_method

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56687

```
Crash type: UNKNOWN READ
Crash state:
mrb_vm_find_method
mrb_vm_exec
mrb_vm_run
```


Summary: UNKNOWN READ in dissect_oran_c_section

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56724

```
Crash type: UNKNOWN READ
Crash state:
dissect_oran_c_section
dissect_oran
call_dissector_work
```


Summary: Heap-buffer-overflow in run_container_write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56710

```
Crash type: Heap-buffer-overflow WRITE 16
Crash state:
run_container_write
ra_portable_serialize
roaring_bitmap_serialize
```


Summary: Heap-use-after-free in HashMgr::add_word

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56737

```
Crash type: Heap-use-after-free READ 2
Crash state:
HashMgr::add_word
HashMgr::load_tables
HashMgr::HashMgr
```


Summary: Heap-use-after-free in ddsi_type_unref_impl_locked

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56837

```
Crash type: Heap-use-after-free READ 4
Crash state:
ddsi_type_unref_impl_locked
ddsi_type_unref_locked
ddsi_xt_type_fini
```


Summary: UNKNOWN READ in isvce_cabac_flush

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56816

```
Crash type: UNKNOWN READ
Crash state:
isvce_cabac_flush
isvce_cabac_encode_terminate
isvce_entropy
```


Summary: Heap-buffer-overflow in wc_AesFeedbackEncrypt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55174

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
wc_AesFeedbackEncrypt
wc_AesOfbEncrypt
evpCipherBlock
```


Summary: Global-buffer-overflow in OT::gvar::accelerator_t::apply_deltas_to_points

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56800

```
Crash type: Global-buffer-overflow READ 2
Crash state:
OT::gvar::accelerator_t::apply_deltas_to_points
bool OT::glyf_impl::Glyph::get_points<OT::glyf_accelerator_t>
bool OT::glyf_impl::Glyph::get_points<OT::glyf_accelerator_t>
```


Summary: Global-buffer-overflow in xmlCurrentChar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56841

```
Crash type: Global-buffer-overflow READ 1
Crash state:
xmlCurrentChar
xmlParseNCName
xmlParseQName
```


Summary: UNKNOWN READ in fp_cmp_mag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56892

```
Crash type: UNKNOWN READ
Crash state:
fp_cmp_mag
crtmgr_trust_list_lookup
crtmgr_add
```


Summary: Heap-buffer-overflow in array_container_to_uint32_array

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56893

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
array_container_to_uint32_array
ra_to_uint32_array
roaring_bitmap_serialize
```


Summary: Invalid-free in hb_free_impl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56952

```
Crash type: Invalid-free
Crash state:
hb_free_impl
OT::glyf::_free_compiled_subset_glyphs
OT::glyf::_populate_subset_glyphs
```


Summary: Global-buffer-overflow in htmlCurrentChar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56964

```
Crash type: Global-buffer-overflow READ 1
Crash state:
htmlCurrentChar
htmlParseNameComplex
htmlParseName
```


Summary: UNKNOWN READ in dissect_oran_c_section

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56990

```
Crash type: UNKNOWN READ
Crash state:
dissect_oran_c_section
dissect_oran
call_dissector_work
```


Summary: Heap-use-after-free in mrb_gc_mark

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56991

```
Crash type: Heap-use-after-free READ 4
Crash state:
mrb_gc_mark
mrb_gc_mark_iv
gc_mark_children
```


Summary: Heap-buffer-overflow in mosquitto__strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57002

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
mosquitto__strdup
config__read_file_core
config__read_file
```


Summary: Segv on unknown address in mrb_bint_sub

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57037

```
Crash type: Segv on unknown address
Crash state:
mrb_bint_sub
int_sub
mrb_vm_exec
```


Summary: UNKNOWN READ in mrb_obj_iv_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57051

```
Crash type: UNKNOWN READ
Crash state:
mrb_obj_iv_get
class_name_str
mrb_mod_to_s
```


Summary: Heap-double-free in xsltCompileStepPattern

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57061

```
Crash type: Heap-double-free
Crash state:
xsltCompileStepPattern
xsltCompileRelativePathPattern
xsltCompilePatternInternal
```


Summary: Heap-buffer-overflow in FLAC__bitwriter_write_rice_signed_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57071

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
FLAC__bitwriter_write_rice_signed_block
add_residual_partitioned_rice_
FLAC__subframe_add_fixed
```


Summary: UNKNOWN READ in mrb_exc_get_id

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57064

```
Crash type: UNKNOWN READ
Crash state:
mrb_exc_get_id
mrb_no_method_error
mrb_method_missing
```


Summary: UNKNOWN READ in LibRaw::sget4

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57105

```
Crash type: UNKNOWN READ
Crash state:
LibRaw::sget4
LibRaw::parseAdobeRAFMakernote
LibRaw::parse_tiff_ifd
```


Summary: Global-buffer-overflow in xmlNextChar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57073

```
Crash type: Global-buffer-overflow READ 1
Crash state:
xmlNextChar
htmlParseStartTag
htmlParseChunk
```


Summary: Global-buffer-overflow in xmlParseQName

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57077

```
Crash type: Global-buffer-overflow READ 1
Crash state:
xmlParseQName
xmlParseStartTag2
xmlParseElementStart
```


Summary: Heap-buffer-overflow in ndpi_search_bittorrent

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55218

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
ndpi_search_bittorrent
check_ndpi_detection_func
ndpi_check_flow_func
```


Summary: Global-buffer-overflow in xmlSkipBlankChars

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57080

```
Crash type: Global-buffer-overflow READ 1
Crash state:
xmlSkipBlankChars
xmlParseMisc
xmlParseDocument
```


Summary: Heap-use-after-free in mrb_str_hash_m

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57108

```
Crash type: Heap-use-after-free READ 1
Crash state:
mrb_str_hash_m
mrb_funcall_with_block
mrb_funcall_argv
```


Summary: Global-buffer-overflow in xmlParseContentInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57084

```
Crash type: Global-buffer-overflow READ 1
Crash state:
xmlParseContentInternal
xmlParseExternalEntityPrivate
xmlParseReference
```


Summary: Global-buffer-overflow in htmlParseDocument

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57089

```
Crash type: Global-buffer-overflow READ 1
Crash state:
htmlParseDocument
htmlDoRead
htmlReadMemory
```


Summary: Global-buffer-overflow in xmlDictLookup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57110

```
Crash type: Global-buffer-overflow READ 1
Crash state:
xmlDictLookup
xmlParseNCName
xmlParseQName
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57120

```
Crash type: Global-buffer-overflow READ 8
Crash state:
base_C_MessageEncryptInit
rpc_C_MessageEncryptInit
p11_rpc_server_handle
```

Summary: Global-buffer-overflow in base_C_MessageEncryptInit


Summary: Global-buffer-overflow in xmlParseQName

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57151

```
Crash type: Global-buffer-overflow READ 1
Crash state:
xmlParseQName
xmlParseStartTag2
xmlParseTryOrFinish
```


Summary: Segv on unknown address in mrb_vm_find_method

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57135

```
Crash type: Segv on unknown address
Crash state:
mrb_vm_find_method
mrb_vm_exec
mrb_vm_run
```


Summary: UNKNOWN READ in Assimp::SMDImporter::ParseNodeInfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57218

```
Crash type: UNKNOWN READ
Crash state:
Assimp::SMDImporter::ParseNodeInfo
Assimp::SMDImporter::ParseNodesSection
Assimp::SMDImporter::ParseFile
```


Summary: Global-buffer-overflow in htmlParseChunk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57224

```
Crash type: Global-buffer-overflow READ 1
Crash state:
htmlParseChunk
html.c
```


Summary: Global-buffer-overflow in base_C_MessageSignFinal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57202

```
Crash type: Global-buffer-overflow READ 8
Crash state:
base_C_MessageSignFinal
rpc_C_MessageSignFinal
p11_rpc_server_handle
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57225

```
Crash type: Global-buffer-overflow READ 1
Crash state:
xmlParseContentInternal
xmlParseExternalEntityPrivate
xmlParseReference
```


Summary: Global-buffer-overflow in xmlStrndup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57284

```
Crash type: Global-buffer-overflow READ 1
Crash state:
xmlStrndup
htmlParseSystemLiteral
htmlParseDocTypeDecl
```


Summary: Global-buffer-overflow in xmlParseEntityDecl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57294

```
Crash type: Global-buffer-overflow READ 1
Crash state:
xmlParseEntityDecl
xmlParseMarkupDecl
xmlParseInternalSubset
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57288

```
Crash type: Global-buffer-overflow READ 1
Crash state:
htmlParseDocument
htmlDoRead
htmlReadMemory
```


Summary: Global-buffer-overflow in htmlParsePI

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57304

```
Crash type: Global-buffer-overflow READ 1
Crash state:
htmlParsePI
htmlParseDocument
htmlDoRead
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57305

```
Crash type: Heap-buffer-overflow READ 5
Crash state:
H5G__node_cmp3
H5B_find
H5G__stab_lookup
```

Summary: Heap-buffer-overflow in H5G__node_cmp3


Summary: UNKNOWN WRITE in processCertificateElements

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57317

```
Crash type: UNKNOWN WRITE
Crash state:
processCertificateElements
fuzz_tls_certificate.c
```


Summary: Heap-use-after-free in flac__analyze_frame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57354

```
Crash type: Heap-use-after-free READ 4
Crash state:
flac__analyze_frame
write_callback
write_audio_frame_to_client_
```


Summary: Heap-buffer-overflow in hb_subset_plan_t::hb_subset_plan_t

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57342

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
hb_subset_plan_t::hb_subset_plan_t
hb_subset_plan_create_or_fail
hb_subset_or_fail
```


Summary: Heap-buffer-overflow in std::__1::enable_if<true, void>::type APFSBtreeNodeIterator<APFSBtreeNode<apfs_o

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57364

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
std::__1::enable_if<true, void>::type APFSBtreeNodeIterator<APFSBtreeNode<apfs_o
APFSBtreeNodeIterator<APFSBtreeNode<apfs_omap_key, apfs_omap_value> >::APFSBtree
APFSBtreeNodeIterator<APFSBtreeNode<apfs_omap_key, apfs_omap_value> > APFSBtreeN
```


Summary: Heap-buffer-overflow in ndpi_workflow_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57369

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_workflow_process_packet
fuzz_ndpi_reader.c
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57397

```
Crash type: Use-of-uninitialized-value
Crash state:
ihevce_enc_frm_proc_slave_thrd
osal_func
posix_memalign
```

Summary: Use-of-uninitialized-value in ihevce_enc_frm_proc_slave_thrd


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57398

```
Crash type: Use-of-uninitialized-value
Crash state:
complexity_RC_reset_marking
ihevce_pre_enc_process_frame_thrd
osal_func
```

Summary: Use-of-uninitialized-value in complexity_RC_reset_marking


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57401

```
Crash type: Use-of-uninitialized-value
Crash state:
ihevce_strm_fill_done
ihevce_ent_coding_thrd
osal_func
```

Summary: Use-of-uninitialized-value in ihevce_strm_fill_done


Summary: Invalid-free in fuzz_die_cu_attrs.c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57429

```
Crash type: Invalid-free
Crash state:
fuzz_die_cu_attrs.c
```


Summary: Use-of-uninitialized-value in xmlSwitchEncoding

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57431

```
Crash type: Use-of-uninitialized-value
Crash state:
xmlSwitchEncoding
xmlParsePEReference
xmlParseInternalSubset
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57448

```
Crash type: UNKNOWN WRITE
Crash state:
processCertificateElements
fuzz_tls_certificate.c
```


Summary: Heap-double-free in _dwarf_read_line_table_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57437

```
Crash type: Heap-double-free
Crash state:
_dwarf_read_line_table_header
dwarf_srcfiles
fuzz_srcfiles.c
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57443

```
Crash type: Heap-double-free
Crash state:
_dwarf_read_line_table_header
_dwarf_internal_srclines
dwarf_srclines_b
```


Summary: Global-buffer-overflow in xmlStrndup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57469

```
Crash type: Global-buffer-overflow READ 1
Crash state:
xmlStrndup
htmlParseSystemLiteral
htmlParseDocTypeDecl
```


Summary: Stack-buffer-overflow in ext11_work_out_bundles

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57494

```
Crash type: Stack-buffer-overflow WRITE 4
Crash state:
ext11_work_out_bundles
dissect_oran_c_section
dissect_oran
```


Summary: UNKNOWN READ in iv_put

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57495

```
Crash type: UNKNOWN READ
Crash state:
iv_put
mrb_obj_iv_set_force
mrb_vm_const_set
```


Summary: Global-buffer-overflow in read_coding_unit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57566

```
Crash type: Global-buffer-overflow READ 1
Crash state:
read_coding_unit
read_coding_quadtree
read_coding_quadtree
```


Summary: Heap-buffer-overflow in HtpRequestBodyHandleMultipart

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57578

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
HtpRequestBodyHandleMultipart
HTPCallbackRequestBodyData
htp_hook_run_all
```


Summary: Heap-double-free in xmlHashDefaultDeallocator

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57551

```
Crash type: Heap-double-free
Crash state:
xmlHashDefaultDeallocator
xmlHashFree
xmlFreeParserCtxt
```


Summary: Heap-buffer-overflow in bit_utf8_to_TU

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57586

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
bit_utf8_to_TU
dynapi_set_helper
dwg_dynapi_entity_set_value
```


Summary: Heap-buffer-overflow in OT::Layout::GPOS_impl::PairSet<OT::Layout::MediumTypes>::apply

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55287

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
OT::Layout::GPOS_impl::PairSet<OT::Layout::MediumTypes>::apply
OT::Layout::GPOS_impl::PairPosFormat1_3<OT::Layout::MediumTypes>::apply
bool OT::hb_accelerate_subtables_context_t::apply_to<OT::Layout::GPOS_impl::Pair
```


Summary: Heap-buffer-overflow in bit_utf8_to_TU

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57587

```
Crash type: Heap-buffer-overflow WRITE 2
Crash state:
bit_utf8_to_TU
json_wstring
json_AppInfo
```


Summary: Heap-buffer-overflow in bit_utf8_to_TU

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57589

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
bit_utf8_to_TU
dxf_header_read
dwg_read_dxf
```


Summary: Heap-buffer-overflow in unsigned long simdutf::haswell::convert_masked_utf8_to_utf16<

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57632

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
unsigned long simdutf::haswell::convert_masked_utf8_to_utf16<
simdutf::haswell::implementation::convert_utf8_to_utf16le
roundtrip.cc
```


Summary: Heap-buffer-overflow in add_complete_typeobj

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57614

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
add_complete_typeobj
ddsi_xt_type_add_typeobj
ddsi_type_add_typeobj
```


Summary: Heap-use-after-free in aiScene::~aiScene

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57656

```
Crash type: Heap-use-after-free READ 8
Crash state:
aiScene::~aiScene
Assimp::BatchLoader::~BatchLoader
Assimp::LWSImporter::InternReadFile
```


Summary: Heap-buffer-overflow in simdutf::haswell::implementation::convert_utf8_to_utf32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57670

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
simdutf::haswell::implementation::convert_utf8_to_utf32
roundtrip.cc
```


Summary: Heap-use-after-free in filename_cmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57678

```
Crash type: Heap-use-after-free READ 3
Crash state:
filename_cmp
debug_start_source
parse_stab
```


Summary: Heap-buffer-overflow in sas_read2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55308

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
sas_read2
sas7bcat_parse_block
readstat_parse_sas7bcat
```


Summary: Heap-use-after-free in mrb_str_hash_m

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57672

```
Crash type: Heap-use-after-free READ 1
Crash state:
mrb_str_hash_m
mrb_vm_exec
mrb_vm_run
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57673

```
Crash type: Heap-buffer-overflow WRITE 16
Crash state:
unsigned long simdutf::haswell::convert_masked_utf8_to_utf16<
simdutf::haswell::implementation::convert_utf8_to_utf16le
roundtrip.cc
```


Summary: Heap-use-after-free in mrb_gc_mark

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57703

```
Crash type: Heap-use-after-free READ 4
Crash state:
mrb_gc_mark
mrb_gc_mark_iv
gc_mark_children
```


Summary: Global-buffer-overflow in dwg_codepage_dxfstr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57723

```
Crash type: Global-buffer-overflow READ 8
Crash state:
dwg_codepage_dxfstr
dxf_header_write
dwg_write_dxf
```


Summary: Stack-buffer-overflow in fn_ElIn_evaluate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57745

```
Crash type: Stack-buffer-overflow WRITE 4
Crash state:
fn_ElIn_evaluate
pdfi_set_blackgeneration
GS_BG
```


Summary: Heap-buffer-overflow in _dwarf_memcpy_noswap_bytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57766

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
_dwarf_memcpy_noswap_bytes
_dwarf_extract_string_offset_via_str_offsets
dwarf_formstring
```


Summary: UNKNOWN READ in pdfi_read_cff_font

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57880

```
Crash type: UNKNOWN READ
Crash state:
pdfi_read_cff_font
pdfi_load_font_buffer
pdfi_load_font
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57884

```
Crash type: UNKNOWN READ
Crash state:
active_edges
intersect
_cairo_boxes_intersect
```

Summary: UNKNOWN READ in active_edges


Summary: UNKNOWN READ in log_set_max_level

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57912

```
Crash type: UNKNOWN READ
Crash state:
log_set_max_level
fuzz-journal-remote.c
centipede::RunOneInput
```


Summary: UNKNOWN READ in sd_event_new

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57913

```
Crash type: UNKNOWN READ
Crash state:
sd_event_new
fuzz-lldp-rx.c
centipede::RunOneInput
```


Summary: UNKNOWN READ in sd_event_default

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57915

```
Crash type: UNKNOWN READ
Crash state:
sd_event_default
dummy_server_init
fuzz-journald-audit.c
```


Summary: UNKNOWN READ in google_myanmar_tools::ZawgyiDetector::ZawgyiDetector

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57922

```
Crash type: UNKNOWN READ
Crash state:
google_myanmar_tools::ZawgyiDetector::ZawgyiDetector
zawgyi_detector_fuzz_target.cpp
centipede::RunOneInput
```


Summary: Heap-use-after-free in picture_copy_props

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57927

```
Crash type: Heap-use-after-free READ {*}
Crash state:
picture_copy_props
dav1d_picture_alloc_copy
dav1d_apply_grain
```


Summary: UNKNOWN READ in _hashmap_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57928

```
Crash type: UNKNOWN READ
Crash state:
_hashmap_free
journal_remote_server_destroy
fuzz-journal-remote.c
```


Summary: UNKNOWN READ in page_size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57929

```
Crash type: UNKNOWN READ
Crash state:
page_size
dns_packet_new
dns_resource_record_new_from_raw
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57911

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
bit_read_BB
dwg_decode_entity
dwg_decode_OLE2FRAME_private
```

Summary: Heap-buffer-overflow in bit_read_BB


Summary: UNKNOWN READ in memdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57933

```
Crash type: UNKNOWN READ
Crash state:
memdup
fuzz-bcd.c
centipede::RunOneInput
```


Summary: UNKNOWN READ in fmemopen_unlocked

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57936

```
Crash type: UNKNOWN READ
Crash state:
fmemopen_unlocked
fuzz.h
centipede::RunOneInput
```


Summary: Heap-use-after-free in zip_source_open

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55365

```
Crash type: Heap-use-after-free READ 1
Crash state:
zip_source_open
zip_source_open
_zip_open
```


Summary: UNKNOWN READ in memdup_suffix0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57937

```
Crash type: UNKNOWN READ
Crash state:
memdup_suffix0
fuzz-efi-string.c
centipede::RunOneInput
```


Summary: Heap-double-free in cache_bclose

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57939

```
Crash type: Heap-double-free
Crash state:
cache_bclose
bfd_close_all_done
fuzz_objdump.h
```


Summary: UNKNOWN READ in udev_rule_parse_value

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57950

```
Crash type: UNKNOWN READ
Crash state:
udev_rule_parse_value
fuzz-udev-rule-parse-value.c
centipede::RunOneInput
```


Summary: Heap-buffer-overflow in dwg_encode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57969

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
dwg_encode
llvmfuzz.c
```


Summary: Segv on unknown address in dwg_ref_get_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57981

```
Crash type: Segv on unknown address
Crash state:
dwg_ref_get_object
dwg_geojson_feature
dwg_geojson_object
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58035

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
ZSTD_decompressSequencesLong_bmi2
ZSTD_decompressSequencesLong
ZSTD_decompressBlock_internal
```

Summary: Heap-buffer-overflow in ZSTD_decompressSequencesLong_bmi2


Summary: Heap-use-after-free in ucl_hash_func

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58069

```
Crash type: Heap-use-after-free READ 8
Crash state:
ucl_hash_func
kh_resize_ucl_hash_node
kh_put_ucl_hash_node
```


Summary: Use-after-poison in str_new_frozen_buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58079

```
Crash type: Use-after-poison READ 8
Crash state:
str_new_frozen_buffer
fstr_update_callback
rb_st_update
```


Summary: Heap-buffer-overflow in OT::glyf_impl::SubsetGlyph::serialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58071

```
Crash type: Heap-buffer-overflow WRITE 2
Crash state:
OT::glyf_impl::SubsetGlyph::serialize
OT::glyf::subset
bool _try_subset<OT::glyf>
```


Summary: Heap-use-after-free in dynsec_clients__find

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58108

```
Crash type: Heap-use-after-free READ 8
Crash state:
dynsec_clients__find
client__free_item
dynsec_clients__cleanup
```


Summary: Heap-double-free in HashMgr::~HashMgr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58133

```
Crash type: Heap-double-free
Crash state:
HashMgr::~HashMgr
HunspellImpl::~HunspellImpl
Hunspell::~Hunspell
```


Summary: Heap-buffer-overflow in RegionItem::parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58152

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
RegionItem::parse
heif::HeifContext::interpret_heif_file
heif::HeifContext::read
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58150

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
RegionItem::parse
heif::HeifContext::interpret_heif_file
heif::HeifContext::read_from_memory
```


Summary: Heap-buffer-overflow in RegionGeometry_Polygon::parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58183

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
RegionGeometry_Polygon::parse
RegionItem::parse
heif::HeifContext::interpret_heif_file
```


Summary: Heap-buffer-overflow in ih264d_get_bits_h264

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58190

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ih264d_get_bits_h264
ih264d_parse_fgc
ih264d_parse_sei_payload
```


Summary: Heap-buffer-overflow in unicode_decode_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58201

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
unicode_decode_utf8
PyUnicode_DecodeUTF8
_PyPegen_formatted_value
```


Summary: Security exception in org.json.JSONArray.writeTo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58204

```
Crash type: Security exception
Crash state:
org.json.JSONArray.writeTo
org.json.JSONStringer.value
org.json.JSONStringer.peek
```


Summary: Heap-buffer-overflow in PyBytes_FromStringAndSize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58225

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
PyBytes_FromStringAndSize
do_mkvalue
va_build_stack
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55443

```
Crash type: Heap-use-after-free READ 2
Crash state:
gc_trace
gs_gc_reclaim
ireclaim
```

Summary: Heap-use-after-free in gc_trace


Summary: Heap-double-free in grk::DecompressCodeblock::release

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58285

```
Crash type: Heap-double-free
Crash state:
grk::DecompressCodeblock::release
grk::t1_part1::T1Part1::decompress
std::__1::__function::__func<grk::DecompressScheduler::scheduleBlocks
```


Summary: Heap-use-after-free in ih264_inter_pred_luma_vert_ssse3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58278

```
Crash type: Heap-use-after-free READ 16
Crash state:
ih264_inter_pred_luma_vert_ssse3
ih264d_motion_compensate_mp
isvcd_decode_recon_tfr_nmb_non_base_lyr
```


Summary: Heap-buffer-overflow in _libssh2_ntohu32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58291

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
_libssh2_ntohu32
packet_authagent_open
_libssh2_packet_add
```


Summary: Heap-buffer-overflow in tok_get_normal_mode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58295

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
tok_get_normal_mode
_PyTokenizer_Get
_PyPegen_tokenize_full_source_to_check_for_errors
```


Summary: Heap-buffer-overflow in mg_mqtt_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58319

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
mg_mqtt_parse
fuzz.c
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58344

```
Crash type: UNKNOWN WRITE
Crash state:
void std::__1::allocator_traits<std::__1::allocator<wabt::interp::HandlerDesc> >
void std::__1::vector<wabt::interp::HandlerDesc, std::__1::allocator<wabt::inter
std::__1::vector<wabt::interp::HandlerDesc, std::__1::allocator<wabt::interp::Ha
```

Summary: UNKNOWN WRITE in void std::__1::allocator_traits<std::__1::allocator<wabt::interp::HandlerDesc> >


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55451

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
parse_classes_64
classes
r_bin_object_set_items
```

Summary: Heap-buffer-overflow in parse_classes_64


Summary: UNKNOWN READ in cli_html_normalise

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58398

```
Crash type: UNKNOWN READ
Crash state:
cli_html_normalise
html_normalise_map
cli_scanhtml
```


Summary: Stack-buffer-overflow in pdfi_read_cff_dict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58405

```
Crash type: Stack-buffer-overflow WRITE 1
Crash state:
pdfi_read_cff_dict
pdfi_read_cff_dict
pdfi_read_cff_font
```


Summary: Heap-buffer-overflow in pdf_nextobject

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58475

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pdf_nextobject
find_length
pdf_extract_obj
```


Summary: Heap-buffer-overflow in flac__analyze_frame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58481

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
flac__analyze_frame
write_callback
write_audio_frame_to_client_
```


Summary: Heap-double-free in wolfCrypt_custom_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58484

```
Crash type: Heap-double-free
Crash state:
wolfCrypt_custom_free
wolfSSL_Free
FreeOcspRequest
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58502

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
H5MM_memcpy
H5O__cache_chk_serialize
H5C__generate_image
```

Summary: Heap-buffer-overflow in H5MM_memcpy


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58510

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
tok_get_normal_mode
_PyTokenizer_Get
_PyPegen_tokenize_full_source_to_check_for_errors
```


Summary: Heap-double-free in HashMgr::~HashMgr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58553

```
Crash type: Heap-double-free
Crash state:
HashMgr::~HashMgr
HunspellImpl::~HunspellImpl
Hunspell::~Hunspell
```


Summary: Heap-use-after-free in gc_mark_children

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58577

```
Crash type: Heap-use-after-free READ 4
Crash state:
gc_mark_children
incremental_gc
mrb_full_gc
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58622

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
H5FS__sect_link
H5FS_sect_add
H5MF__add_sect
```

Summary: Heap-buffer-overflow in H5FS__sect_link


Summary: UNKNOWN WRITE in hb_ot_layout_substitute_start

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58626

```
Crash type: UNKNOWN WRITE
Crash state:
hb_ot_layout_substitute_start
_hb_ot_shape
hb_shape_plan_execute
```


Summary: Heap-buffer-overflow in H5MM_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58658

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
H5MM_memcpy
H5O__alloc_chunk
H5O__alloc
```


Summary: UNKNOWN WRITE in OT::Layout::GPOS_impl::CursivePosFormat1::subset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58660

```
Crash type: UNKNOWN WRITE
Crash state:
OT::Layout::GPOS_impl::CursivePosFormat1::subset
hb_subset_context_t::return_t OT::Layout::GPOS_impl::PosLookupSubTable::dispatch
bool OT::subset_offset_array_arg_t<OT::ArrayOf<OT::OffsetTo<OT::Layout::GPOS_imp
```


Summary: UNKNOWN WRITE in bool OT::Layout::Common::CoverageFormat2_4<OT::Layout::MediumTypes>::serialize<h

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58671

```
Crash type: UNKNOWN WRITE
Crash state:
bool OT::Layout::Common::CoverageFormat2_4<OT::Layout::MediumTypes>::serialize<h
bool OT::Layout::Common::Coverage::serialize<hb_sorted_array_t<unsigned int cons
OT::Layout::GSUB_impl::AlternateSubstFormat1_2<OT::Layout::SmallTypes>::subset
```


Summary: Heap-buffer-overflow in void sort_r_simple<>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58662

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
void sort_r_simple<>
bool OT::ClassDef::serialize<hb_sorted_array_t<hb_pair_t<unsigned int, unsigned
OT::ClassDef_remap_and_serialize
```


Summary: Heap-use-after-free in zend_generator_dtor_storage

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55519

```
Crash type: Heap-use-after-free WRITE 4
Crash state:
zend_generator_dtor_storage
zend_objects_store_call_destructors
shutdown_destructors
```


Summary: UNKNOWN WRITE in bool OT::Layout::Common::Coverage::serialize<hb_map_iter_t<hb_map_iter_t<hb_filt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58663

```
Crash type: UNKNOWN WRITE
Crash state:
bool OT::Layout::Common::Coverage::serialize<hb_map_iter_t<hb_map_iter_t<hb_filt
OT::Layout::GSUB_impl::SingleSubstFormat2_4<OT::Layout::SmallTypes>::subset
hb_subset_context_t::return_t OT::Layout::GSUB_impl::SubstLookupSubTable::dispat
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58701

```
Crash type: UNKNOWN READ
Crash state:
H5FL__blk_gc_list
H5FL_garbage_coll
H5FL_term_package
```

Summary: UNKNOWN READ in H5FL__blk_gc_list


Summary: Use-of-uninitialized-value in wabt::BinaryReaderObjdump::PrintInitExpr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58694

```
Crash type: Use-of-uninitialized-value
Crash state:
wabt::BinaryReaderObjdump::PrintInitExpr
wabt::BinaryReaderObjdump::EndInitExpr
wabt::BinaryReaderObjdump::EndGlobalInitExpr
```


Summary: Heap-use-after-free in mrb_str_hash_m

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58723

```
Crash type: Heap-use-after-free READ 1
Crash state:
mrb_str_hash_m
mrb_funcall_with_block
mrb_funcall_argv
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58724

```
Crash type: Bad-cast
Crash state:
Bad-cast to Assimp::BaseImporter from invalid vptr
Assimp::Importer::ReadFile
Assimp::BatchLoader::LoadAll
```


Summary: Heap-buffer-overflow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58786

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
NULL```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58813

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
sdhci_write
memory_region_write_accessor
memory_region_dispatch_write
```

Summary: Heap-buffer-overflow in sdhci_write