Summary: Memcpy-param-overlap in ot::Cli::CoapSecure::Process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12679

```
Crash type: Memcpy-param-overlap
Crash state:
ot::Cli::CoapSecure::Process
ot::Cli::Interpreter::ProcessCoapSecure
ot::Cli::Interpreter::ProcessLine
```


Summary: Heap-use-after-free in WelsDec::SetUnRef

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18743

```
Crash type: Heap-use-after-free WRITE 1
Crash state:
WelsDec::SetUnRef
WelsDec::SlidingWindow
WelsDec::WelsMarkAsRef
```


Summary: Stack-buffer-overflow in ot::NetworkData::NetworkData::PrefixMatch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13333

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
ot::NetworkData::NetworkData::PrefixMatch
ot::NetworkData::LeaderBase::GetContext
ot::Mle::MleRouter::GetNeighbor
```


Summary: UNKNOWN WRITE in htp_connp_res_buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19323

```
Crash type: UNKNOWN WRITE
Crash state:
htp_connp_res_buffer
htp_connp_RES_LINE
htp_connp_res_data
```


Summary: Heap-buffer-overflow in ihevcd_mv_merge

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17196

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ihevcd_mv_merge
ihevcd_get_mv_ctb
ihevcd_parse_slice_data
```


Summary: Use-of-uninitialized-value in UA_base64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14625

```
Crash type: Use-of-uninitialized-value
Crash state:
UA_base64
ByteString_encodeJson
Variant_encodeJson
```


Summary: Heap-use-after-free in String_clear

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14567

```
Crash type: Heap-use-after-free READ 8
Crash state:
String_clear
clearStructure
UA_Array_delete
```


Summary: Heap-buffer-overflow in load

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15007

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
load
r_bin_object_new
r_bin_file_new_from_buffer
```


Summary: Use-of-uninitialized-value in printUInt32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14642

```
Crash type: Use-of-uninitialized-value
Crash state:
printUInt32
printU1ImmOperand
printInstruction
```


Summary: Heap-double-free in ares_parse_soa_reply

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21176

```
Crash type: Heap-double-free
Crash state:
ares_parse_soa_reply
ares-test-fuzz.c
ares_parse_soa_reply
```


Summary: Bad-free in sc_pkcs15_decode_prkdf_entry

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18482

```
Crash type: Bad-free
Crash state:
sc_pkcs15_decode_prkdf_entry
fuzz_pkcs15_decode.c
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18459

```
Crash type: Heap-use-after-free WRITE 1
Crash state:
WelsDec::SetUnRef
WelsDec::WelsDelLongFromListSetUnref
WelsDec::MMCOProcess
```


Summary: Heap-use-after-free in condition_free_list_type

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13878

```
Crash type: Heap-use-after-free READ 8
Crash state:
condition_free_list_type
link_config_free
link_load_one
```


Summary: Global-buffer-overflow in backup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18464

```
Crash type: Global-buffer-overflow READ 1
Crash state:
backup
peek
lex_config
```


Summary: Heap-use-after-free in icalparameter_new_from_value_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14737

```
Crash type: Heap-use-after-free READ 2
Crash state:
icalparameter_new_from_value_string
icalparser_add_line
icalparser_parse
```


Summary: UNKNOWN READ in ot::Coap::CoapBase::RemoveResource

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13369

```
Crash type: UNKNOWN READ
Crash state:
ot::Coap::CoapBase::RemoveResource
ot::MeshCoP::BorderAgent::Stop
ot::Mle::Mle::SetStateDetached
```


Summary: UNKNOWN WRITE in ZSTD_decodeLiteralsBlock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16541

```
Crash type: UNKNOWN WRITE
Crash state:
ZSTD_decodeLiteralsBlock
ZSTD_decompressBlock
ZSTD_decompressDCtx
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18458

```
Crash type: Heap-use-after-free WRITE 1
Crash state:
WelsDec::SetUnRef
WelsDec::SlidingWindow
WelsDec::WelsMarkAsRef
```


Summary: Heap-buffer-overflow in parse_sec_attr_44

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18798

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
parse_sec_attr_44
setcos_select_file
sc_select_file
```


Summary: Heap-buffer-overflow in r_read_le32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13942

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
r_read_le32
is_kernelcache
check_bytes
```


Summary: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18515

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
OT::IntType<unsigned short, 2u>::operator unsigned int
OT::ArrayOf<OT::IntType<unsigned short, 2u>, OT::IntType<unsigned short, 2u> >::
```


Summary: Heap-buffer-overflow in ihevcd_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18406

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ihevcd_process
ihevcd_process_thread
start_thread
```


Summary: Segv on unknown address in pvector_free_elem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22734

```
Crash type: Segv on unknown address
Crash state:
pvector_free_elem
vector_free_elems
r_vector_clear
```


Summary: Heap-buffer-overflow in ndpi_handle_ipv6_extension_headers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21719

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_handle_ipv6_extension_headers
ndpi_workflow_process_packet
fuzz_ndpi_reader.c
```


Summary: Stack-buffer-overflow in ot::Message::Write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15380

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
ot::Message::Write
ot::Message::Append
ot::Mle::Mle::AppendResponse
```


Summary: Heap-use-after-free in read_chunks_before_idat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16266

```
Crash type: Heap-use-after-free READ {*}
Crash state:
read_chunks_before_idat
get_ancillary
spng_decoded_image_size
```


Summary: Heap-buffer-overflow in BEInt<unsigned char, 1>::set

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13736

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
BEInt<unsigned char, 1>::set
CFF::CFFIndex<OT::IntType<unsigned int, 4u> >::set_offset_at
bool CFF::FDArray<OT::IntType<unsigned int, 4u> >::serialize<CFF::cff2_font_dict
```


Summary: Use-of-uninitialized-value in xmlOutputBufferWriteEscape

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15768

```
Crash type: Use-of-uninitialized-value
Crash state:
xmlOutputBufferWriteEscape
xmlNodeListDumpOutput
xmlNodeDumpOutputInternal
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14919

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
OT::IntType<unsigned short, 2u>::operator unsigned int
hb_map_iter_t<hb_map_iter_t<hb_array_t<OT::OffsetTo<OT::AxisValue, OT::IntType<u
```


Summary: Heap-double-free in sc_pkcs15_free_object_content

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18890

```
Crash type: Heap-double-free
Crash state:
sc_pkcs15_free_object_content
sc_pkcs15_free_object
fuzz_pkcs15_decode.c
```


Summary: Heap-buffer-overflow in ndpi_parse_packet_line_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22167

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
ndpi_parse_packet_line_info
ndpi_check_steam_http
ndpi_search_steam
```


Summary: Heap-buffer-overflow in XRef::getEntry

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12797

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
XRef::getEntry
Parser::makeStream
Parser::getObj
```


Summary: Heap-buffer-overflow in cras_rclient_message_from_client

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15058

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
cras_rclient_message_from_client
cras_rclient_buffer_from_client
rclient_message.cc
```


Summary: UNKNOWN READ in double_from_wkb_state

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18153

```
Crash type: UNKNOWN READ
Crash state:
double_from_wkb_state
ptarray_from_wkb_state
lwline_from_wkb_state
```


Summary: Use-of-uninitialized-value in print_crl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21153

```
Crash type: Use-of-uninitialized-value
Crash state:
print_crl
gnutls_x509_crl_print
gnutls_x509_crl_parser_fuzzer.c
```


Summary: Stack-buffer-overflow in ot::NetworkData::NetworkData::GetNextOnMeshPrefix

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13334

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
ot::NetworkData::NetworkData::GetNextOnMeshPrefix
ot::Dhcp6::Dhcp6Client::UpdateAddresses
ot::Mle::Mle::HandleStateChanged
```


Summary: Heap-buffer-overflow in r_buf_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15218

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
r_buf_read
parse_function_starts
init_items
```


Summary: Heap-buffer-overflow in walk_exports

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18321

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
walk_exports
get_symbols
get_main
```


Summary: Use-of-uninitialized-value in psnip_safe_size_mul

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17120

```
Crash type: Use-of-uninitialized-value
Crash state:
psnip_safe_size_mul
SafeMul
Mat_VarGetSize
```


Summary: Stack-buffer-overflow in ot::Ip6::OptionPadN::Init

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14854

```
Crash type: Stack-buffer-overflow WRITE 9
Crash state:
ot::Ip6::OptionPadN::Init
ot::Ip6::Ip6::RemoveMplOption
ot::Ip6::Ip6::ProcessReceiveCallback
```


Summary: Stack-buffer-overflow in ot::MeshCoP::Leader::HandlePetition

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13335

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
ot::MeshCoP::Leader::HandlePetition
ot::Coap::CoapBase::ProcessReceivedRequest
ot::Ip6::Udp::HandleMessage
```


Summary: UNKNOWN WRITE in vips_foreign_load_gif_render

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20613

```
Crash type: UNKNOWN WRITE
Crash state:
vips_foreign_load_gif_render
vips_foreign_load_gif_next_page
vips_foreign_load_gif_generate
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15914

```
Crash type: Use-of-uninitialized-value
Crash state:
xmlOutputBufferWriteEscape
xmlNodeDumpOutput
xsltSaveResultTo
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13537

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
ot::MeshCoP::Leader::HandlePetition
ot::Coap::CoapBase::ProcessReceivedRequest
ot::Ip6::Udp::HandleMessage
```


Summary: Heap-buffer-overflow in Sass::Prelexer::quoted_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15890

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Sass::Prelexer::quoted_string
char const* Sass::Parser::lex<&
Sass::Parser::parse_value_schema
```


Summary: Heap-use-after-free in WelsDec::DecreasePicBuff

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14423

```
Crash type: Heap-use-after-free READ 8
Crash state:
WelsDec::DecreasePicBuff
WelsRequestMem
SyncPictureResolutionExt
```


Summary: UNKNOWN READ in str_decref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18756

```
Crash type: UNKNOWN READ
Crash state:
str_decref
obj_free
mrb_gc_destroy
```


Summary: Heap-buffer-overflow in uri_decoder

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23815

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
uri_decoder
uri_decode
g_uri_parse_params
```


Summary: Heap-buffer-overflow in is_codefence

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23764

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
is_codefence
parse_listitem
parse_definition
```


Summary: Heap-buffer-overflow in uri_decoder

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23818

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
uri_decoder
g_uri_unescape_bytes
fuzz_uri_escape.c
```


Summary: Heap-double-free in mrb_default_allocf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23801

```
Crash type: Heap-double-free
Crash state:
mrb_default_allocf
mrb_free
obj_free
```


Summary: Heap-buffer-overflow in memvprintf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23715

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
memvprintf
print_message
ha_alert
```


Summary: Heap-use-after-free in check_content_type_and_change_protocol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23691

```
Crash type: Heap-use-after-free READ 2
Crash state:
check_content_type_and_change_protocol
ndpi_check_http_tcp
ndpi_search_http_tcp
```


Summary: Heap-buffer-overflow in OGR_RawField_IsUnset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23705

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
OGR_RawField_IsUnset
OGRFeature::IsFieldSetAndNotNull
OGRFeature::~OGRFeature
```


Summary: Index-out-of-bounds in der_tag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20753

```
Crash type: Index-out-of-bounds
Crash state:
der_tag
der_cmp
magiccheck
```


Summary: Heap-buffer-overflow in readcfgfile

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23653

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
readcfgfile
fuzz_cfg_parser.c
```


Summary: Heap-use-after-free in xmlParserPrintFileContextInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23765

```
Crash type: Heap-use-after-free READ 1
Crash state:
xmlParserPrintFileContextInternal
xmlReportError
__xmlRaiseError
```


Summary: Use-of-uninitialized-value in spng_read_fuzzer.c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23936

```
Crash type: Use-of-uninitialized-value
Crash state:
spng_read_fuzzer.c
spng_read_fuzzer.c
```


Summary: Heap-buffer-overflow in cras_channel_remix_conv_create

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23612

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
cras_channel_remix_conv_create
audio_thread_config_global_remix
ccr_handle_message_from_client
```


Summary: Heap-buffer-overflow in void arrow::internal::TransferBitmap<

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23868

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
void arrow::internal::TransferBitmap<
arrow::ConcatenateBitmaps
arrow::ConcatenateImpl::Concatenate
```


Summary: Heap-use-after-free in pixAverageRasterScans

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22760

```
Crash type: Heap-use-after-free READ 1
Crash state:
pixAverageRasterScans
pixExtractBarcodeCrossings
pixExtractBarcodeWidths1
```


Summary: Heap-buffer-overflow in arrow::ConcatenateBuffers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23848

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
arrow::ConcatenateBuffers
arrow::ConcatenateImpl::Visit
arrow::Status arrow::VisitTypeInline<arrow::ConcatenateImpl>
```


Summary: Heap-buffer-overflow in blosclz_compress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23794

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
blosclz_compress
blosc_c
do_job
```


Summary: Heap-buffer-overflow in perfetto::trace_processor::ClockTracker::ConvertSlowpath

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23149

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
perfetto::trace_processor::ClockTracker::ConvertSlowpath
perfetto::trace_processor::ClockTracker::Convert
perfetto::trace_processor::ClockTracker::ToTraceTime
```


Summary: Use-of-uninitialized-value in jbig2_text_region

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21571

```
Crash type: Use-of-uninitialized-value
Crash state:
jbig2_text_region
jbig2_parse_segment
jbig2_complete_page
```


Summary: Heap-buffer-overflow in __libcpp_strstr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23601

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
__libcpp_strstr
strstr
pcpp::SipRequestFirstLine::parseVersion
```


Summary: Heap-buffer-overflow in pcpp::SSLCertificateRequestMessage::SSLCertificateRequestMessage

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23592

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pcpp::SSLCertificateRequestMessage::SSLCertificateRequestMessage
pcpp::SSLHandshakeMessage::createHandhakeMessage
pcpp::SSLHandshakeLayer::SSLHandshakeLayer
```


Summary: Heap-buffer-overflow in ndpi_search_kerberos

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23021

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_search_kerberos
check_ndpi_udp_flow_func
ndpi_check_flow_func
```


Summary: Use-of-uninitialized-value in blosc_run_decompression_with_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23826

```
Crash type: Use-of-uninitialized-value
Crash state:
blosc_run_decompression_with_context
blosc_decompress
fuzz_decompress.c
```


Summary: Negative-size-param in arrow::ConcatenateBuffers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24101

```
Crash type: Negative-size-param
Crash state:
arrow::ConcatenateBuffers
arrow::ConcatenateImpl::Visit
arrow::Status arrow::VisitTypeInline<arrow::ConcatenateImpl>
```


Summary: Heap-use-after-free in void draco::Metadata::AddEntry<std::__1::vector<unsigned char, std::__1::allocat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24044

```
Crash type: Heap-use-after-free READ 8
Crash state:
void draco::Metadata::AddEntry<std::__1::vector<unsigned char, std::__1::allocat
draco::MetadataDecoder::DecodeEntry
draco::MetadataDecoder::DecodeMetadata
```


Summary: Heap-buffer-overflow in ndpi_check_spotify

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22912

```
Crash type: Heap-buffer-overflow READ 7
Crash state:
ndpi_check_spotify
ndpi_search_spotify
check_ndpi_udp_flow_func
```


Summary: Segv on unknown address in ndpi_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22676

```
Crash type: Segv on unknown address
Crash state:
ndpi_strdup
process_ndpi_collected_info
packet_processing
```


Summary: Heap-buffer-overflow in __libcpp_memchr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23328

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
__libcpp_memchr
memchr
pcpp::HeaderField::HeaderField
```


Summary: UNKNOWN READ in H5O_dtype_decode_helper

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23320

```
Crash type: UNKNOWN READ
Crash state:
H5O_dtype_decode_helper
H5O_dtype_shared_decode
H5O_attr_shared_decode
```


Summary: UNKNOWN READ in wabt::BinaryReaderIR::OnFunctionSymbol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20364

```
Crash type: UNKNOWN READ
Crash state:
wabt::BinaryReaderIR::OnFunctionSymbol
wabt::BinaryReader::ReadLinkingSection
wabt::BinaryReader::ReadCustomSection
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24018

```
Crash type: Bad-cast
Crash state:
Bad-cast to zmq::session_base_t from invalid vptr
zmq::stream_engine_base_t::in_event_internal
zmq::stream_engine_base_t::in_event
```


Summary: Heap-buffer-overflow in sctp_handle_packet_dropped

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23656

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
sctp_handle_packet_dropped
sctp_process_control
sctp_common_input_processing
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23887

```
Crash type: UNKNOWN READ
Crash state:
H5T__bit_find
H5T__conv_i_i
H5T_convert
```

Summary: UNKNOWN READ in H5T__bit_find


Summary: Heap-use-after-free in llvm_ks::X86Operand::getToken

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22850

```
Crash type: Heap-use-after-free READ 4
Crash state:
llvm_ks::X86Operand::getToken
X86AsmParser::MatchAndEmitATTInstruction
X86AsmParser::MatchAndEmitInstruction
```


Summary: Use-of-uninitialized-value in check_exif

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22714

```
Crash type: Use-of-uninitialized-value
Crash state:
check_exif
read_non_idat_chunks
read_chunks
```


Summary: UNKNOWN READ in BZ2_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15639

```
Crash type: UNKNOWN READ
Crash state:
BZ2_decompress
BZ2_bzDecompress
ft_bzip2_file_fill_output
```


Summary: Use-of-uninitialized-value in ihevc_inter_pred_chroma_copy_ssse3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23197

```
Crash type: Use-of-uninitialized-value
Crash state:
ihevc_inter_pred_chroma_copy_ssse3
ihevcd_inter_pred_ctb
ihevcd_process
```


Summary: Use-of-uninitialized-value in Splash::pipeRunSimpleXBGR8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23086

```
Crash type: Use-of-uninitialized-value
Crash state:
Splash::pipeRunSimpleXBGR8
Splash::blitImage
Splash::drawImage
```


Summary: Heap-buffer-overflow in ndpi_search_setup_iax

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23831

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_search_setup_iax
ndpi_search_iax
check_ndpi_udp_flow_func
```


Summary: Use-of-uninitialized-value in Mat_VarRead5

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17118

```
Crash type: Use-of-uninitialized-value
Crash state:
Mat_VarRead5
Mat_VarRead5
Mat_VarRead5
```


Summary: Use-of-uninitialized-value in MipsAsmParser::isPicAndNotNxxAbi

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22778

```
Crash type: Use-of-uninitialized-value
Crash state:
MipsAsmParser::isPicAndNotNxxAbi
MipsAsmParser::processInstruction
MipsAsmParser::MatchAndEmitInstruction
```


Summary: Heap-buffer-overflow in ReadInt32DataDouble

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21421

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
ReadInt32DataDouble
ReadInt32Data
Mat_VarRead4
```


Summary: Heap-buffer-overflow in findNextBorderPixel

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23433

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
findNextBorderPixel
pixGetHoleBorder
pixGetCCBorders
```


Summary: UNKNOWN READ in std::__1::__tree<std::__1::__value_type<std::__1::basic_string<char, std::__1::c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24051

```
Crash type: UNKNOWN READ
Crash state:
std::__1::__tree<std::__1::__value_type<std::__1::basic_string<char, std::__1::c
std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<std::__1::basic_
std::__1::map<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1
```


Summary: UNKNOWN READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22234

```
Crash type: UNKNOWN READ
Crash state:
NULL```


Summary: Use-of-uninitialized-value in read_markers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23581

```
Crash type: Use-of-uninitialized-value
Crash state:
read_markers
consume_markers
jpeg_consume_input
```


Summary: UNKNOWN READ in H5MM_xstrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17335

```
Crash type: UNKNOWN READ
Crash state:
H5MM_xstrdup
H5G__ent_to_link
H5G__node_iterate
```


Summary: Segv on unknown address in process_ndpi_collected_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22122

```
Crash type: Segv on unknown address
Crash state:
process_ndpi_collected_info
packet_processing
ndpi_workflow_process_packet
```


Summary: Use-of-uninitialized-value in pcap_filter_with_aux_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22220

```
Crash type: Use-of-uninitialized-value
Crash state:
pcap_filter_with_aux_data
pcap_filter
pcap_offline_filter
```


Summary: Heap-buffer-overflow in ndpi_netbios_name_interpret

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21809

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_netbios_name_interpret
ndpi_int_netbios_add_connection
check_ndpi_udp_flow_func
```


Summary: Use-of-uninitialized-value in inflate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17121

```
Crash type: Use-of-uninitialized-value
Crash state:
inflate
InflateRankDims
ReadNextStructField
```


Summary: Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22224

```
Crash type: Use-of-uninitialized-value
Crash state:
fuzzing::memory::memory_test_msan
fuzzing::memory::memory_test
FLAC::Decoder::FuzzerStream::write_callback
```


Summary: Heap-buffer-overflow in template_image_compose_opt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20332

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
template_image_compose_opt
jbig2_image_compose_opt_REPLACE
jbig2_image_compose
```


Summary: Heap-buffer-overflow in ndpi_workflow_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22755

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_workflow_process_packet
fuzz_ndpi_reader.c
```


Summary: Use-of-uninitialized-value in jbig2_arith_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23762

```
Crash type: Use-of-uninitialized-value
Crash state:
jbig2_arith_decode
jbig2_decode_refinement_TPGRON
jbig2_decode_refinement_region
```


Summary: Object-size in std::__1::vector<wabt::DataSegment*, std::__1::allocator<wabt::DataSegment*> >::

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20367

```
Crash type: Object-size
Crash state:
std::__1::vector<wabt::DataSegment*, std::__1::allocator<wabt::DataSegment*> >::
wabt::BinaryReaderIR::OnDataSymbol
wabt::BinaryReader::ReadLinkingSection
```


Summary: UNKNOWN READ in std::__1::_MetaBase<__can_be_converted_to_string_view<char, std::__1::char_trait

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24057

```
Crash type: UNKNOWN READ
Crash state:
std::__1::_MetaBase<__can_be_converted_to_string_view<char, std::__1::char_trait
bool std::__1::operator<<char, std::__1::char_traits<char>, std::__1::allocator<
std::__1::__tree_iterator<std::__1::__value_type<std::__1::basic_string<char, st
```


Summary: Index-out-of-bounds in tcg_liveness_analysis_arm

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23971

```
Crash type: Index-out-of-bounds
Crash state:
tcg_liveness_analysis_arm
tcg_gen_code_arm
cpu_arm_gen_code_arm
```


Summary: Use-of-uninitialized-value in llvm_ks::isIntN

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22920

```
Crash type: Use-of-uninitialized-value
Crash state:
llvm_ks::isIntN
X86AsmBackend::applyFixup
llvm_ks::MCAssembler::layout
```


Summary: Heap-use-after-free in draco::Metadata::AddSubMetadata

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24059

```
Crash type: Heap-use-after-free READ 8
Crash state:
draco::Metadata::AddSubMetadata
draco::MetadataDecoder::DecodeMetadata
draco::MetadataDecoder::DecodeGeometryMetadata
```


Summary: Heap-use-after-free in check_content_type_and_change_protocol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23834

```
Crash type: Heap-use-after-free READ 2
Crash state:
check_content_type_and_change_protocol
ndpi_check_http_tcp
ndpi_search_http_tcp
```


Summary: Heap-buffer-overflow in CRYPTO_128_wrap

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22836

```
Crash type: Heap-buffer-overflow WRITE 16
Crash state:
CRYPTO_128_wrap
aes_wrap_cipher_internal
aes_wrap_cipher
```


Summary: Heap-buffer-overflow in g_string_insert_len

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23816

```
Crash type: Heap-buffer-overflow READ 5
Crash state:
g_string_insert_len
g_string_append_len
_uri_encoder
```


Summary: Heap-buffer-overflow in Hacl_Chacha20PolyNUMBER_256_aead_decrypt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23934

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Hacl_Chacha20PolyNUMBER_256_aead_decrypt
ChaCha20PolyNUMBER_Open
sftk_ChaCha20PolyNUMBER_Decrypt
```


Summary: UNKNOWN READ in H5G_node_cmp3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17337

```
Crash type: UNKNOWN READ
Crash state:
H5G_node_cmp3
H5B_find
H5G__stab_lookup
```


Summary: Heap-buffer-overflow in H5HG_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18827

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
H5HG_read
H5T_vlen_disk_read
H5T__conv_vlen
```


Summary: UNKNOWN WRITE in helper_wfe_arm

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20245

```
Crash type: UNKNOWN WRITE
Crash state:
helper_wfe_arm
```


Summary: Heap-buffer-overflow in yr_object_set_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402

```
Crash type: Heap-buffer-overflow READ 13
Crash state:
yr_object_set_string
dex_parse
dex__load
```


Summary: Heap-buffer-overflow in H5A_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18943

```
Crash type: Heap-buffer-overflow WRITE 3
Crash state:
H5A_read
H5Aread
Mat_H5ReadVarInfo
```


Summary: Heap-buffer-overflow in uni_utf8_get_char_n

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23513

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
uni_utf8_get_char_n
smtp_command_parse_parameters
smtp_command_parse_line
```


Summary: Use-of-uninitialized-value in isMatchAtCPBoundary

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19497

```
Crash type: Use-of-uninitialized-value
Crash state:
isMatchAtCPBoundary
u_strFindFirst_66
icu_66::UnicodeString::indexOf
```


Summary: Heap-buffer-overflow in std::__1::char_traits<char>::compare

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22358

```
Crash type: Heap-buffer-overflow READ 6
Crash state:
std::__1::char_traits<char>::compare
wabt::string_view::compare
wabt::operator==
```


Summary: Use-of-uninitialized-value in ycck_cmyk_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18732

```
Crash type: Use-of-uninitialized-value
Crash state:
ycck_cmyk_convert
sep_upsample
process_data_simple_main
```


Summary: Heap-buffer-overflow in dotnet_parse_tilde_2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19591

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
dotnet_parse_tilde_2
dotnet_parse_tilde
dotnet_parse_com
```


Summary: Dynamic-stack-buffer-overflow in janus_rtcp_incoming_transport_cc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20529

```
Crash type: Dynamic-stack-buffer-overflow READ 2
Crash state:
janus_rtcp_incoming_transport_cc
janus_rtcp_fix_ssrc
rtcp_fuzzer.c
```


Summary: Use-of-uninitialized-value in Mat_VarRead5

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17115

```
Crash type: Use-of-uninitialized-value
Crash state:
Mat_VarRead5
ReadNextStructField
Mat_VarReadNextInfo5
```


Summary: Use-of-uninitialized-value in H5MM_xstrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21457

```
Crash type: Use-of-uninitialized-value
Crash state:
H5MM_xstrdup
H5E_push_stack
H5E_printf_stack
```


Summary: Use-of-uninitialized-value in llvm_ks::MCAssembler::computeFragmentSize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22482

```
Crash type: Use-of-uninitialized-value
Crash state:
llvm_ks::MCAssembler::computeFragmentSize
llvm_ks::MCAsmLayout::layoutFragment
llvm_ks::MCAsmLayout::ensureValid
```


Summary: UNKNOWN READ in std::__1::__hash_node_base<std::__1::__hash_node<std::__1::__hash_value_type<std

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20959

```
Crash type: UNKNOWN READ
Crash state:
std::__1::__hash_node_base<std::__1::__hash_node<std::__1::__hash_value_type<std
std::__1::__hash_table<std::__1::__hash_value_type<std::__1::basic_string<char,
std::__1::__hash_table<std::__1::__hash_value_type<std::__1::basic_string<char,
```


Summary: Use-of-uninitialized-value in deflate_slow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18745

```
Crash type: Use-of-uninitialized-value
Crash state:
deflate_slow
deflate
Pl_Flate::handleData
```


Summary: UNKNOWN READ in H5VM_memcpyvv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17228

```
Crash type: UNKNOWN READ
Crash state:
H5VM_memcpyvv
H5D__compact_readvv
H5D__select_io
```


Summary: Heap-buffer-overflow in H5O_fill_new_shared_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18810

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
H5O_fill_new_shared_decode
H5O_msg_read_oh
H5O_msg_read
```


Summary: UNKNOWN READ in H5O_sdspace_shared_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19220

```
Crash type: UNKNOWN READ
Crash state:
H5O_sdspace_shared_decode
H5O_attr_shared_decode
H5O_msg_iterate_real
```


Summary: Heap-buffer-overflow in bool arrow::util::RleDecoder::NextCounts<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20735

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
bool arrow::util::RleDecoder::NextCounts<int>
parquet::DictByteArrayDecoderImpl::DecodeArrowDense
parquet::DictByteArrayDecoderImpl::DecodeArrow
```


Summary: Use-of-uninitialized-value in printUInt32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14912

```
Crash type: Use-of-uninitialized-value
Crash state:
printUInt32
printU1ImmOperand
printInstruction
```


Summary: Segv on unknown address in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22273

```
Crash type: Segv on unknown address
Crash state:
std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
```


Summary: Use-of-uninitialized-value in std::__1::vector<std::__1::vector<Sass::Extension, std::__1::allocator<Sass::Ext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21223

```
Crash type: Use-of-uninitialized-value
Crash state:
std::__1::vector<std::__1::vector<Sass::Extension, std::__1::allocator<Sass::Ext
Sass::Extender::extendCompound
Sass::Extender::extendComplex
```


Summary: Use-of-uninitialized-value in QPDFTokenizer::isSpace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20391

```
Crash type: Use-of-uninitialized-value
Crash state:
QPDFTokenizer::isSpace
QPDFTokenizer::presentCharacter
QPDFTokenizer::readToken
```


Summary: Heap-buffer-overflow in H5O_attr_shared_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18806

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
H5O_attr_shared_decode
H5O_msg_iterate_real
H5O_attr_open_by_name
```


Summary: UNKNOWN READ in icu_64::UCharsTrie::branchNext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15671

```
Crash type: UNKNOWN READ
Crash state:
icu_64::UCharsTrie::branchNext
icu_64::UCharsTrie::nextImpl
icu_64::UCharsTrie::next
```


Summary: Heap-buffer-overflow in icu_64::CollationIterator::appendCEsFromCE32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15613

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
icu_64::CollationIterator::appendCEsFromCE32
icu_64::DataBuilderCollationIterator::fetchCEs
icu_64::CollationDataBuilder::getCEs
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21808

```
Crash type: Use-of-uninitialized-value
Crash state:
fetchARGB32ToRGBA64PM_avx2
blend_untransformed_generic_rgb64
fillRect_normalized
```

Summary: Use-of-uninitialized-value in fetchARGB32ToRGBA64PM_avx2


Summary: Heap-buffer-overflow in Fax3Decode2D

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21044

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
Fax3Decode2D
TIFFReadEncodedStrip
GTiffDataset::ReadStrile
```


Summary: UNKNOWN READ in H5FD_sec2_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19241

```
Crash type: UNKNOWN READ
Crash state:
H5FD_sec2_read
H5FD_read
H5F_sblock_load
```


Summary: Use-of-uninitialized-value in tun_key_to_attr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22026

```
Crash type: Use-of-uninitialized-value
Crash state:
tun_key_to_attr
odp_flow_key_from_flow__
parse_keys
```


Summary: Use-of-uninitialized-value in format_u8x

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21426

```
Crash type: Use-of-uninitialized-value
Crash state:
format_u8x
format_odp_tun_gtpu_opt
format_odp_tun_attr
```


Summary: Use-of-uninitialized-value in ndpi_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22475

```
Crash type: Use-of-uninitialized-value
Crash state:
ndpi_strdup
processClientServerHello
processTLSBlock
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21783

```
Crash type: Use-of-uninitialized-value
Crash state:
XCFImageFormat::mergeRGBToRGB
XCFImageFormat::mergeLayerIntoImage
XCFImageFormat::loadLayer
```

Summary: Use-of-uninitialized-value in XCFImageFormat::mergeRGBToRGB


Summary: Use-of-uninitialized-value in Mat_VarReadNumeric5

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17112

```
Crash type: Use-of-uninitialized-value
Crash state:
Mat_VarReadNumeric5
Mat_VarRead5
ReadData
```


Summary: Use-of-uninitialized-value in jumpOverRec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20112

```
Crash type: Use-of-uninitialized-value
Crash state:
jumpOverRec
jumpOverRec
jumpOverRec
```


Summary: Segv on unknown address in cbor_decref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21386

```
Crash type: Segv on unknown address
Crash state:
cbor_decref
cbor_decref
cbor_load
```


Summary: Heap-buffer-overflow in smtp_command_parse_line

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23514

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
smtp_command_parse_line
smtp_command_parse
smtp_command_parse_next
```


Summary: Heap-buffer-overflow in read_uleb128

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18549

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
read_uleb128
walk_exports
get_symbols
```


Summary: Stack-use-after-scope in coolkey_apdu_io

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23979

```
Crash type: Stack-use-after-scope READ 8
Crash state:
coolkey_apdu_io
coolkey_rsa_op
coolkey_compute_crypt
```


Summary: Use-of-uninitialized-value in RGBTOHLS

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22740

```
Crash type: Use-of-uninitialized-value
Crash state:
RGBTOHLS
XCFImageFormat::mergeRGBToRGB
XCFImageFormat::mergeLayerIntoImage
```


Summary: Heap-use-after-free in __xmlRaiseError

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23120

```
Crash type: Heap-use-after-free READ 2
Crash state:
__xmlRaiseError
xmlErrValidNode
xmlValidateRef
```


Summary: Heap-buffer-overflow in ccr_handle_message_from_client

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23965

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ccr_handle_message_from_client
cras_rclient_buffer_from_client
rclient_message.cc
```


Summary: Heap-buffer-overflow in hermes::parser::JSLexer::consumeBracedCodePoint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23725

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
hermes::parser::JSLexer::consumeBracedCodePoint
hermes::parser::JSLexer::consumeUnicodeEscape
hermes::parser::JSLexer::advance
```


Summary: Index-out-of-bounds in QUnicodeTables::qGetProp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24266

```
Crash type: Index-out-of-bounds
Crash state:
QUnicodeTables::qGetProp
QString QUnicodeTables::convertCase<QString>
QString::toLower_helper
```


Summary: Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24134

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
rasteropGeneralLow
rasteropLow
pixRasterop
```


Summary: Heap-use-after-free in xmlParserPrintFileContextInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24055

```
Crash type: Heap-use-after-free READ 1
Crash state:
xmlParserPrintFileContextInternal
xmlReportError
__xmlRaiseError
```


Summary: Use-of-uninitialized-value in zmq::stream_engine_base_t::out_event

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24200

```
Crash type: Use-of-uninitialized-value
Crash state:
zmq::stream_engine_base_t::out_event
zmq::epoll_t::loop
zmq::worker_poller_base_t::worker_routine
```


Summary: Heap-buffer-overflow in arrow::Status arrow::ConcatenateOffsets<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23916

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
arrow::Status arrow::ConcatenateOffsets<int>
arrow::ConcatenateImpl::Visit
arrow::Status arrow::VisitTypeInline<arrow::ConcatenateImpl>
```


Summary: Use-of-uninitialized-value in ndpi_fill_protocol_category

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21356

```
Crash type: Use-of-uninitialized-value
Crash state:
ndpi_fill_protocol_category
ndpi_detection_process_packet
fuzz_process_packet.c
```


Summary: Heap-buffer-overflow in sas_read4

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12576

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
sas_read4
sas7bdat_parse_page_pass1
sas7bdat_parse_meta_pages_pass1
```


Summary: Heap-buffer-overflow in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayVisitor>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21039

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayVisitor>
arrow::internal::ValidateArray
arrow::RecordBatch::Validate
```


Summary: Heap-buffer-overflow in ndpi_search_oracle

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21780

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_search_oracle
check_ndpi_tcp_flow_func
ndpi_detection_process_packet
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21363

```
Crash type: Use-of-uninitialized-value
Crash state:
ndpi_strdup
processClientServerHello
processTLSBlock
```


Summary: Heap-buffer-overflow in ndpi_parse_packet_line_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22169

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
ndpi_parse_packet_line_info
ndpi_search_mail_smtp_tcp
check_ndpi_tcp_flow_func
```


Summary: Heap-buffer-overflow in pcpp::SSLServerHelloMessage::getSessionIDLength

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22523

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pcpp::SSLServerHelloMessage::getSessionIDLength
pcpp::SSLServerHelloMessage::SSLServerHelloMessage
pcpp::SSLHandshakeMessage::createHandhakeMessage
```


Summary: Heap-buffer-overflow in ndpi_search_h323

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22342

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_search_h323
check_ndpi_udp_flow_func
ndpi_detection_process_packet
```


Summary: Global-buffer-overflow in draco::MeshEdgebreakerDecoderImpl<draco::MeshEdgebreakerTraversalValenceDecoder>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23419

```
Crash type: Global-buffer-overflow READ 4
Crash state:
draco::MeshEdgebreakerDecoderImpl<draco::MeshEdgebreakerTraversalValenceDecoder>
draco::MeshEdgebreakerDecoderImpl<draco::MeshEdgebreakerTraversalValenceDecoder>
draco::MeshDecoder::DecodeGeometryData
```


Summary: Heap-buffer-overflow in LogLuv24toXYZ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14011

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
LogLuv24toXYZ
Luv24toXYZ
LogLuvDecode24
```


Summary: Use-of-uninitialized-value in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22087

```
Crash type: Use-of-uninitialized-value
Crash state:
std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
pcpp::IDnsResource::IDnsResource
pcpp::DnsQuery::DnsQuery
```


Summary: UNKNOWN WRITE in ideint_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16813

```
Crash type: UNKNOWN WRITE
Crash state:
ideint_process
impeg2d_deinterlace
impeg2d_dec_pic_data_thread
```


Summary: Global-buffer-overflow in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20181

```
Crash type: Global-buffer-overflow READ 1
Crash state:
arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>
arrow::internal::ValidateArrayData
arrow::RecordBatch::ValidateFull
```


Summary: Heap-use-after-free in surround51_to_stereo_downmix_mtx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21113

```
Crash type: Heap-use-after-free WRITE 4
Crash state:
surround51_to_stereo_downmix_mtx
cras_fmt_conv_create
config_format_converter
```


Summary: Heap-buffer-overflow in gc_mark_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19780

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
gc_mark_string
gc_trace
gs_gc_reclaim
```


Summary: Heap-buffer-overflow in ihevcd_mv_pred

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16894

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ihevcd_mv_pred
ihevcd_get_mv_ctb
ihevcd_parse_slice_data
```


Summary: Heap-buffer-overflow in pcpp::HeaderField::HeaderField

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22528

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pcpp::HeaderField::HeaderField
pcpp::TextBasedProtocolMessage::parseFields
pcpp::SipResponseLayer::SipResponseLayer
```


Summary: Heap-buffer-overflow in pcpp::SSLExtension::getLength

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22529

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
pcpp::SSLExtension::getLength
pcpp::SSLExtension::getTotalLength
pcpp::SSLServerHelloMessage::SSLServerHelloMessage
```


Summary: Heap-buffer-overflow in surround51_to_stereo_downmix_mtx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22402

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
surround51_to_stereo_downmix_mtx
cras_fmt_conv_create
config_format_converter
```


Summary: Use-of-uninitialized-value in jbig2_arith_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20493

```
Crash type: Use-of-uninitialized-value
Crash state:
jbig2_arith_decode
jbig2_decode_generic_template0_TPGDON
jbig2_immediate_generic_region
```


Summary: Use-of-uninitialized-value in adler32_z

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13317

```
Crash type: Use-of-uninitialized-value
Crash state:
adler32_z
inflate
ZIPDecode
```


Summary: UNKNOWN WRITE in vcf_parse_format

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24097

```
Crash type: UNKNOWN WRITE
Crash state:
vcf_parse_format
vcf_parse
vcf_read
```


Summary: Heap-buffer-overflow in ndpi_workflow_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20644

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_workflow_process_packet
fuzz_ndpi_reader.c
HonggfuzzPersistentLoop
```


Summary: Heap-buffer-overflow in hts_log

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18152

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
hts_log
bam_read1
sam_read1
```


Summary: Container-overflow in yysmiles_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22242

```
Crash type: Container-overflow READ 8
Crash state:
yysmiles_parse
RDKit::smiles_parse_helper
RDKit::smiles_parse
```


Summary: Heap-buffer-overflow in logfmt_parser

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21953

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
logfmt_parser
flb_parser_logfmt_do
parse_logfmt_fuzzer.c
```


Summary: Use-of-uninitialized-value in processCertificateElements

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22864

```
Crash type: Use-of-uninitialized-value
Crash state:
processCertificateElements
processCertificate
processTLSBlock
```


Summary: Stack-buffer-overflow in pgp_parse_algo_attr_blob

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19548

```
Crash type: Stack-buffer-overflow WRITE 4
Crash state:
pgp_parse_algo_attr_blob
pgp_get_card_features
pgp_init
```


Summary: Use-of-uninitialized-value in file_vprintf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20702

```
Crash type: Use-of-uninitialized-value
Crash state:
file_vprintf
file_printf
mget
```


Summary: Heap-buffer-overflow in ndpi_search_irc_tcp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21346

```
Crash type: Heap-buffer-overflow READ 7
Crash state:
ndpi_search_irc_tcp
check_ndpi_tcp_flow_func
ndpi_detection_process_packet
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22837

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pcpp::HeaderField::HeaderField
pcpp::TextBasedProtocolMessage::parseFields
pcpp::SipResponseLayer::SipResponseLayer
```


Summary: Heap-buffer-overflow in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20113

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>
arrow::internal::ValidateArrayData
arrow::RecordBatch::ValidateFull
```


Summary: Heap-buffer-overflow in Json::OurReader::readComment

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18140

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Json::OurReader::readComment
Json::OurReader::readToken
Json::OurReader::parse
```


Summary: Segv on unknown address in draco::MeshPredictionSchemeTexCoordsDecoder<int, draco::PredictionSchemeWrapDeco

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23414

```
Crash type: Segv on unknown address
Crash state:
draco::MeshPredictionSchemeTexCoordsDecoder<int, draco::PredictionSchemeWrapDeco
draco::MeshPredictionSchemeTexCoordsDecoder<int, draco::PredictionSchemeWrapDeco
draco::SequentialIntegerAttributeDecoder::DecodeIntegerValues
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20163

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
surround51_to_stereo_downmix_mtx
cras_fmt_conv_create
config_format_converter
```


Summary: Use-of-uninitialized-value in pcpp::SSLClientHelloMessage::getSessionIDLength

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23022

```
Crash type: Use-of-uninitialized-value
Crash state:
pcpp::SSLClientHelloMessage::getSessionIDLength
pcpp::SSLClientHelloMessage::SSLClientHelloMessage
pcpp::SSLHandshakeMessage::createHandhakeMessage
```


Summary: UNKNOWN in TIFFReadRGBATileExt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13277

```
Crash type: UNKNOWN
Crash state:
TIFFReadRGBATileExt
cv::TiffDecoder::readData
cv::imread
```


Summary: UNKNOWN READ in FLAC__crc16_update_words32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16457

```
Crash type: UNKNOWN READ
Crash state:
FLAC__crc16_update_words32
crc16_update_block_
bitreader_read_from_client_
```


Summary: Heap-buffer-overflow in ndpi_search_oscar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20540

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ndpi_search_oscar
check_ndpi_tcp_flow_func
ndpi_detection_process_packet
```


Summary: Stack-buffer-overflow in write_png_comment

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16154

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
write_png_comment
vips_slist_map2
vips_image_map
```


Summary: Heap-buffer-overflow in getTLScertificate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19466

```
Crash type: Heap-buffer-overflow READ 6
Crash state:
getTLScertificate
tlsDetectProtocolFromCertificate
ndpi_search_tls_tcp_udp
```


Summary: Heap-buffer-overflow in hts_md5_update

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20694

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
hts_md5_update
cram_decode_slice
cram_next_slice
```


Summary: UNKNOWN WRITE in vcf_parse_format

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21139

```
Crash type: UNKNOWN WRITE
Crash state:
vcf_parse_format
vcf_parse
view_vcf
```


Summary: Heap-buffer-overflow in sp_tohex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29185

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
sp_tohex
sp_toradix
cryptofuzz::module::wolfCrypt_bignum::Bignum::baseConversion
```


Summary: Dynamic-stack-buffer-overflow in mdb_numeric_to_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36187

```
Crash type: Dynamic-stack-buffer-overflow WRITE 16
Crash state:
mdb_numeric_to_string
mdb_xfer_bound_data
_mdb_attempt_bind
```


Summary: Dynamic-stack-buffer-overflow in clear_opt_map_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36155

```
Crash type: Dynamic-stack-buffer-overflow WRITE {*}
Crash state:
clear_opt_map_info
optimize_node_left
set_optimize_info_from_tree
```


Summary: Use-of-uninitialized-value in jxl::N_AVX2::AddNoise

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36158

```
Crash type: Use-of-uninitialized-value
Crash state:
jxl::N_AVX2::AddNoise
jxl::FinalizeImageRect
jxl::ThreadPool::RunCallState<jxl::FinalizeFrameDecoding
```


Summary: Dynamic-stack-buffer-overflow in VP8SetSegmentParams

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36191

```
Crash type: Dynamic-stack-buffer-overflow WRITE {*}
Crash state:
VP8SetSegmentParams
SetLoopParams
OneStatPass
```


Summary: Stack-buffer-overflow in piv_compute_signature

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36200

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
piv_compute_signature
sc_compute_signature
use_key
```


Summary: Global-buffer-overflow in GetSsmlAttribute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36228

```
Crash type: Global-buffer-overflow READ 1
Crash state:
GetSsmlAttribute
GetVoiceAttributes
ProcessSsmlTag
```


Summary: Use-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36388

```
Crash type: Use-after-poison WRITE 8
Crash state:
AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr
AK::String::String
JS::abstract_relation
```


Summary: Global-buffer-overflow in SetUpPhonemeTable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36412

```
Crash type: Global-buffer-overflow READ 4
Crash state:
SetUpPhonemeTable
SelectPhonemeTable
TranslateWord2
```


Summary: Heap-buffer-overflow in mrb_vm_exec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36464

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
mrb_vm_exec
mrb_vm_run
mrb_top_run
```


Summary: UNKNOWN READ in helper_ret_stb_mmu_x86_64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36453

```
Crash type: UNKNOWN READ
Crash state:
helper_ret_stb_mmu_x86_64
[stack]
```


Summary: Stack-buffer-overflow in INDEX_ORDERLY_RAM_Marshal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36476

```
Crash type: Stack-buffer-overflow READ 4
Crash state:
INDEX_ORDERLY_RAM_Marshal
PERSISTENT_ALL_Marshal
TPM2_PersistentAllStore
```


Summary: Container-overflow in jxl::InvSqueeze

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36485

```
Crash type: Container-overflow READ 8
Crash state:
jxl::InvSqueeze
jxl::Transform::Inverse
jxl::Image::undo_transforms
```


Summary: Use-of-uninitialized-value in jxl::N_AVX2::UpsampleRect

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36497

```
Crash type: Use-of-uninitialized-value
Crash state:
jxl::N_AVX2::UpsampleRect
jxl::Upsampler::UpsampleRect
jxl::FinalizeImageRect
```


Summary: Heap-buffer-overflow in jxl::N_SCALAR::SingleFromSingle

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36490

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
jxl::N_SCALAR::SingleFromSingle
jxl::ThreadPool::SequentialRunnerStatic
jxl::ModularFrameDecoder::ModularImageToDecodedRect
```


Summary: UNKNOWN WRITE in jxl::ModularFrameDecoder::DecodeGroup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36456

```
Crash type: UNKNOWN WRITE
Crash state:
jxl::ModularFrameDecoder::DecodeGroup
jxl::FrameDecoder::ProcessACGroup
jxl::ThreadPool::RunCallState<jxl::FrameDecoder::ProcessSections
```


Summary: Use-of-uninitialized-value in fuzz_json_decode_encode.cc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36502

```
Crash type: Use-of-uninitialized-value
Crash state:
fuzz_json_decode_encode.cc
UA_ByteString_allocBuffer
fuzz_json_decode_encode.cc
```


Summary: UNKNOWN WRITE in CompileBlock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36551

```
Crash type: UNKNOWN WRITE
Crash state:
CompileBlock
CompileElseBlock
Compile_If
```


Summary: UNKNOWN READ in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36571

```
Crash type: UNKNOWN READ
Crash state:
helper_uc_tracecode
```


Summary: Segv on unknown address in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36616

```
Crash type: Segv on unknown address
Crash state:
helper_uc_tracecode
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36623

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ZSTD_decompressBlock_internal
ZSTD_decompressMultiFrame
ZSTD_decompressDCtx
```

Summary: Heap-buffer-overflow in ZSTD_decompressBlock_internal


Summary: Heap-use-after-free in SkCanvas::MCRec::MCRec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36644

```
Crash type: Heap-use-after-free READ 8
Crash state:
SkCanvas::MCRec::MCRec
SkCanvas::MCRec& SkTArray<SkCanvas::MCRec, false>::emplace_back<SkCanvas::MCRec&
SkCanvas::internalSave
```


Summary: Use-of-uninitialized-value in SkBaseDevice::save

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36647

```
Crash type: Use-of-uninitialized-value
Crash state:
SkBaseDevice::save
SkCanvas::internalSave
SkCanvas::internalSaveLayer
```


Summary: UNKNOWN READ in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36677

```
Crash type: UNKNOWN READ
Crash state:
helper_uc_tracecode
```


Summary: UNKNOWN READ in ParseXMLElement

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36671

```
Crash type: UNKNOWN READ
Crash state:
ParseXMLElement
prvTidyParseXMLDocument
prvTidyDocParseStream
```


Summary: Heap-buffer-overflow in prvTidygrowStack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36694

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
prvTidygrowStack
prvTidypush
CleanSpaces
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36706

```
Crash type: Use-after-poison WRITE 8
Crash state:
AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr
AK::String::String
JS::abstract_relation
```


Summary: Heap-use-after-free in gx_pattern_accum_finalize_cw

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36714

```
Crash type: Heap-use-after-free READ 8
Crash state:
gx_pattern_accum_finalize_cw
gx_device_finalize
gc_objects_set_reloc
```


Summary: UNKNOWN READ in std::__1::__tree<std::__1::__value_type<std::__1::basic_string<char, std::__1::c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24051

```
Crash type: UNKNOWN READ
Crash state:
std::__1::__tree<std::__1::__value_type<std::__1::basic_string<char, std::__1::c
std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<std::__1::basic_
std::__1::map<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1
```


Summary: Heap-buffer-overflow in flb_hash_get_by_id

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36718

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
flb_hash_get_by_id
utils_fuzzer.c
```


Summary: Stack-buffer-overflow in strcat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36743

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
strcat
prvTidystrrep
tidyMessageCreateInitV
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36728

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
dwg_convert_SAB_to_SAT1
dxf_3dsolid
dwg_dxf_REGION_private
```

Summary: Heap-buffer-overflow in dwg_convert_SAB_to_SAT1


Summary: Stack-buffer-overflow in ot::StringFind

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36830

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
ot::StringFind
ot::Coap::Message::AppendUriPathOptions
otCoapMessageAppendUriPathOptions
```


Summary: Heap-use-after-free in usbredirparser_serialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36861

```
Crash type: Heap-use-after-free WRITE 4
Crash state:
usbredirparser_serialize
try_serialize
usbredirparserfuzz.cc
```


Summary: Heap-buffer-overflow in ap_escape_path_segment_buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36882

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
ap_escape_path_segment_buffer
fuzz_utils.c
```


Summary: Heap-buffer-overflow in read_config

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36908

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
read_config
snmp_config_fuzzer.c
```


Summary: Use-of-uninitialized-value in init_main_qtable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36913

```
Crash type: Use-of-uninitialized-value
Crash state:
init_main_qtable
LibRaw::fuji_decode_strip
LibRaw::fuji_decode_loop
```


Summary: UNKNOWN READ in mrb_check_frozen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36930

```
Crash type: UNKNOWN READ
Crash state:
mrb_check_frozen
mrb_str_modify_keep_ascii
mrb_str_modify
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36932

```
Crash type: Stack-buffer-overflow WRITE 1
Crash state:
TranslateWord2
TranslateClause
SpeakNextClause
```

Summary: Stack-buffer-overflow in TranslateWord2


Summary: Stack-buffer-overflow in getoid

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36962

```
Crash type: Stack-buffer-overflow READ 8
Crash state:
getoid
parse_objectid
parse_asntype
```


Summary: Use-after-poison in JS::PrimitiveString::string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36985

```
Crash type: Use-after-poison READ 1
Crash state:
JS::PrimitiveString::string
JS::abstract_relation
JS::less_than
```


Summary: Heap-buffer-overflow in json_object_new_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37017

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
json_object_new_string
cli_jsonstr
cli_hwp5header
```


Summary: Heap-use-after-free in on_body

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37023

```
Crash type: Heap-use-after-free READ 1
Crash state:
on_body
req_body_send_complete
run_socket
```


Summary: UNKNOWN WRITE in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37025

This is the same issue as OSV-2021-1143 which replaced this one after it was closed wrongly.

```
Crash type: UNKNOWN WRITE
Crash state:
QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend
QPainterPath::addPath
QPathClipper::intersect
```


Summary: Heap-double-free in sudoers_gc_run

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37056

```
Crash type: Heap-double-free
Crash state:
sudoers_gc_run
fuzz_policy.c
resolve_editor
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37116

```
Crash type: Segv on unknown address
Crash state:
helper_uc_tracecode
```


Summary: Heap-use-after-free in zebra_nhg_hash_equal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37164

```
Crash type: Heap-use-after-free READ 4
Crash state:
zebra_nhg_hash_equal
hash_get
hash_lookup
```


Summary: Heap-buffer-overflow in exif_mnote_data_apple_identify

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37211

```
Crash type: Heap-buffer-overflow READ 3
Crash state:
exif_mnote_data_apple_identify
interpret_maker_note
exif_data_load_data
```


Summary: Heap-buffer-overflow in exif_mnote_data_apple_load

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37222

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
exif_mnote_data_apple_load
exif_mnote_data_load
interpret_maker_note
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37196

```
Crash type: Heap-use-after-free READ 8
Crash state:
prvTidyInsertedToken
prvTidyGetToken
prvTidyoldParseInline
```

Summary: Heap-use-after-free in prvTidyInsertedToken


Summary: Heap-buffer-overflow in exif_get_sshort

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37226

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
exif_get_sshort
exif_get_short
exif_mnote_data_apple_load
```


Summary: UNKNOWN READ in exif_mnote_data_apple_load

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37234

```
Crash type: UNKNOWN READ
Crash state:
exif_mnote_data_apple_load
exif_mnote_data_load
interpret_maker_note
```


Summary: Heap-use-after-free in TranslateLetter

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37238

```
Crash type: Heap-use-after-free READ 4
Crash state:
TranslateLetter
TranslateWord3
TranslateWord
```


Summary: Heap-buffer-overflow in exif_get_slong

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37231

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
exif_get_slong
mnote_apple_entry_get_value
exif_mnote_data_apple_get_value
```


Summary: UNKNOWN WRITE in QtPrivate::QPodArrayOps<QPainterPath::Element>::copyAppend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37306

This is the same issue as OSV-2021-1121 which it replaced after that one was closed wrongly.

```
Crash type: UNKNOWN WRITE
Crash state:
QtPrivate::QPodArrayOps<QPainterPath::Element>::copyAppend
QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend
QList<QPainterPath::Element>::append
```


Summary: Use-after-poison in JS::Reference::put_value

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37312

```
Crash type: Use-after-poison READ 8
Crash state:
JS::Reference::put_value
JS::AssignmentExpression::execute
JS::ExpressionStatement::execute
```


Summary: Heap-buffer-overflow in JS::Lexer::consume

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37294

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
JS::Lexer::consume
JS::Lexer::next
JS::Parser::consume
```


Summary: Heap-buffer-overflow in H5O__cont_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37318

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
H5O__cont_decode
H5O__chunk_deserialize
H5O__cache_deserialize
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37334

```
Crash type: UNKNOWN READ
Crash state:
exif_mnote_data_apple_load
exif_mnote_data_load
interpret_maker_note
```


Summary: Heap-buffer-overflow in hb_array_t<OT::IntType<unsigned int, 4u> const> hb_array_t<OT::IntType<unsigned

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37348

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
hb_array_t<OT::IntType<unsigned int, 4u> const> hb_array_t<OT::IntType<unsigned
OT::UnsizedArrayOf<OT::IntType<unsigned int, 4u> >::copy
_hb_head_t<OT::UnsizedArrayOf<OT::IntType<unsigned int, 4u> >*, decltype
```


Summary: Heap-use-after-free in TranslateRules

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37410

```
Crash type: Heap-use-after-free READ 1
Crash state:
TranslateRules
TranslateWord3
TranslateWord
```


Summary: UNKNOWN WRITE in hb_bit_set_invertible_t::set

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37425

```
Crash type: UNKNOWN WRITE
Crash state:
hb_bit_set_invertible_t::set
hb_sparseset_t<hb_bit_set_invertible_t>::set
hb_set_copy
```


Summary: Heap-buffer-overflow in pe_valid_dll_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37443

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pe_valid_dll_name
pe_parse_delay_import_dll_name
pe_parse_delayed_imports
```


Summary: UNKNOWN READ in decode_ise

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37413

```
Crash type: UNKNOWN READ
Crash state:
decode_ise
physical_to_symbolic
fuzz_astc_physical_to_symbolic.cpp
```


Summary: Use-of-uninitialized-value in H5F_addr_decode_len

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37536

```
Crash type: Use-of-uninitialized-value
Crash state:
H5F_addr_decode_len
H5VL_native_token_to_addr
H5VL__native_object_open
```


Summary: Heap-buffer-overflow in snmp_add_var

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37564

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
snmp_add_var
snmp_api_fuzzer.c
```


Summary: Heap-buffer-overflow in exif_get_slong

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37570

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
exif_get_slong
exif_get_long
exif_get_rational
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37575

```
Crash type: UNKNOWN READ
Crash state:
exif_mnote_data_apple_load
exif_mnote_data_load
interpret_maker_note
```


Summary: Heap-buffer-overflow in exif_get_slong

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37581

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
exif_get_slong
exif_get_srational
mnote_apple_entry_get_value
```


Summary: Heap-buffer-overflow in luaG_runerror

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37621

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
luaG_runerror
luaD_pretailcall
luaV_execute
```


Summary: UNKNOWN WRITE in snmp_add_var

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37647

```
Crash type: UNKNOWN WRITE
Crash state:
snmp_add_var
snmp_api_fuzzer.c
```


Summary: UNKNOWN READ in luaG_getfuncline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37678

```
Crash type: UNKNOWN READ
Crash state:
luaG_getfuncline
luaG_runerror
luaD_growstack
```


Summary: Heap-use-after-free in zend_string_release

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37695

```
Crash type: Heap-use-after-free READ 4
Crash state:
zend_string_release
zend_closure_free_storage
zend_objects_store_del
```


Summary: Index-out-of-bounds in draco::MeshEdgebreakerTraversalValenceDecoder::DecodeSymbol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37705

```
Crash type: Index-out-of-bounds
Crash state:
draco::MeshEdgebreakerTraversalValenceDecoder::DecodeSymbol
draco::MeshEdgebreakerDecoderImpl<draco::MeshEdgebreakerTraversalValenceDecoder>
draco::MeshEdgebreakerDecoderImpl<draco::MeshEdgebreakerTraversalValenceDecoder>
```


Summary: Stack-buffer-overflow in bool draco::FloatPointsTreeDecoder::DecodePointCloud<draco::PointAttributeVector

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37716

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
bool draco::FloatPointsTreeDecoder::DecodePointCloud<draco::PointAttributeVector
draco::KdTreeAttributesDecoder::DecodeDataNeededByPortableTransforms
draco::AttributesDecoder::DecodeAttributes
```


Summary: UNKNOWN READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37759

```
Crash type: UNKNOWN READ
Crash state:
NULL```


Summary: Heap-buffer-overflow in draco::MeshPredictionSchemeTexCoordsDecoder<int, draco::PredictionSchemeWrapDeco

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37814

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
draco::MeshPredictionSchemeTexCoordsDecoder<int, draco::PredictionSchemeWrapDeco
draco::MeshPredictionSchemeTexCoordsDecoder<int, draco::PredictionSchemeWrapDeco
draco::SequentialIntegerAttributeDecoder::DecodeIntegerValues
```


Summary: UNKNOWN WRITE in draco::DepthFirstTraverser<draco::CornerTable, draco::MeshAttributeIndicesEncodi

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37864

```
Crash type: UNKNOWN WRITE
Crash state:
draco::DepthFirstTraverser<draco::CornerTable, draco::MeshAttributeIndicesEncodi
draco::MeshTraversalSequencer<draco::DepthFirstTraverser<draco::CornerTable, dra
draco::SequentialAttributeDecodersController::DecodeAttributes
```


Summary: UNKNOWN READ in ucl_array_append

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37885

```
Crash type: UNKNOWN READ
Crash state:
ucl_array_append
ucl_object_copy_internal
ucl_object_copy
```


Summary: Segv on unknown address in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37856

```
Crash type: Segv on unknown address
Crash state:
helper_uc_tracecode
```


Summary: Heap-buffer-overflow in MqttDecode_Publish

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37866

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
MqttDecode_Publish
MqttClient_DecodePacket
MqttClient_HandlePacket
```


Summary: Segv on unknown address in arrow::DefaultBackend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37915

```
Crash type: Segv on unknown address
Crash state:
arrow::DefaultBackend
arrow::default_memory_pool
arrow::ipc::IpcReadOptions::Defaults
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37927

```
Crash type: Segv on unknown address
Crash state:
arrow::DefaultBackend
arrow::PoolBuffer::MakeUnique
arrow::AllocateBuffer
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38014

```
Crash type: Heap-use-after-free READ 4
Crash state:
zend_string_release
zend_closure_free_storage
zend_objects_store_del
```


Summary: Heap-buffer-overflow in trim_leading

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38048

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
trim_leading
parse_contacts
contact_parser
```


Summary: Heap-buffer-overflow in parse_content_length

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38050

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
parse_content_length
get_hdr_field
parse_headers
```


Summary: Heap-buffer-overflow in H5O__linfo_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38041

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
H5O__linfo_decode
H5O_msg_read_oh
H5O_msg_read
```


Summary: Heap-buffer-overflow in parse_param_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38052

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
parse_param_name
parse_param2
parse_params2
```


Summary: Heap-use-after-free in i_zval_ptr_dtor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38001

```
Crash type: Heap-use-after-free READ 1
Crash state:
i_zval_ptr_dtor
concat_function
zend_binary_op
```


Summary: Heap-buffer-overflow in read_bits_16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29221

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
read_bits_16
decode_number
do_uncompress_block
```


Summary: Heap-use-after-free in UA_SecureChannel_deleteMembersCleanup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5652

```
Crash type: Heap-use-after-free READ 8
Crash state:
UA_SecureChannel_deleteMembersCleanup
UA_SecureChannelManager_deleteMembers
UA_Server_delete
```


Summary: Heap-buffer-overflow in q_memchr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38065

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
q_memchr
parse_quoted_param
parse_param_body
```


Summary: Heap-buffer-overflow in parse_to_param

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38080

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
parse_to_param
parse_addr_spec
parse_to
```


Summary: Heap-buffer-overflow in MqttClient_DecodePacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38146

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
MqttClient_DecodePacket
MqttClient_HandlePacket
MqttClient_WaitType
```


Summary: Heap-buffer-overflow in backup_lpf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38152

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
backup_lpf
dav1d_lr_copy_lpf_16bpc
dav1d_filter_sbrow_deblock_rows_16bpc
```


Summary: Stack-use-after-scope in uprv_stricmp_70

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38156

```
Crash type: Stack-use-after-scope READ 1
Crash state:
uprv_stricmp_70
ulocimp_getLanguage_70
_canonicalize
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38237

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
MqttDecode_Publish
MqttClient_DecodePacket
MqttClient_HandlePacket
```


Summary: UNKNOWN WRITE in mrb_vm_exec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38251

```
Crash type: UNKNOWN WRITE
Crash state:
mrb_vm_exec
mrb_vm_run
mrb_top_run
```


Summary: Invalid-free in swift_unexpectedError

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38253

```
Crash type: Invalid-free
Crash state:
swift_unexpectedError
FuzzJSON.FuzzJSON
<compiler-generated>
```


Summary: Invalid-free in swift_unexpectedError

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38264

```
Crash type: Invalid-free
Crash state:
swift_unexpectedError
function signature specialization <Arg
function signature specialization <Arg
```


Summary: Global-buffer-overflow in fr_is_base16_nstd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38283

```
Crash type: Global-buffer-overflow READ 1
Crash state:
fr_is_base16_nstd
fr_base16_decode_nstd
fr_value_box_from_str
```


Summary: Heap-use-after-free in ZEND_FETCH_OBJ_R_SPEC_CV_CONST_INLINE_HANDLER

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38297

```
Crash type: Heap-use-after-free READ 8
Crash state:
ZEND_FETCH_OBJ_R_SPEC_CV_CONST_INLINE_HANDLER
ZEND_FETCH_OBJ_R_SPEC_CV_CONST_HANDLER
fuzzer_execute_ex
```


Summary: Heap-buffer-overflow in value_move

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38298

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
value_move
mrb_ary_splice
mrb_ary_aset
```


Summary: Heap-buffer-overflow in parse_via_param

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38307

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
parse_via_param
parse_via
get_hdr_field
```


Summary: Invalid-free in swift_unexpectedError

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38323

```
Crash type: Invalid-free
Crash state:
swift_unexpectedError
SwiftProtobuf.TextFormatEncodingVisitor.visitRepeatedMessageField<A where A: Swi
merged protocol witness for SwiftProtobuf.Visitor.visitRepeatedEnumField<A where
```


Summary: Heap-buffer-overflow in srtp_stream_init_keys

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38359

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
srtp_stream_init_keys
srtp_stream_init
srtp_add_stream
```


Summary: Heap-buffer-overflow in blosclz_compress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38313

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
blosclz_compress
blosc_c
do_job
```


Summary: Heap-buffer-overflow in backup_lpf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38369

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
backup_lpf
dav1d_lr_copy_lpf_16bpc
dav1d_filter_sbrow_deblock_rows_16bpc
```


Summary: Heap-buffer-overflow in flatbuffers::JsonPrinter::GenFieldOffset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38371

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
flatbuffers::JsonPrinter::GenFieldOffset
flatbuffers::JsonPrinter::GenStruct
flatbuffers::GenerateText
```


Summary: UNKNOWN READ in helper_ret_stb_mmu_x86_64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38438

```
Crash type: UNKNOWN READ
Crash state:
helper_ret_stb_mmu_x86_64
resume_all_vcpus_x86_64
vm_start_x86_64
```


Summary: Heap-buffer-overflow in padding

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38439

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
padding
sgr_mix_c
lr_stripe
```


Summary: Heap-buffer-overflow in ih264d_fill_bs1_16x16mb_pslice

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38387

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ih264d_fill_bs1_16x16mb_pslice
ih264d_compute_bs_non_mbaff_thread
ih264d_recon_deblk_slice
```


Summary: UNKNOWN READ in icu_70::UCharsTrie::branchNext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38390

```
Crash type: UNKNOWN READ
Crash state:
icu_70::UCharsTrie::branchNext
icu_70::UCharsTrie::firstForCodePoint
icu_70::CollationIterator::nextCE32FromContraction
```


Summary: Heap-buffer-overflow in ih264d_parse_decode_slice

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38482

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ih264d_parse_decode_slice
ih264d_parse_nal_unit
ih264d_video_decode
```


Summary: UNKNOWN READ in cdf_read_property_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38393

```
Crash type: UNKNOWN READ
Crash state:
cdf_read_property_info
cdf_unpack_summary_info
cdf_check_summary_info
```


Summary: Heap-buffer-overflow in stbi__load_and_postprocess_8bit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38394

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
stbi__load_and_postprocess_8bit
stb_image.h
```


Summary: Heap-buffer-overflow in wabt::string_view::compare

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38404

```
Crash type: Heap-buffer-overflow READ 6
Crash state:
wabt::string_view::compare
wabt::ReadBinary
wabt::ReadBinaryIr
```


Summary: Heap-buffer-overflow in FSE_writeNCount_generic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38553

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
FSE_writeNCount_generic
FSE_writeNCount
ZSTD_buildCTable
```


Summary: Heap-buffer-overflow in int flatbuffers::ReadScalar<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38578

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
int flatbuffers::ReadScalar<int>
flatbuffers::Table::GetVTable
flatbuffers::Table::GetOptionalFieldOffset
```


Summary: Segv on unknown address in ft_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38635

```
Crash type: Segv on unknown address
Crash state:
ft_free
ft_mem_free
cff_cmap_unicode_done
```


Summary: Stack-buffer-overflow in GRIBDataset::Open

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38610

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
GRIBDataset::Open
GDALOpenEx
GDALOpen
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38669

```
Crash type: Bad-cast
Crash state:
Bad-cast to SplashPattern from invalid vptr
SplashState::~SplashState
Splash::restoreState
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38660

```
Crash type: UNKNOWN READ
Crash state:
kh_get_ucl_hash_node
ucl_hash_search
ucl_inherit_handler
```

Summary: UNKNOWN READ in kh_get_ucl_hash_node


Summary: Heap-buffer-overflow in H5O__chunk_deserialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38686

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
H5O__chunk_deserialize
H5O__cache_chk_deserialize
H5C_protect
```


Summary: UNKNOWN WRITE in void AK::BumpAllocator<true, 2097152ul>::for_each_chunk<AK::UniformBumpAllocator

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38701

```
Crash type: UNKNOWN WRITE
Crash state:
void AK::BumpAllocator<true, 2097152ul>::for_each_chunk<AK::UniformBumpAllocator
regex::BumpAllocatedLinkedList<regex::MatchState>::~BumpAllocatedLinkedList
regex::Matcher<regex::ECMA262Parser>::execute
```


Summary: Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38777

```
Crash type: Use-of-uninitialized-value
Crash state:
std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha
S2LaxPolylineShape::Init
S2LaxPolylineShape::S2LaxPolylineShape
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38785

```
Crash type: Use-of-uninitialized-value
Crash state:
std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha
S2LogMessage::S2LogMessage
S2ContainsVertexQuery::ContainsSign
```


Summary: Use-of-uninitialized-value in piex::image_type_recognition::ContainsNikonSignatures

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38799

```
Crash type: Use-of-uninitialized-value
Crash state:
piex::image_type_recognition::ContainsNikonSignatures
piex::image_type_recognition::NefTypeChecker::IsMyType
piex::image_type_recognition::RecognizeRawImageTypeLite
```


Summary: UNKNOWN READ in get_body

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38750

```
Crash type: UNKNOWN READ
Crash state:
get_body
parse_sdp
fuzz_parse_msg.c
```


Summary: Use-of-uninitialized-value in std::__1::__hash_iterator<std::__1::__hash_node<std::__1::__hash_value_type<std:

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38823

```
Crash type: Use-of-uninitialized-value
Crash state:
std::__1::__hash_iterator<std::__1::__hash_node<std::__1::__hash_value_type<std:
opencensus::tags::TagKeyRegistry::Register
opencensus::tags::TagKey::Register
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38831

```
Crash type: Use-of-uninitialized-value
Crash state:
std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha
S2LatLng::ToPoint
s2textformat::ParsePoints
```


Summary: Heap-buffer-overflow in ext2fs_dinode_copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38872

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
ext2fs_dinode_copy
ext2fs_inode_walk
tsk_fs_meta_walk
```


Summary: Heap-use-after-free in hb_resolve_overflows

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38878

```
Crash type: Heap-use-after-free READ 4
Crash state:
hb_resolve_overflows
_repack
hb_subset_or_fail
```


Summary: Null-dereference READ in unzOpenCurrentFile3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38873

```
Crash type: Null-dereference READ
Crash state:
unzOpenCurrentFile3
unzOpenCurrentFile
Assimp::ZipFileInfo::Extract
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38808

```
Crash type: Use-of-uninitialized-value
Crash state:
std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha
print_json
fuzz_dump.cpp
```


Summary: Use-of-uninitialized-value in LoadBinarySchema

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38817

```
Crash type: Use-of-uninitialized-value
Crash state:
LoadBinarySchema
do_test
flatbuffers_monster_fuzzer.cc
```


Summary: Stack-buffer-overflow in Assimp::ZipArchiveIOSystem::Implement::MapArchive

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38870

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
Assimp::ZipArchiveIOSystem::Implement::MapArchive
Assimp::ZipArchiveIOSystem::getFileList
Assimp::D3MF::D3MFOpcPackage::D3MFOpcPackage
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38824

```
Crash type: Use-of-uninitialized-value
Crash state:
std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha
ostream
std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha
```


Summary: Heap-buffer-overflow in geos::operation::valid::PolygonNode::isInteriorSegment

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38922

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
geos::operation::valid::PolygonNode::isInteriorSegment
geos::operation::valid::PolygonTopologyAnalyzer::isSegmentInRing
geos::operation::valid::IsValidOp::checkHolesOutsideShell
```


Summary: Heap-buffer-overflow in cdf_read_property_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38898

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
cdf_read_property_info
cdf_unpack_summary_info
cdf_check_summary_info
```


Summary: Heap-buffer-overflow in parse_content_length

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38909

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
parse_content_length
get_hdr_field
parse_headers
```


Summary: Invalid-free in swift_unexpectedError

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38951

```
Crash type: Invalid-free
Crash state:
swift_unexpectedError
FuzzJSON.FuzzJSON
<compiler-generated>
```


Summary: Heap-buffer-overflow in pe_get_section_full_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38952

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pe_get_section_full_name
pe__load
yr_modules_load
```


Summary: Uncaught exception in org.jsoup.parser.HtmlTreeBuilder.process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38982

```
Crash type: Uncaught exception
Crash state:
org.jsoup.parser.HtmlTreeBuilder.process
org.jsoup.parser.HtmlTreeBuilderState$18.process
org.jsoup.parser.HtmlTreeBuilder.process
```


Summary: Heap-buffer-overflow in mrb_vm_exec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38989

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
mrb_vm_exec
mrb_vm_run
mrb_top_run
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38994

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
get_next_owned_entity
dwg_write_dxfb
llvmfuzz.c
```

Summary: Heap-buffer-overflow in get_next_owned_entity


Summary: Heap-buffer-overflow in openhtj2k::T1OpenHTJ2K::decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39021

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
openhtj2k::T1OpenHTJ2K::decompress
std::__1::__packaged_task_func<std::__1::__bind<grk::T1DecompressScheduler::deco
std::__1::packaged_task<int
```


Summary: UNKNOWN READ in state_VLC_dec::load_bytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39046

```
Crash type: UNKNOWN READ
Crash state:
state_VLC_dec::load_bytes
state_VLC_dec::state_VLC_dec
htj2k_decode
```


Summary: Invalid-free in generic specialization <Swift.Int> of Swift.Array.subscript.getter :

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39049

```
Crash type: Invalid-free
Crash state:
generic specialization <Swift.Int> of Swift.Array.subscript.getter :
SwiftProtobuf.
SwiftProtobuf.Google_Protobuf_Timestamp.decodeJSON
```


Summary: Heap-buffer-overflow in MqttDecode_Disconnect

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39053

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
MqttDecode_Disconnect
MqttClient_DecodePacket
MqttClient_WaitType
```


Summary: Heap-buffer-overflow in MqttClient_DecodePacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39083

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
MqttClient_DecodePacket
MqttClient_WaitType
MqttClient_Connect
```


Summary: UNKNOWN READ in MqttProps_Free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39070

```
Crash type: UNKNOWN READ
Crash state:
MqttProps_Free
MqttClient_Unsubscribe
wolfMQTTFuzzer::unsubscribe
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39056

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
MqttClient_DecodePacket
MqttClient_WaitType
MqttClient_Unsubscribe
```


Summary: Stack-buffer-underflow in InterpretPhoneme

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39042

```
Crash type: Stack-buffer-underflow READ 8
Crash state:
InterpretPhoneme
InterpretPhoneme2
CalcLengths
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39094

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
MqttClient_DecodePacket
MqttClient_WaitType
MqttClient_Ping_ex
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39103

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
MqttClient_DecodePacket
MqttClient_WaitType
MqttClient_Subscribe
```


Summary: Uncaught exception in org.jsoup.parser.HtmlTreeBuilderState$18.process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39164

```
Crash type: Uncaught exception
Crash state:
org.jsoup.parser.HtmlTreeBuilderState$18.process
org.jsoup.parser.HtmlTreeBuilder.process
org.jsoup.parser.HtmlTreeBuilderState$7.process
```


Summary: Stack-buffer-overflow in dispatch_print_error

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39196

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
dispatch_print_error
internal_exr_parse_header
exr_start_read
```


Summary: Heap-buffer-overflow in OT::MathGlyphConstruction::subset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39211

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
OT::MathGlyphConstruction::subset
OT::MathVariants::subset
OT::MATH::subset
```


Summary: Heap-use-after-free in dispatch_print_error

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39212

```
Crash type: Heap-use-after-free READ 6
Crash state:
dispatch_print_error
internal_exr_parse_header
exr_start_read
```


Summary: Global-buffer-overflow in vte_write_debug

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39313

```
Crash type: Global-buffer-overflow READ 1
Crash state:
vte_write_debug
csi_dev_attr
do_action
```


Summary: Container-overflow in std::__1::__function::__func<LLVMFuzzerTestOneInput::$_0, std::__1::allocator<LL

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39263

```
Crash type: Container-overflow READ 1
Crash state:
std::__1::__function::__func<LLVMFuzzerTestOneInput::$_0, std::__1::allocator<LL
std::__1::__function::__func<LLVMFuzzerTestOneInput::$_1, std::__1::allocator<LL
function.h
```


Summary: Negative-size-param in ntfs_attr_walk_special

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39317

```
Crash type: Negative-size-param
Crash state:
ntfs_attr_walk_special
tsk_fs_attr_walk
ntfs_proc_attrseq
```


Summary: Heap-buffer-overflow in OT::MathValueRecord::copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39225

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
OT::MathValueRecord::copy
OT::MathGlyphAssembly::subset
OT::MathGlyphConstruction::subset
```


Summary: Heap-buffer-overflow in Assimp::BaseImporter::ConvertToUTF8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39339

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Assimp::BaseImporter::ConvertToUTF8
Assimp::BaseImporter::TextFileToBuffer
Assimp::OpenGEX::OpenGEXImporter::InternReadFile
```