Summary: UNKNOWN READ in mprint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=282

```
Crash type: UNKNOWN READ
Crash state:
mprint
match
file_softmagic
```


Summary: UNKNOWN READ in file_regexec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=283

```
Crash type: UNKNOWN READ
Crash state:
file_regexec
magiccheck
match
```


Summary: UNKNOWN READ in file_regexec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=143

```
Crash type: UNKNOWN READ
Crash state:
file_regexec
magiccheck
match
```


Summary: Global-buffer-overflow in vte_write_debug

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=174

```
Crash type: Global-buffer-overflow READ 1
Crash state:
vte_write_debug
do_execute
do_action
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=182

```
Crash type: Global-buffer-overflow READ 1
Crash state:
vte_write_debug
do_action
parse_data
```


Summary: UNKNOWN READ in mprint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=144

```
Crash type: UNKNOWN READ
Crash state:
mprint
match
file_softmagic
```


Summary: Heap-buffer-overflow in mcopy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=153

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
mcopy
mget
match
```


Summary: Index-out-of-bounds in fuzz_send_next_response

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3956

```
Crash type: Index-out-of-bounds
Crash state:
fuzz_send_next_response
fuzz_handle_transfer
_start
```


Summary: Heap-use-after-free in UA_Subscription_answerPublishRequestsNoSubscription

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4097

```
Crash type: Heap-use-after-free READ 8
Crash state:
UA_Subscription_answerPublishRequestsNoSubscription
UA_Server_run_shutdown
_start
```


Summary: Use-of-uninitialized-value in Archive::ConvertAttributes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4272

```
Crash type: Use-of-uninitialized-value
Crash state:
Archive::ConvertAttributes
CmdExtract::ExtractCurrentFile
CmdExtract::ExtractArchive
```


Summary: Heap-double-free in ExtensionObject_deleteMembers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4345

```
Crash type: Heap-double-free
Crash state:
ExtensionObject_deleteMembers
UA_deleteMembers
UA_decodeBinary
```


Summary: Use-of-uninitialized-value in match

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1065

```
Crash type: Use-of-uninitialized-value
Crash state:
match
file_softmagic
mget
```


Summary: Heap-buffer-overflow in Unpack::CopyString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4373

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
Unpack::CopyString
Unpack::Unpack5
CmdExtract::ExtractCurrentFile
```


Summary: Heap-use-after-free in nl::wpantund::SpinelNCPInstance::should_filter_address

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4459

```
Crash type: Heap-use-after-free READ 6
Crash state:
nl::wpantund::SpinelNCPInstance::should_filter_address
nl::wpantund::SpinelNCPInstance::handle_ncp_spinel_value_inserted
nl::wpantund::SpinelNCPInstance::handle_ncp_spinel_callback
```


Summary: Use-of-uninitialized-value in Unpack::MakeDecodeTables

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4298

```
Crash type: Use-of-uninitialized-value
Crash state:
Unpack::MakeDecodeTables
Unpack::ReadTables20
Unpack::Unpack20
```


Summary: Use-of-uninitialized-value in ExtractUnixLink30

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4309

```
Crash type: Use-of-uninitialized-value
Crash state:
ExtractUnixLink30
ExtractSymlink
CmdExtract::ExtractCurrentFile
```


Summary: Use-of-uninitialized-value in CommandData::IsProcessFile

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4411

```
Crash type: Use-of-uninitialized-value
Crash state:
CommandData::IsProcessFile
CmdExtract::ExtractCurrentFile
CmdExtract::ExtractArchive
```


Summary: Use-of-uninitialized-value in __gxx_personality_v0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4310

```
Crash type: Use-of-uninitialized-value
Crash state:
__gxx_personality_v0
_Unwind_RaiseException
ErrorHandler::Throw
```


Summary: Use-after-poison in rawspeed::OrfDecoder::decodeCompressed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3012

```
Crash type: Use-after-poison WRITE 2
Crash state:
rawspeed::OrfDecoder::decodeCompressed
rawspeed::OrfDecoder::decodeRawInternal
rawspeed::RawDecoder::decodeRaw
```


Summary: Use-of-uninitialized-value in CharToWide

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4290

```
Crash type: Use-of-uninitialized-value
Crash state:
CharToWide
Archive::GetComment
Archive::ViewComment
```


Summary: Stack-buffer-overflow in ot::MeshCoP::CommissionerSessionIdTlv::GetCommissionerSessionId

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3376

```
Crash type: Stack-buffer-overflow READ 2
Crash state:
ot::MeshCoP::CommissionerSessionIdTlv::GetCommissionerSessionId
ot::NetworkData::Leader::HandleCommissioningSet
ot::Coap::Coap::ProcessReceivedRequest
```


Summary: Global-buffer-overflow in csnStreamDissector

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1571

```
Crash type: Global-buffer-overflow READ 2
Crash state:
csnStreamDissector
csnStreamDissector
csnStreamDissector
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8923

```
Crash type: Global-buffer-overflow READ 1
Crash state:
vte_write_debug
do_trans
tsm_vte_input
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=606

```
Crash type: Bad-cast
Crash state:
Bad-cast to const std::__1::__less<unsigned long, unsigned long> *_start
```


Summary: Heap-buffer-overflow in File::Write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4293

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
File::Write
ComprDataIO::UnpWrite
CmdExtract::UnstoreFile
```


Summary: Heap-buffer-overflow in mprint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1516

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
mprint
match
file_softmagic
```


Summary: Heap-buffer-overflow in cdf_file_property_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1064

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
cdf_file_property_info
cdf_file_summary_info
cdf_check_summary_info
```


Summary: Heap-use-after-free in gnutls_x509_crl_deinit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1304

```
Crash type: Heap-use-after-free READ 8
Crash state:
gnutls_x509_crl_deinit
gnutls_pkcs12_simple_parse
_start
```


Summary: Use-of-uninitialized-value in Archive::ConvertFileHeader

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4614

```
Crash type: Use-of-uninitialized-value
Crash state:
Archive::ConvertFileHeader
Archive::ReadHeader15
Archive::ReadHeader
```


Summary: Heap-buffer-overflow in mprint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1523

```
Crash type: Heap-buffer-overflow READ 3
Crash state:
mprint
match
file_softmagic
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1436

```
Crash type: Global-buffer-overflow READ 2
Crash state:
csnStreamDissector
csnStreamDissector
csnStreamDissector
```


Summary: Heap-buffer-overflow in TetrahedralInterpFloat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=852

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
TetrahedralInterpFloat
_LUTeval16
CachedXFORM
```


Summary: Global-buffer-overflow in vte_write_debug

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=744

```
Crash type: Global-buffer-overflow READ 1
Crash state:
vte_write_debug
do_trans
tsm_vte_input
```


Summary: Heap-buffer-overflow in file_strncmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=750

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
file_strncmp
magiccheck
match
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=449

```
Crash type: Global-buffer-overflow READ 1
Crash state:
vte_write_debug
do_execute
do_action
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=457

```
Crash type: Global-buffer-overflow READ 1
Crash state:
vte_write_debug
do_action
parse_data
```


Summary: Use-of-uninitialized-value in QuickOpen::Seek

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4522

```
Crash type: Use-of-uninitialized-value
Crash state:
QuickOpen::Seek
Archive::Seek
QuickOpen::Load
```


Summary: Heap-buffer-overflow in opj_tcd_mct_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3331

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
opj_tcd_mct_decode
opj_tcd_decode_tile
opj_j2k_decode_tile
```


Summary: Heap-buffer-overflow in pnm_type_find

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4039

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pnm_type_find
gst_type_find_factory_call_function
gst_type_find_helper_for_data
```


Summary: Use-of-uninitialized-value in ToPercent

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4512

```
Crash type: Use-of-uninitialized-value
Crash state:
ToPercent
Archive::ReadHeader15
Archive::ReadHeader
```


Summary: Heap-use-after-free in UInt32_encodeBinary

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4764

```
Crash type: Heap-use-after-free WRITE 4
Crash state:
UInt32_encodeBinary
UA_encodeBinaryInternal
UA_encodeBinary
```


Summary: Use-of-uninitialized-value in Archive::GetComment

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4610

```
Crash type: Use-of-uninitialized-value
Crash state:
Archive::GetComment
Archive::ViewComment
CmdExtract::ExtractArchive
```


Summary: Use-of-uninitialized-value in __cxxabiv1::scan_eh_tab

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4307

```
Crash type: Use-of-uninitialized-value
Crash state:
__cxxabiv1::scan_eh_tab
__gxx_personality_v0
_Unwind_RaiseException
```


Summary: Heap-buffer-overflow in opj_dwt_decode_partial_tile

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3125

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
opj_dwt_decode_partial_tile
opj_tcd_dwt_decode
opj_tcd_decode_tile
```


Summary: Use-of-uninitialized-value in IsRelativeSymlinkSafe

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4308

```
Crash type: Use-of-uninitialized-value
Crash state:
IsRelativeSymlinkSafe
ExtractUnixLink30
ExtractSymlink
```


Summary: Heap-buffer-overflow in OSS_FUZZ_png_combine_row

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3606

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
OSS_FUZZ_png_combine_row
OSS_FUZZ_png_read_row
_start
```


Summary: Heap-use-after-free in UA_Array_copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4346

```
Crash type: Heap-use-after-free READ 2
Crash state:
UA_Array_copy
copy_noInit
NodeId_copy
```


Summary: Heap-buffer-overflow in Operation_addNode_finish

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4183

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
Operation_addNode_finish
Service_AddNode
UA_Server_processServiceOperations
```


Summary: Heap-buffer-overflow in opj_dwt_interleave_partial_v

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3115

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
opj_dwt_interleave_partial_v
opj_dwt_decode_partial_tile
opj_tcd_dwt_decode
```


Summary: Use-of-uninitialized-value in mcopy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2242

```
Crash type: Use-of-uninitialized-value
Crash state:
mcopy
mget
match
```


Summary: Stack-buffer-overflow in _psl_idna_toASCII

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2600

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
_psl_idna_toASCII
_add_punycode_if_needed
psl_load_fp
```


Summary: Use-of-uninitialized-value in macho_parse_file_32_be

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4375

```
Crash type: Use-of-uninitialized-value
Crash state:
macho_parse_file_32_be
macho__load
yr_modules_load
```


Summary: Heap-double-free in ExtensionObject_deleteMembers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4296

```
Crash type: Heap-double-free
Crash state:
ExtensionObject_deleteMembers
UA_Array_delete
Array_decodeBinary
```


Summary: Heap-use-after-free in UA_Array_copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4300

```
Crash type: Heap-use-after-free READ {*}
Crash state:
UA_Array_copy
copy_noInit
NodeId_copy
```


Summary: Heap-buffer-overflow in nlohmann::basic_json<std::__1::map, std::__1::vector, std::__1::basic_string<cha

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=381

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
nlohmann::basic_json<std::__1::map, std::__1::vector, std::__1::basic_string<cha
nlohmann::basic_json<std::__1::map, std::__1::vector, std::__1::basic_string<cha
nlohmann::basic_json<std::__1::map, std::__1::vector, std::__1::basic_string<cha
```


Summary: Heap-buffer-overflow in opj_mct_decode_real

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3305

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
opj_mct_decode_real
opj_tcd_mct_decode
opj_tcd_decode_tile
```


Summary: Use-of-uninitialized-value in gnutls_memset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1493

```
Crash type: Use-of-uninitialized-value
Crash state:
gnutls_memset
deinit_keys
_gnutls_handshake_internal_state_clear
```


Summary: Use-of-uninitialized-value in SetExtraInfo20

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4408

```
Crash type: Use-of-uninitialized-value
Crash state:
SetExtraInfo20
CmdExtract::ExtractCurrentFile
CmdExtract::ExtractArchive
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4275

```
Crash type: Use-of-uninitialized-value
Crash state:
Archive::GetComment
Archive::ViewComment
CmdExtract::ExtractArchive
```


Summary: UNKNOWN READ in cfree

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4561

```
Crash type: UNKNOWN READ
Crash state:
cfree
copyAttributeIntoNode
UA_Server_editNode
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3608

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
OSS_FUZZ_png_combine_row
OSS_FUZZ_png_read_row
_start
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4409

```
Crash type: Use-of-uninitialized-value
Crash state:
IsRelativeSymlinkSafe
ExtractUnixLink30
ExtractSymlink
```


Summary: Use-of-uninitialized-value in wcsncatz

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4350

```
Crash type: Use-of-uninitialized-value
Crash state:
wcsncatz
Archive::ProcessExtra50
Archive::ReadHeader50
```


Summary: Use-of-uninitialized-value in _gnutls_mpi_dprint_size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1494

```
Crash type: Use-of-uninitialized-value
Crash state:
_gnutls_mpi_dprint_size
_wrap_nettle_pk_encrypt
_gnutls_gen_rsa_client_kx
```


Summary: UNKNOWN READ in rawspeed::MosDecoder::decodeRawInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2479

```
Crash type: UNKNOWN READ
Crash state:
rawspeed::MosDecoder::decodeRawInternal
rawspeed::RawDecoder::decodeRaw
_start
```


Summary: Use-of-uninitialized-value in Archive::ConvertFileHeader

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4279

```
Crash type: Use-of-uninitialized-value
Crash state:
Archive::ConvertFileHeader
Archive::ReadHeader15
Archive::ReadHeader
```


Summary: Negative-size-param in UA_SecureChannel_processChunk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3609

```
Crash type: Negative-size-param
Crash state:
UA_SecureChannel_processChunk
processCompleteChunk
UA_Connection_processChunks
```


Summary: Heap-buffer-overflow in fuzz_read_callback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4785

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
fuzz_read_callback
Curl_fillreadbuffer
readwrite_upload
```


Summary: Heap-buffer-overflow in setcharset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4161

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
setcharset
loop
loop
```


Summary: Heap-buffer-overflow in idn2_lookup_u8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2262

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
idn2_lookup_u8
_psl_idna_toASCII
_add_punycode_if_needed
```


Summary: Heap-buffer-overflow in macho_handle_segment_64_be

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4382

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
macho_handle_segment_64_be
macho_parse_file_64_be
macho__load
```


Summary: Use-of-uninitialized-value in QuickOpen::Read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4507

```
Crash type: Use-of-uninitialized-value
Crash state:
QuickOpen::Read
Archive::Read
RawRead::Read
```


Summary: Use-of-uninitialized-value in ComprDataIO::UnpRead

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4283

```
Crash type: Use-of-uninitialized-value
Crash state:
ComprDataIO::UnpRead
Unpack::UnpReadBuf
Unpack::Unpack15
```


Summary: UNKNOWN READ in spinel_datatype_vunpack_

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4790

```
Crash type: UNKNOWN READ
Crash state:
spinel_datatype_vunpack_
spinel_datatype_unpack
nl::wpantund::SpinelNCPInstance::handle_ncp_spinel_value_inserted
```


Summary: Use-of-uninitialized-value in CharToWideMap

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4285

```
Crash type: Use-of-uninitialized-value
Crash state:
CharToWideMap
CharToWide
Archive::GetComment
```


Summary: Use-of-uninitialized-value in Archive::GetComment

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4410

```
Crash type: Use-of-uninitialized-value
Crash state:
Archive::GetComment
Archive::ViewComment
CmdExtract::ExtractArchive
```


Summary: Use-after-poison in rawspeed::unroll_loop_t<void rawspeed::LJpegDecompressor::decodeN<4>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4451

```
Crash type: Use-after-poison WRITE 2
Crash state:
rawspeed::unroll_loop_t<void rawspeed::LJpegDecompressor::decodeN<4>
void rawspeed::LJpegDecompressor::decodeN<4>
rawspeed::AbstractLJpegDecompressor::decode
```


Summary: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10897

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
AAT::StateTable<OT::IntType<unsigned short, 2u> >::sanitize
AAT::KerxSubTableFormat1::sanitize
```


Summary: UNKNOWN READ in __msan_memcpy.part.51

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9801

```
Crash type: UNKNOWN READ
Crash state:
__msan_memcpy.part.51
gvs_read_unaligned_le
gvs_variable_sized_array_is_normal
```


Summary: Heap-buffer-overflow in cff_parser_run

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10869

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
cff_parser_run
cff_subfont_load
cff_font_load
```


Summary: Heap-buffer-overflow in r_bin_mdmp_init_pe_bins

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11361

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
r_bin_mdmp_init_pe_bins
r_bin_mdmp_init
r_bin_mdmp_new_buf
```


Summary: Heap-buffer-overflow in r_read_le32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11303

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
r_read_le32
r_bin_file_get_strings
r_bin_object_set_items
```


Summary: Heap-buffer-overflow in git__strntol64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11382

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
git__strntol64
git__strntol32
parse_mode
```


Summary: UNKNOWN READ in dotnet_parse_tilde_2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11300

```
Crash type: UNKNOWN READ
Crash state:
dotnet_parse_tilde_2
dotnet_parse_tilde
dotnet_parse_com
```


Summary: Stack-use-after-return in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10082

```
Crash type: Stack-use-after-return READ 1
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
OT::CoverageFormat2::Iter::more
OT::SingleSubstFormat2::closure
```


Summary: UNKNOWN READ in BEInt<int, 4>::operator int

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10898

```
Crash type: UNKNOWN READ
Crash state:
BEInt<int, 4>::operator int
hb_kern_machine_t<AAT::KerxSubTableFormat6::accelerator_t>::kern
AAT::KerxSubTableFormat6::apply
```


Summary: Heap-use-after-free in ssl_get_prev_session

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8241

```
Crash type: Heap-use-after-free READ 4
Crash state:
ssl_get_prev_session
tls_early_post_process_client_hello
tls_post_process_client_hello
```


Summary: Heap-buffer-overflow in format_generic_odp_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10850

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
format_generic_odp_key
check_attr_len
format_odp_key_attr
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10356

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
OT::BinSearchHeader::operator unsigned int
OT::OffsetTable::find_table_index
```


Summary: Use-of-uninitialized-value in iclip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11466

```
Crash type: Use-of-uninitialized-value
Crash state:
iclip
apply_to_row_uv
dav1d_apply_grain_8bpc
```


Summary: Heap-buffer-overflow in BEInt<unsigned int, 4>::operator unsigned int

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10933

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
BEInt<unsigned int, 4>::operator unsigned int
OT::OffsetTo<OT::UnsizedArrayOf<OT::IntType<short, 2u> >, OT::IntType<unsigned i
AAT::KerxSubTableFormat2::get_kerning
```


Summary: Global-buffer-overflow in CFF::BlendArg::set_blends

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11691

```
Crash type: Global-buffer-overflow READ 8
Crash state:
CFF::BlendArg::set_blends
CFF::CFF2CSOpSet<CFF2CSOpSet_Extents, ExtentsParam, CFF2PathProcs_Extents>::proc
CFF::CSInterpreter<CFF::CFF2CSInterpEnv, CFF2CSOpSet_Extents, ExtentsParam>::int
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11060

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
AAT::LookupFormat10<OT::IntType<unsigned int, 4u> >::sanitize
AAT::Lookup<OT::IntType<unsigned int, 4u> >::sanitize
```


Summary: Heap-buffer-overflow in Envoy::StringUtil::itoa

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10038

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
Envoy::StringUtil::itoa
Envoy::Http::HeaderString::setInteger
Envoy::TestOneProtoInput
```


Summary: UNKNOWN READ in AAT::KerxSubTableFormat1<AAT::KerxSubTableHeader>::driver_context_t::transition

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11367

```
Crash type: UNKNOWN READ
Crash state:
AAT::KerxSubTableFormat1<AAT::KerxSubTableHeader>::driver_context_t::transition
void AAT::StateTableDriver<AAT::ExtendedTypes, AAT::Format1Entry<true>::EntryDat
AAT::KerxSubTableFormat1<AAT::KerxSubTableHeader>::apply
```


Summary: Heap-double-free in RMFRasterBand::IReadBlock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9138

```
Crash type: Heap-double-free
Crash state:
RMFRasterBand::IReadBlock
GDALRasterBand::GetLockedBlockRef
GDALRasterBand::IRasterIO
```


Summary: Use-of-uninitialized-value in _gnutls_x509_read_pkalgo_params

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10135

```
Crash type: Use-of-uninitialized-value
Crash state:
_gnutls_x509_read_pkalgo_params
print_crt_pubkey
print_cert
```


Summary: Use-of-uninitialized-value in gnutls_pkcs12_get_bag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10136

```
Crash type: Use-of-uninitialized-value
Crash state:
gnutls_pkcs12_get_bag
gnutls_pkcs12_simple_parse
gnutls_pkcs12_key_parser_fuzzer.c
```


Summary: Use-of-uninitialized-value in iclip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11532

```
Crash type: Use-of-uninitialized-value
Crash state:
iclip
wiener_c
lr_stripe
```


Summary: UNKNOWN READ in netdev_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11314

```
Crash type: UNKNOWN READ
Crash state:
netdev_get
config_parse_netdev
next_assignment
```


Summary: Heap-buffer-overflow in read_bits_16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11196

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
read_bits_16
decode_number
do_uncompress_block
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10900

```
Crash type: UNKNOWN READ
Crash state:
BEInt<int, 4>::operator int
AAT::KerxSubTableFormat6::get_kerning
hb_kern_machine_t<AAT::KerxSubTableFormat6::accelerator_t>::kern
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10341

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
OT::Offset<OT::IntType<unsigned short, 2u>, true>::is_null
OT::OffsetTo<OT::ArrayOfM1<OT::ResourceTypeRecord, OT::IntType<unsigned short, 2
```


Summary: Use-of-uninitialized-value in iclip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11392

```
Crash type: Use-of-uninitialized-value
Crash state:
iclip
avg_c
dav1d_recon_b_inter_16bpc
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11657

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
OT::IntType<unsigned short, 2u>::operator unsigned int
CFF::Charset1_2<OT::IntType<unsigned char, 1u> >::get_glyph
```


Summary: Use-of-uninitialized-value in bn_sub_words

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8654

```
Crash type: Use-of-uninitialized-value
Crash state:
bn_sub_words
bn_reduce_once
bn_from_montgomery_in_place
```


Summary: Stack-buffer-overflow in parse_tables

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12466

```
Crash type: Stack-buffer-overflow WRITE 7
Crash state:
parse_tables
process_block
do_uncompress_file
```


Summary: Use-of-uninitialized-value in json_string_unescape

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11473

```
Crash type: Use-of-uninitialized-value
Crash state:
json_string_unescape
ofputil_table_from_string
parse_ofp_str__
```


Summary: Heap-buffer-overflow in bloaty::DisassembleFindReferences

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5873

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
bloaty::DisassembleFindReferences
bloaty::ReadELFSymbols
bloaty::ReadELFSymbols
```


Summary: Heap-buffer-overflow in fast_validate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10319

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
fast_validate
g_utf8_validate
g_variant_serialiser_is_string
```


Summary: Heap-buffer-overflow in set_char_prefix

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10159

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
set_char_prefix
parse_included_directories
set_long_option
```


Summary: Heap-buffer-overflow in parse_odp_key_mask_attr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11160

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
parse_odp_key_mask_attr
odp_flow_from_string
parse_keys
```


Summary: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11074

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
AAT::LookupFormat10<OT::IntType<unsigned short, 2u> >::sanitize
AAT::Lookup<OT::IntType<unsigned short, 2u> >::sanitize
```


Summary: UNKNOWN READ in cff_decoder_parse_charstrings

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11157

```
Crash type: UNKNOWN READ
Crash state:
cff_decoder_parse_charstrings
cff_slot_load
FT_Load_Glyph
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11714

```
Crash type: Global-buffer-overflow READ 8
Crash state:
CFF::BlendArg::set_blends
CFF::CFF2CSOpSet<CFF2CSOpSet_SubrSubset, CFF::SubrSubsetParam, CFF::PathProcsNul
CFF2CSOpSet_SubrSubset::process_op
```


Summary: Heap-buffer-overflow in cras_rclient_message_from_client

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9242

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
cras_rclient_message_from_client
cras_rclient_buffer_from_client
rclient_message.cc
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11526

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
OT::KernSubTable<OT::KernOTSubTableHeader>::get_size
void hb_sanitize_context_t::set_object<OT::KernSubTable<OT::KernOTSubTableHeader
```


Summary: Heap-buffer-overflow in r_bin_filter_sections

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11272

```
Crash type: Heap-buffer-overflow WRITE 3
Crash state:
r_bin_filter_sections
r_bin_object_set_items
r_bin_object_new
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11033

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
BEInt<unsigned int, 4>::operator unsigned int
AAT::KerxSubTableFormat2::sanitize
hb_sanitize_context_t::return_t AAT::KerxTable::dispatch<hb_sanitize_context_t>
```


Summary: Heap-buffer-overflow in json_parse_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9922

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
json_parse_string
json_parse
json_parse_array
```


Summary: Global-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11010

```
Crash type: Global-buffer-overflow READ 1
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
AAT::ContextualSubtable::driver_context_t::transition
void AAT::StateTableDriver<AAT::ContextualSubtable::EntryData>::drive<AAT::Conte
```


Summary: Heap-buffer-overflow in dhcp6_option_parse_status

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10746

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
dhcp6_option_parse_status
dhcp6_option_parse_pdprefix
dhcp6_option_parse_ia
```


Summary: Heap-buffer-overflow in asn1_ex_i2c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7696

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
asn1_ex_i2c
asn1_i2d_ex_primitive
ASN1_item_ex_i2d
```


Summary: Heap-use-after-free in XRefEntry::setFlag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11244

```
Crash type: Heap-use-after-free READ 4
Crash state:
XRefEntry::setFlag
Parser::makeStream
Parser::getObj
```


Summary: Stack-buffer-overflow in cff_parser_run

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9865

```
Crash type: Stack-buffer-overflow READ 8
Crash state:
cff_parser_run
cff_subfont_load
cff_font_load
```


Summary: Heap-buffer-overflow in dotnet_parse_us

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11945

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
dotnet_parse_us
dotnet_parse_com
dotnet__load
```


Summary: Heap-double-free in minimatch_destroy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11408

```
Crash type: Heap-double-free
Crash state:
minimatch_destroy
ofctl_parse_flow
ofctl_parse_target.c
```


Summary: Heap-buffer-overflow in ofpbuf_insert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11253

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
ofpbuf_insert
nx_put_raw
nx_put_match
```


Summary: Use-of-uninitialized-value in AAT::LookupFormat8<OT::IntType<unsigned short, 2u> >::get_value

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10953

```
Crash type: Use-of-uninitialized-value
Crash state:
AAT::LookupFormat8<OT::IntType<unsigned short, 2u> >::get_value
AAT::Lookup<OT::IntType<unsigned short, 2u> >::get_value
AAT::StateTable<AAT::InsertionSubtable::EntryData>::get_class
```


Summary: Heap-buffer-overflow in do_uncompress_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11011

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
do_uncompress_block
process_block
do_uncompress_file
```


Summary: Heap-buffer-overflow in BEInt<unsigned short, 2>::set

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11081

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
BEInt<unsigned short, 2>::set
OT::Script::subset
void OT::OffsetTo<OT::Script, OT::IntType<unsigned short, 2u>, true>::serialize_
```


Summary: Heap-buffer-overflow in BEInt<unsigned int, 4>::operator unsigned int

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10948

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
BEInt<unsigned int, 4>::operator unsigned int
OT::OffsetTo<OT::UnsizedArrayOf<OT::IntType<short, 2u> >, OT::IntType<unsigned i
AAT::KerxSubTableFormat1::driver_context_t::driver_context_t
```


Summary: Use-of-uninitialized-value in imax

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11537

```
Crash type: Use-of-uninitialized-value
Crash state:
imax
selfguided_filter
selfguided_c
```


Summary: Heap-buffer-overflow in cff_parser_run

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9967

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
cff_parser_run
cff_subfont_load
cff_font_load
```


Summary: Use-of-uninitialized-value in FT_Set_Transform

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8811

```
Crash type: Use-of-uninitialized-value
Crash state:
FT_Set_Transform
SplashFTFont::makeGlyph
SplashFont::getGlyph
```


Summary: Heap-use-after-free in yr_re_ast_split_at_chaining_point

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11752

```
Crash type: Heap-use-after-free READ 4
Crash state:
yr_re_ast_split_at_chaining_point
yr_parser_reduce_string_declaration
yara_yyparse
```


Summary: UNKNOWN READ in _hb_ot_shape_fallback_kern

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10762

```
Crash type: UNKNOWN READ
Crash state:
_hb_ot_shape_fallback_kern
hb_ot_position
hb_ot_shape_internal
```


Summary: Stack-buffer-overflow in nullable_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10865

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
nullable_memcpy
nsh_key_to_attr
parse_odp_push_nsh_action
```


Summary: Heap-buffer-overflow in BEInt<unsigned char, 1>::operator unsigned char

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11245

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
BEInt<unsigned char, 1>::operator unsigned char
OT::KernSubTableFormat3::get_kerning
hb_kern_machine_t<OT::KernSubTableFormat3>::kern
```


Summary: Heap-buffer-overflow in rawspeed::VC5Decompressor::Wavelet::HighPassBand::decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11429

```
Crash type: Heap-buffer-overflow WRITE 2
Crash state:
rawspeed::VC5Decompressor::Wavelet::HighPassBand::decode
rawspeed::VC5Decompressor::decode
VC5Decompressor.cpp
```


Summary: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10899

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
AAT::LookupSegmentSingle<OT::IntType<unsigned short, 2u> >::cmp
AAT::LookupSegmentSingle<OT::IntType<unsigned short, 2u> > const* OT::VarSizedBi
```


Summary: Heap-buffer-overflow in prefixcmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11007

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
prefixcmp
git__prefixcmp
git_commit__parse_raw
```


Summary: Heap-buffer-overflow in OT::post::accelerator_t::cmp_gids

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11290

```
Crash type: Heap-buffer-overflow READ 5
Crash state:
OT::post::accelerator_t::cmp_gids
sort_r_cmpswap
sort_r_simple
```


Summary: Heap-buffer-overflow in json_parse_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9847

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
json_parse_object
json_parse
file_is_json
```


Summary: UNKNOWN READ in [stack]

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10445

```
Crash type: UNKNOWN READ
Crash state:
[stack]
```


Summary: Stack-buffer-overflow in cdma2k_message_HANDOFF_DIR

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11633

```
Crash type: Stack-buffer-overflow READ 2
Crash state:
cdma2k_message_HANDOFF_DIR
cdma2k_message_decode
dissect_cdma2k
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11001

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
OT::IndexSubtable::get_extents
OT::IndexSubtableRecord::get_extents
```


Summary: Use-of-uninitialized-value in decode_complex_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10137

```
Crash type: Use-of-uninitialized-value
Crash state:
decode_complex_string
_gnutls_x509_dn_to_string
append_elements
```


Summary: Use-of-uninitialized-value in _decode_pkcs12_auth_safe

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10138

```
Crash type: Use-of-uninitialized-value
Crash state:
_decode_pkcs12_auth_safe
gnutls_pkcs12_get_bag
gnutls_pkcs12_simple_parse
```


Summary: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6796

```
Crash type: Use-of-uninitialized-value
Crash state:
rawspeed::RawImageData::checkMemIsInitialized
rawspeed::RawDecoder::decodeRaw
rawspeed::alignedMalloc
```


Summary: Heap-buffer-overflow in OT::Coverage::intersects

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10084

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
OT::Coverage::intersects
OT::ContextFormat2::closure
_hb_void_t const* OT::hb_closure_context_t::dispatch<OT::ContextFormat2>
```


Summary: Heap-buffer-overflow in network_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11302

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
network_free
manager_free
fuzz-network-parser.c
```


Summary: Stack-buffer-overflow in highbd_dr_prediction_z1_64xN_avx2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11517

```
Crash type: Stack-buffer-overflow READ 16
Crash state:
highbd_dr_prediction_z1_64xN_avx2
av1_highbd_dr_prediction_z1_avx2
av1_predict_intra_block
```


Summary: Heap-use-after-free in r_core_task_decref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11359

```
Crash type: Heap-use-after-free READ 8
Crash state:
r_core_task_decref
r_list_delete
r_list_purge
```


Summary: Heap-buffer-overflow in gmp_emsa_pkcs1_signature_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10671

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
gmp_emsa_pkcs1_signature_data
verify_emsa_pkcs1_signature
verify
```


Summary: Use-of-uninitialized-value in _pkcs12_decode_safe_contents

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10216

```
Crash type: Use-of-uninitialized-value
Crash state:
_pkcs12_decode_safe_contents
_parse_safe_contents
gnutls_pkcs12_get_bag
```


Summary: Heap-buffer-overflow in r_read_le32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11308

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
r_read_le32
r_read_le64
r_bin_file_get_strings
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10986

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
AAT::LookupSegmentSingle<OT::IntType<unsigned short, 2u> >::cmp
AAT::LookupSegmentSingle<OT::IntType<unsigned short, 2u> > const* OT::VarSizedBi
```


Summary: Heap-buffer-overflow in git_buf_vprintf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11004

```
Crash type: Heap-buffer-overflow READ 13
Crash state:
git_buf_vprintf
giterr_set
git__strntol32
```


Summary: Heap-buffer-overflow in SplashPath::lineTo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10148

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
SplashPath::lineTo
Splash::makeDashedPath
Splash::stroke
```


Summary: Heap-buffer-overflow in r_str_utf16_to_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10487

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
r_str_utf16_to_utf8
sections
r_bin_object_set_items
```


Summary: Heap-buffer-overflow in parse_mode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11167

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
parse_mode
git_tree__parse_raw
git_object__from_raw
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9845

```
Crash type: UNKNOWN WRITE
Crash state:
__msan_memcpy.part.51
QuickOpen::ReadRaw
QuickOpen::ReadNext
```

Summary: UNKNOWN WRITE in __msan_memcpy.part.51


Summary: Heap-buffer-overflow in parse_sigalgs_list

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9808

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
parse_sigalgs_list
SSL_CTX_set1_sigalgs_list
std::__1::function<void
```


Summary: Global-buffer-overflow in bloaty::wasm::Section::Read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9540

```
Crash type: Global-buffer-overflow READ 8
Crash state:
bloaty::wasm::Section::Read
bloaty::wasm::ParseSections
bloaty::wasm::WebAssemblyObjectFile::ProcessFile
```


Summary: Heap-buffer-overflow in loop

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5251

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
loop
loop
ftp_pl_insert_finfo
```


Summary: Heap-use-after-free in UA_SecureChannel_deleteMembersCleanup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5499

```
Crash type: Heap-use-after-free READ 8
Crash state:
UA_SecureChannel_deleteMembersCleanup
removeSecureChannelCallback
UA_Server_run_shutdown
```


Summary: Heap-buffer-overflow in token_stream_prepare

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9805

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
token_stream_prepare
parse
typedecl_parse
```


Summary: Use-of-uninitialized-value in gvs_tuple_is_normal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9840

```
Crash type: Use-of-uninitialized-value
Crash state:
gvs_tuple_is_normal
g_variant_serialised_is_normal
gvs_variant_is_normal
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9806

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
token_stream_prepare
token_stream_peek_string
token_stream_consume
```


Summary: UNKNOWN READ in pcf_get_encodings

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9527

```
Crash type: UNKNOWN READ
Crash state:
pcf_get_encodings
pcf_load_font
PCF_Face_Init
```


Summary: Heap-buffer-overflow in gvs_read_unaligned_le

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9807

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
gvs_read_unaligned_le
gvs_tuple_is_normal
g_variant_serialised_is_normal
```


Summary: Heap-buffer-overflow in resip::ParseBuffer::qVal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6713

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
resip::ParseBuffer::qVal
resip::QValueParameter::QValueParameter
resip::QValueParameter::decode
```


Summary: UNKNOWN READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8353

```
Crash type: UNKNOWN READ
Crash state:
NULL```


Summary: Heap-buffer-overflow in pcf_get_encodings

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9561

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pcf_get_encodings
pcf_load_font
PCF_Face_Init
```


Summary: Heap-buffer-overflow in rawspeed::TableLookUp::setTable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5256

```
Crash type: Heap-buffer-overflow WRITE 2
Crash state:
rawspeed::TableLookUp::setTable
rawspeed::RawImageData::setTable
rawspeed::DngDecoder::handleMetadata
```


Summary: Heap-buffer-overflow in g_variant_serialiser_is_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9828

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
g_variant_serialiser_is_string
g_variant_serialiser_is_object_path
g_variant_serialised_is_normal
```


Summary: Heap-buffer-overflow in rtsp_rtp_readwrite

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7105

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
rtsp_rtp_readwrite
readwrite_data
Curl_readwrite
```


Summary: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5843

```
Crash type: Use-of-uninitialized-value
Crash state:
rawspeed::RawImageData::checkMemIsInitialized
rawspeed::RawDecoder::decodeRaw
rawspeed::alignedMalloc
```


Summary: Use-of-uninitialized-value in _cmsReadHeader

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5936

```
Crash type: Use-of-uninitialized-value
Crash state:
_cmsReadHeader
cmsOpenProfileFromMemTHR
fz_lcms_init_profile
```


Summary: Use-of-uninitialized-value in sfnt_open_font

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5603

```
Crash type: Use-of-uninitialized-value
Crash state:
sfnt_open_font
sfnt_init_face
tt_face_init
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9608

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pcf_get_encodings
pcf_load_font
PCF_Face_Init
```


Summary: Use-of-uninitialized-value in fz_keep_imp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6837

```
Crash type: Use-of-uninitialized-value
Crash state:
fz_keep_imp
pdf_copy_pattern_gstate
pdf_show_pattern
```


Summary: Heap-use-after-free in fz_drop_key_storable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5513

```
Crash type: Heap-use-after-free READ 4
Crash state:
fz_drop_key_storable
fz_drop_colorspace_context
fz_drop_context
```


Summary: Heap-use-after-free in fz_fin_cached_color_converter

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5604

```
Crash type: Heap-use-after-free READ 8
Crash state:
fz_fin_cached_color_converter
fz_paint_shade
fz_draw_fill_shade
```


Summary: Heap-use-after-free in add_range

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5492

```
Crash type: Heap-use-after-free READ 4
Crash state:
add_range
pdf_map_range_to_range
pdf_parse_bf_range
```


Summary: Use-of-uninitialized-value in cf2_glyphpath_lineTo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5782

```
Crash type: Use-of-uninitialized-value
Crash state:
cf2_glyphpath_lineTo
cf2_interpT2CharString
cf2_getGlyphOutline
```


Summary: UNKNOWN READ in BEInt<unsigned char, 1>::operator unsigned char

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11351

```
Crash type: UNKNOWN READ
Crash state:
BEInt<unsigned char, 1>::operator unsigned char
OT::DeviceRecord::serialize
OT::hdmx::serialize
```


Summary: Heap-buffer-overflow in ftp_parse_winnt_ls

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7930

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ftp_parse_winnt_ls
wget_ftpls_fuzzer.c
```


Summary: Use-of-uninitialized-value in pdf_lex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5600

```
Crash type: Use-of-uninitialized-value
Crash state:
pdf_lex
pdf_process_stream
pdf_process_contents
```


Summary: Use-of-uninitialized-value in fz_drop_hash_table

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5609

```
Crash type: Use-of-uninitialized-value
Crash state:
fz_drop_hash_table
fz_fin_cached_color_converter
fz_paint_shade
```


Summary: Heap-buffer-overflow in xstrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7931

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
xstrdup
ftp_parse_winnt_ls
wget_ftpls_fuzzer.c
```


Summary: Stack-buffer-overflow in pdf_lookup_cmap_full

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5494

```
Crash type: Stack-buffer-overflow WRITE 4
Crash state:
pdf_lookup_cmap_full
pdf_remap_cmap_range
pdf_remap_cmap
```


Summary: Use-of-uninitialized-value in jbig2_decode_symbol_dict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9688

```
Crash type: Use-of-uninitialized-value
Crash state:
jbig2_decode_symbol_dict
jbig2_symbol_dictionary
jbig2_parse_segment
```


Summary: Heap-buffer-overflow in r_bin_mdmp_get_mem_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10222

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
r_bin_mdmp_get_mem_info
r_bin_mdmp_get_srwx
sections
```


Summary: Use-of-uninitialized-value in pdf_lex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5610

```
Crash type: Use-of-uninitialized-value
Crash state:
pdf_lex
pdf_load_cmap
pdf_load_embedded_cmap
```


Summary: Use-of-uninitialized-value in pdf_load_version

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5496

```
Crash type: Use-of-uninitialized-value
Crash state:
pdf_load_version
pdf_init_document
pdf_open_document_with_stream
```


Summary: Heap-buffer-overflow in git__strntol64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11194

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
git__strntol64
git__strntol32
git_signature__parse
```


Summary: Use-of-uninitialized-value in fz_unpack_tile

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8326

```
Crash type: Use-of-uninitialized-value
Crash state:
fz_unpack_tile
fz_decomp_image_from_stream
compressed_image_get_pixmap
```


Summary: Use-of-uninitialized-value in fz_paint_triangle

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5641

```
Crash type: Use-of-uninitialized-value
Crash state:
fz_paint_triangle
do_paint_tri
fz_process_shade_type4
```


Summary: UNKNOWN READ in _gcry_aes_cbc_enc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6336

```
Crash type: UNKNOWN READ
Crash state:
_gcry_aes_cbc_enc
cmac_write
_gcry_cipher_cmac_authenticate
```


Summary: Heap-buffer-overflow in emu_edge_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11389

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
emu_edge_c
warp_affine
dav1d_recon_b_inter_8bpc
```


Summary: Use-of-uninitialized-value in jbig2_arith_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5636

```
Crash type: Use-of-uninitialized-value
Crash state:
jbig2_arith_decode
jbig2_decode_generic_template0_unopt
jbig2_decode_generic_region
```


Summary: Heap-buffer-overflow in yr_object_set_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14560

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
yr_object_set_string
dotnet_parse_us
dotnet_parse_com
```


Summary: UNKNOWN READ in template_affine_color_N_lerp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6522

```
Crash type: UNKNOWN READ
Crash state:
template_affine_color_N_lerp
paint_affine_color_lerp_N
fz_paint_image_imp
```


Summary: Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10888

```
Crash type: Null-dereference READ
Crash state:
NULL```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5521

```
Crash type: Heap-use-after-free READ 4
Crash state:
fz_drop_key_storable
fz_drop_default_colorspaces
fz_draw_drop_device
```


Summary: Use-of-uninitialized-value in jbig2_arith_bytein

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9677

```
Crash type: Use-of-uninitialized-value
Crash state:
jbig2_arith_bytein
jbig2_arith_new
jbig2_decode_pattern_dict
```


Summary: UNKNOWN READ in ebml_parse_chunk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7887

```
Crash type: UNKNOWN READ
Crash state:
ebml_parse_chunk
matroska_type_find
gst_type_find_factory_call_function
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11022

```
Crash type: Use-of-uninitialized-value
Crash state:
fz_unpack_tile
fz_decomp_image_from_stream
compressed_image_get_pixmap
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8323

```
Crash type: Use-of-uninitialized-value
Crash state:
cf2_glyphpath_lineTo
cf2_glyphpath_closeOpenPath
cf2_glyphpath_moveTo
```


Summary: Use-of-uninitialized-value in evict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5666

```
Crash type: Use-of-uninitialized-value
Crash state:
evict
fz_empty_store
fz_drop_store_context
```


Summary: Negative-size-param in get_urls_css

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8032

```
Crash type: Negative-size-param
Crash state:
get_urls_css
wget_css_fuzzer.c
```


Summary: Use-of-uninitialized-value in template_affine_N_lerp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5616

```
Crash type: Use-of-uninitialized-value
Crash state:
template_affine_N_lerp
paint_affine_lerp_da_sa_0
fz_paint_image_imp
```


Summary: Use-of-uninitialized-value in MatShaperEval16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5748

```
Crash type: Use-of-uninitialized-value
Crash state:
MatShaperEval16
PrecalculatedXFORM
cmsDoTransform
```


Summary: UNKNOWN READ in boost::re_detail_NUMBER::basic_regex_creator<char, boost::regex_traits<char, boo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6708

```
Crash type: UNKNOWN READ
Crash state:
boost::re_detail_NUMBER::basic_regex_creator<char, boost::regex_traits<char, boo
boost::re_detail_NUMBER::basic_regex_creator<char, boost::regex_traits<char, boo
boost::re_detail_NUMBER::basic_regex_parser<char, boost::regex_traits<char, boos
```


Summary: UNKNOWN READ in ftp_disconnect

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12173

```
Crash type: UNKNOWN READ
Crash state:
ftp_disconnect
Curl_disconnect
ConnectionExists
```


Summary: Use-of-uninitialized-value in fz_is_empty_irect

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5865

```
Crash type: Use-of-uninitialized-value
Crash state:
fz_is_empty_irect
fz_intersect_irect
fz_draw_clip_path
```


Summary: Heap-buffer-overflow in Botan::bigint_monty_redc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6581

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
Botan::bigint_monty_redc
Botan::CurveGFp_Montgomery::curve_mul
Botan::CurveGFp_Montgomery::to_curve_rep
```


Summary: Use-of-uninitialized-value in fz_adjust_ft_glyph_width

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5596

```
Crash type: Use-of-uninitialized-value
Crash state:
fz_adjust_ft_glyph_width
do_ft_render_glyph
fz_render_ft_glyph
```


Summary: Use-of-uninitialized-value in jbig2_immediate_generic_region

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9680

```
Crash type: Use-of-uninitialized-value
Crash state:
jbig2_immediate_generic_region
jbig2_parse_segment
jbig2_data_in
```


Summary: UNKNOWN READ in boost::sub_match<std::__1::__wrap_iter<char const*> >::sub_match

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9539

```
Crash type: UNKNOWN READ
Crash state:
boost::sub_match<std::__1::__wrap_iter<char const*> >::sub_match
_ZNSt3__16vectorIN5boost9sub_matchINS_11__wrap_iterIPKcEEEENS_9allocatorIS7_EEE1
boost::match_results<std::__1::__wrap_iter<char const*>, std::__1::allocator<boo
```


Summary: Heap-buffer-overflow in tap_type_find

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8159

```
Crash type: Heap-buffer-overflow READ 12
Crash state:
tap_type_find
gst_type_find_factory_call_function
gst_type_find_helper_for_data
```


Summary: Use-of-uninitialized-value in cf2_glyphpath_pushPrevElem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5659

```
Crash type: Use-of-uninitialized-value
Crash state:
cf2_glyphpath_pushPrevElem
cf2_glyphpath_curveTo
cf2_interpT2CharString
```


Summary: UNKNOWN READ in jpx_read_image

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8866

```
Crash type: UNKNOWN READ
Crash state:
jpx_read_image
fz_load_jpx
pdf_load_jpx
```


Summary: UNKNOWN READ in jbig2_decode_mmr_init

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9681

```
Crash type: UNKNOWN READ
Crash state:
jbig2_decode_mmr_init
jbig2_decode_generic_mmr
jbig2_decode_symbol_dict
```


Summary: Heap-buffer-overflow in OT::post::accelerator_t::cmp_gids

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11263

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
OT::post::accelerator_t::cmp_gids
sort_r_cmpswap
sort_r_simple
```


Summary: Stack-buffer-underflow in ps_index

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9970

```
Crash type: Stack-buffer-underflow READ 8
Crash state:
ps_index
ps_run
eval_postscript_func
```


Summary: Use-of-uninitialized-value in fz_drop_key_storable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5879

```
Crash type: Use-of-uninitialized-value
Crash state:
fz_drop_key_storable
fz_drop_colorspace_context
fz_drop_context
```


Summary: Use-of-uninitialized-value in CachedXFORM4to3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5623

```
Crash type: Use-of-uninitialized-value
Crash state:
CachedXFORM4to3
cmsDoTransform
fz_lcms_transform_pixmap
```


Summary: Use-of-uninitialized-value in jbig2_huffman_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9682

```
Crash type: Use-of-uninitialized-value
Crash state:
jbig2_huffman_get
jbig2_decode_symbol_dict
jbig2_symbol_dictionary
```


Summary: Use-of-uninitialized-value in fz_expand_indexed_pixmap

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5645

```
Crash type: Use-of-uninitialized-value
Crash state:
fz_expand_indexed_pixmap
fz_decomp_image_from_stream
compressed_image_get_pixmap
```


Summary: Heap-buffer-overflow in xstrndup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8033

```
Crash type: Heap-buffer-overflow READ 11
Crash state:
xstrndup
get_urls_css
wget_css_fuzzer.c
```


Summary: Use-of-uninitialized-value in lex_white

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5632

```
Crash type: Use-of-uninitialized-value
Crash state:
lex_white
pdf_lex
pdf_process_stream
```


Summary: Heap-buffer-overflow in GDAL_LercNS::RLE::readCount

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9282

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
GDAL_LercNS::RLE::readCount
GDAL_LercNS::RLE::decompress
GDAL_LercNS::Lerc2::ReadMask
```


Summary: Heap-buffer-overflow in ycc_rgb_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9471

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
ycc_rgb_convert
sep_upsample
process_data_context_main
```


Summary: Heap-buffer-overflow in PCF_Glyph_Load

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9524

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
PCF_Glyph_Load
FT_Load_Glyph
ftfuzzer.cc
```


Summary: Heap-use-after-free in UA_Session_deleteMembersCleanup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5577

```
Crash type: Heap-use-after-free WRITE 8
Crash state:
UA_Session_deleteMembersCleanup
removeSessionCallback
UA_Server_run_shutdown
```


Summary: UNKNOWN READ in BEInt<short, 2>::operator short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11305

```
Crash type: UNKNOWN READ
Crash state:
BEInt<short, 2>::operator short
AAT::KerxSubTableFormat1<AAT::KerxSubTableHeader>::driver_context_t::transition
void AAT::StateTableDriver<AAT::ExtendedTypes, AAT::Format1Entry<true>::EntryDat
```


Summary: Heap-buffer-overflow in ot::MeshForwarder::GetFramePriority

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11376

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
ot::MeshForwarder::GetFramePriority
ot::MeshForwarder::HandleFragment
ot::MeshForwarder::HandleReceivedFrame
```


Summary: UNKNOWN READ in OT::propagate_attachment_offsets

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11013

```
Crash type: UNKNOWN READ
Crash state:
OT::propagate_attachment_offsets
OT::propagate_attachment_offsets
OT::GPOS::position_finish_offsets
```


Summary: Heap-buffer-overflow in read_uncompressed_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11523

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
read_uncompressed_header
av1_decode_frame_headers_and_setup
aom_decode_frame_from_obus
```


Summary: Heap-buffer-overflow in tag_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10999

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
tag_parse
git_tag__parse_raw
git_object__from_raw
```


Summary: Heap-use-after-free in read_uncompressed_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10200

```
Crash type: Heap-use-after-free WRITE 2
Crash state:
read_uncompressed_header
av1_decode_frame_headers_and_setup
aom_decode_frame_from_obus
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9307

```
Crash type: Use-of-uninitialized-value
Crash state:
DosSlashToUnix
ExtractUnixLink50
ExtractSymlink
```

Summary: Use-of-uninitialized-value in DosSlashToUnix


Summary: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12312

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
OT::IntType<unsigned short, 2u>::operator unsigned int
OT::OffsetTo<OT::UnsizedOffsetListOf<AAT::Lookup<OT::IntType<unsigned short, 2u>
```


Summary: Heap-buffer-overflow in parse_odp_key_mask_attr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11170

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
parse_odp_key_mask_attr
parse_odp_action
odp_actions_from_string
```


Summary: Heap-buffer-overflow in BEInt<unsigned int, 4>::operator unsigned int

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11522

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
BEInt<unsigned int, 4>::operator unsigned int
void hb_sanitize_context_t::set_object<OT::KernSubTable<OT::KernAATSubTableHeade
AAT::KerxTable<OT::KernAAT>::sanitize
```


Summary: Heap-buffer-overflow in read_bits_16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12817

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
read_bits_16
decode_number
parse_tables
```


Summary: Heap-buffer-overflow in learn_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11862

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
learn_check
ofpacts_check
parse_ofp_str__
```


Summary: Heap-use-after-free in parse_odp_action

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10796

```
Crash type: Heap-use-after-free READ 2
Crash state:
parse_odp_action
odp_actions_from_string
parse_actions
```


Summary: Use-of-uninitialized-value in read_pbkdf2_params

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10143

```
Crash type: Use-of-uninitialized-value
Crash state:
read_pbkdf2_params
_gnutls_read_pkcs_schema_params
pkcs8_key_decrypt
```


Summary: Stack-buffer-overflow in hb_array_t<char const>::cmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11908

```
Crash type: Stack-buffer-overflow READ 4
Crash state:
hb_array_t<char const>::cmp
OT::post::accelerator_t::cmp_key
hb_bsearch_r
```


Summary: Heap-use-after-free in yr_re_ast_extract_literal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11753

```
Crash type: Heap-use-after-free READ 4
Crash state:
yr_re_ast_extract_literal
_yr_parser_write_string
yr_parser_reduce_string_declaration
```


Summary: Heap-buffer-overflow in ref_oneandzero_unpad

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10628

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ref_oneandzero_unpad
fuzz
fuzzers.h
```


Summary: Use-of-uninitialized-value in g_dbus_message_new_from_blob

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9825

```
Crash type: Use-of-uninitialized-value
Crash state:
g_dbus_message_new_from_blob
fuzz_dbus_message.c
g_dbus_message_new_from_blob
```


Summary: Heap-buffer-overflow in OT::LigatureSubstFormat1::closure

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10081

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
OT::LigatureSubstFormat1::closure
_hb_void_t const* OT::hb_closure_context_t::dispatch<OT::LigatureSubstFormat1>
OT::hb_closure_context_t::return_t OT::LigatureSubst::dispatch<OT::hb_closure_co
```


Summary: Heap-buffer-overflow in encode_LEARN

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12328

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
encode_LEARN
ofpacts_put_openflow_actions
ofputil_encode_flow_mod
```


Summary: Heap-buffer-overflow in put_8tap_scaled_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11378

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
put_8tap_scaled_c
put_8tap_sharp_scaled_c
mc
```


Summary: Heap-use-after-free in TunnelIPv6Interface::remove_address

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10864

```
Crash type: Heap-use-after-free READ 4
Crash state:
TunnelIPv6Interface::remove_address
nl::wpantund::NCPInstanceBase::unicast_address_was_removed
nl::wpantund::NCPInstanceBase::on_mesh_prefix_was_removed
```


Summary: Heap-buffer-overflow in wireguard_done

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11279

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
wireguard_done
netdev_free
netdev_unref
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10881

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
BEInt<unsigned int, 4>::operator unsigned int
OT::kern::has_data
hb_ot_layout_has_kerning
```


Summary: Use-of-uninitialized-value in _gnutls_x509_get_time

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10125

```
Crash type: Use-of-uninitialized-value
Crash state:
_gnutls_x509_get_time
gnutls_x509_crt_get_expiration_time
_gnutls_check_cert_sanity
```


Summary: Heap-use-after-free in Envoy::FakeConnectionBase::close

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8783

```
Crash type: Heap-use-after-free READ 1
Crash state:
Envoy::FakeConnectionBase::close
Envoy::Event::DispatcherImpl::runPostCallbacks
event_process_active_single_queue
```


Summary: Heap-buffer-overflow in CFF::CFF2VariationStore::serialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11713

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
CFF::CFF2VariationStore::serialize
_write_cff2
_hb_subset_cff2
```


Summary: Heap-buffer-overflow in git__strntol64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11173

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
git__strntol64
git_signature__parse
git_commit__parse_raw
```


Summary: ASSERT: bufferRemainingSize() >= length.

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18431

```
Crash type: ASSERT
Crash state:
bufferRemainingSize() >= length.
Envoy::Http::Http1::ConnectionImpl::copyToBuffer
Envoy::Http::Http1::RequestStreamEncoderImpl::encodeHeaders
```


Summary: Use-of-uninitialized-value in numaCrossingsByThreshold

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22764

```
Crash type: Use-of-uninitialized-value
Crash state:
numaCrossingsByThreshold
numaSelectCrossingThreshold
pixExtractBarcodeCrossings
```


Summary: Heap-use-after-free in ndpi_workflow_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20164

```
Crash type: Heap-use-after-free READ 2
Crash state:
ndpi_workflow_process_packet
fuzz_ndpi_reader.c
node_release
```


Summary: Heap-buffer-overflow in xls_isCellTooSmall

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12619

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
xls_isCellTooSmall
xls_preparseWorkSheet
xls_parseWorkSheet
```


Summary: Heap-buffer-overflow in gtTileSeparate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13280

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
gtTileSeparate
TIFFReadRGBATileExt
cv::TiffDecoder::readData
```


Summary: Global-buffer-overflow in ihevcd_unpack_coeffs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16926

```
Crash type: Global-buffer-overflow READ 1
Crash state:
ihevcd_unpack_coeffs
ihevcd_iquant_itrans_recon_ctb
ihevcd_process
```


Summary: Use-of-uninitialized-value in decimate_dsd_run

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19928

```
Crash type: Use-of-uninitialized-value
Crash state:
decimate_dsd_run
WavpackUnpackSamples
WavpackSeekSample64
```


Summary: Heap-use-after-free in DetectParseDupSigCompareFunc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22715

```
Crash type: Heap-use-after-free READ 4
Crash state:
DetectParseDupSigCompareFunc
HashListTableLookup
DetectEngineSignatureIsDuplicate
```


Summary: Use-of-uninitialized-value in ihevc_recon_32x32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20476

```
Crash type: Use-of-uninitialized-value
Crash state:
ihevc_recon_32x32
ihevcd_iquant_itrans_recon_ctb
ihevcd_process
```


Summary: Heap-buffer-overflow in mu::ParserBase::ParseCmdCodeBulk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23123

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
mu::ParserBase::ParseCmdCodeBulk
mu::ParserBase::ParseString
set_eval_fuzzer.cc
```


Summary: UNKNOWN READ in apache::thrift::transport::TMemoryBuffer::readSlow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20681

```
Crash type: UNKNOWN READ
Crash state:
apache::thrift::transport::TMemoryBuffer::readSlow
apache::thrift::transport::TBufferBase::read
unsigned int apache::thrift::transport::readAll<apache::thrift::transport::TBuff
```


Summary: Stack-use-after-return in ihevcd_process_thread

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16912

```
Crash type: Stack-use-after-return READ 8
Crash state:
ihevcd_process_thread
start_thread
```


Summary: Heap-buffer-overflow in ndpi_search_mail_smtp_tcp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18731

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ndpi_search_mail_smtp_tcp
check_ndpi_tcp_flow_func
ndpi_detection_process_packet
```


Summary: Heap-buffer-overflow in sas_read8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12723

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
sas_read8
sas7bdat_parse_column_size_subheader
sas7bdat_parse_page_pass2
```


Summary: Heap-buffer-overflow in ndpi_search_amazon_video

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19100

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_search_amazon_video
check_ndpi_tcp_flow_func
ndpi_detection_process_packet
```


Summary: Heap-buffer-overflow in ndpi_search_memcached

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19324

```
Crash type: Heap-buffer-overflow READ 13
Crash state:
ndpi_search_memcached
check_ndpi_udp_flow_func
ndpi_detection_process_packet
```


Summary: UNKNOWN READ in blosc_run_decompression_with_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23717

```
Crash type: UNKNOWN READ
Crash state:
blosc_run_decompression_with_context
blosc_decompress
fuzz_decompress.c
```


Summary: Heap-buffer-overflow in decode_bit_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16614

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
decode_bit_string
sc_asn1_print_bit_string
print_tags_recursive
```


Summary: Heap-use-after-free in draco::Metadata::AddSubMetadata

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23342

```
Crash type: Heap-use-after-free READ 8
Crash state:
draco::Metadata::AddSubMetadata
draco::MetadataDecoder::DecodeMetadata
draco::MetadataDecoder::DecodeGeometryMetadata
```


Summary: Stack-buffer-overflow in getTLScertificate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19544

```
Crash type: Stack-buffer-overflow WRITE 6
Crash state:
getTLScertificate
tlsDetectProtocolFromCertificate
ndpi_search_tls_tcp_udp
```


Summary: Heap-use-after-free in vips_buf_vappendf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20843

```
Crash type: Heap-use-after-free READ 2
Crash state:
vips_buf_vappendf
vips_verror
vips_error
```


Summary: UNKNOWN READ in exif_mnote_data_olympus_load

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15312

```
Crash type: UNKNOWN READ
Crash state:
exif_mnote_data_olympus_load
exif_data_load_data
exif_loader_get_data
```


Summary: Heap-buffer-overflow in ptls_set_negotiated_protocol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13682

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
ptls_set_negotiated_protocol
client_handle_encrypted_extensions
handle_handshake_record
```


Summary: UNKNOWN READ in auto LLVMFuzzerTestOneInput::$_1::operator

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24195

```
Crash type: UNKNOWN READ
Crash state:
auto LLVMFuzzerTestOneInput::$_1::operator
int fuzzer_input::run<LLVMFuzzerTestOneInput::$_1>
set-gc.cpp
```


Summary: Heap-buffer-overflow in DefragInsertFrag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21446

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
DefragInsertFrag
Defrag
DecodeIPV6
```


Summary: Heap-buffer-overflow in iotlb_to_region_mips

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17193

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
iotlb_to_region_mips
get_page_addr_code_mips
tb_find_slow_mips
```


Summary: Heap-buffer-overflow in ih264d_compute_bs_non_mbaff_thread

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16505

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
ih264d_compute_bs_non_mbaff_thread
ih264d_recon_deblk_slice
ih264d_recon_deblk_thread
```


Summary: UNKNOWN READ in subpixel_ssse3.asm:1165

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14478

```
Crash type: UNKNOWN READ
Crash state:
subpixel_ssse3.asm:1165
```


Summary: Heap-use-after-free in void draco::Metadata::AddEntry<std::__1::vector<unsigned char, std::__1::allocat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23344

```
Crash type: Heap-use-after-free READ 8
Crash state:
void draco::Metadata::AddEntry<std::__1::vector<unsigned char, std::__1::allocat
draco::MetadataDecoder::DecodeEntry
draco::MetadataDecoder::DecodeMetadata
```


Summary: UNKNOWN WRITE in putgreytile

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13283

```
Crash type: UNKNOWN WRITE
Crash state:
putgreytile
gtStripContig
TIFFReadRGBAStripExt
```


Summary: Heap-buffer-overflow in void arrow::util::internal::ByteStreamSlitDecodeSSE2<double>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21420

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
void arrow::util::internal::ByteStreamSlitDecodeSSE2<double>
virtual thunk to parquet::ByteStreamSplitDecoder<parquet::PhysicalType<
parquet::TypedDecoder<parquet::PhysicalType<
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16615

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
decode_bit_string
decode_bit_field
asn1_decode_entry
```


Summary: Use-of-uninitialized-value in McCopyWidthEq16_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13005

```
Crash type: Use-of-uninitialized-value
Crash state:
McCopyWidthEq16_c
WelsDec::BaseMC
WelsDec::GetInterPred
```


Summary: Heap-use-after-free in WelsDec::MapColToList0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14267

```
Crash type: Heap-use-after-free READ 4
Crash state:
WelsDec::MapColToList0
WelsDec::PredBDirectTemporal
WelsDec::WelsDecodeMbCavlcBSlice
```


Summary: Heap-buffer-overflow in xport_construct_format

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12569

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
xport_construct_format
xport_read_labels_v9
xport_read_variables
```


Summary: Stack-buffer-overflow in sc_pkcs15emu_object_add

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19251

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
sc_pkcs15emu_object_add
sc_pkcs15emu_coolkey_init
sc_pkcs15emu_coolkey_init_ex
```


Summary: UNKNOWN READ in arrow::ipc::internal::FieldFromFlatbuffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20123

```
Crash type: UNKNOWN READ
Crash state:
arrow::ipc::internal::FieldFromFlatbuffer
arrow::ipc::internal::FieldFromFlatbuffer
arrow::ipc::internal::GetSchema
```


Summary: Heap-use-after-free in WelsDec::WelsReorderRefList

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14027

```
Crash type: Heap-use-after-free READ 4
Crash state:
WelsDec::WelsReorderRefList
WelsDec::InitRefPicList
WelsDec::DecodeCurrentAccessUnit
```


Summary: Segv on unknown address in cbor_typeof

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21387

```
Crash type: Segv on unknown address
Crash state:
cbor_typeof
_cbor_nested_describe
_cbor_nested_describe
```


Summary: UNKNOWN READ in arrow::Status arrow::internal::ValidateArrayVisitor::ValidateListArray<arrow::La

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20115

```
Crash type: UNKNOWN READ
Crash state:
arrow::Status arrow::internal::ValidateArrayVisitor::ValidateListArray<arrow::La
arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayVisitor>
arrow::internal::ValidateArray
```


Summary: Global-buffer-overflow in kencodingprober::nsCodingStateMachine::NextState

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12918

```
Crash type: Global-buffer-overflow READ 4
Crash state:
kencodingprober::nsCodingStateMachine::NextState
kencodingprober::nsEscCharSetProber::HandleData
kcodecs_fuzzer.cc
```


Summary: UNKNOWN READ in js_parse_source_element

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21404

```
Crash type: UNKNOWN READ
Crash state:
js_parse_source_element
__JS_EvalInternal
JS_Eval
```


Summary: Heap-buffer-overflow in wabt::string_view::compare

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18962

```
Crash type: Heap-buffer-overflow READ 6
Crash state:
wabt::string_view::compare
wabt::operator==
wabt::BinaryReader::ReadCustomSection
```


Summary: Use-of-uninitialized-value in xmlStrlen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15069

```
Crash type: Use-of-uninitialized-value
Crash state:
xmlStrlen
xmlBufferAdd
xmlBufferCat
```


Summary: Heap-buffer-overflow in arrow::UnionType::UnionType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20116

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
arrow::UnionType::UnionType
arrow::union_
arrow::ipc::internal::ConcreteTypeFromFlatbuffer
```


Summary: Use-of-uninitialized-value in ZSTD_createDDict_advanced

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23732

```
Crash type: Use-of-uninitialized-value
Crash state:
ZSTD_createDDict_advanced
ZSTD_createDDict
blosc_run_decompression_with_context
```


Summary: Use-of-uninitialized-value in ihevc_recon_4x4_ttype1

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18991

```
Crash type: Use-of-uninitialized-value
Crash state:
ihevc_recon_4x4_ttype1
ihevcd_iquant_itrans_recon_ctb
ihevcd_process
```


Summary: Use-of-uninitialized-value in xsltNumberFormatInsertNumbers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14471

```
Crash type: Use-of-uninitialized-value
Crash state:
xsltNumberFormatInsertNumbers
xsltNumberFormat
xsltNumber
```


Summary: Heap-buffer-overflow in dav1dFeedData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21947

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
dav1dFeedData
dav1dCodecGetNextImage
avifDecoderNextImage
```


Summary: Use-of-uninitialized-value in inflate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13289

```
Crash type: Use-of-uninitialized-value
Crash state:
inflate
ZIPDecode
_TIFFReadEncodedTileAndAllocBuffer
```


Summary: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20944

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
OT::IntType<unsigned short, 2u>::operator unsigned int
OT::gvar::get_offset
```


Summary: Heap-buffer-overflow in SHA1Transform

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18742

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
SHA1Transform
SHA1Update
getSSCertificateFingerprint
```


Summary: Use-of-uninitialized-value in processClientServerHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21349

```
Crash type: Use-of-uninitialized-value
Crash state:
processClientServerHello
processTLSBlock
ndpi_search_tls_tcp
```


Summary: Stack-buffer-overflow in string_scan_range

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15467

```
Crash type: Stack-buffer-overflow WRITE 1
Crash state:
string_scan_range
get_strings_range
r_bin_file_get_strings
```


Summary: Heap-buffer-overflow in xmlXPathCompileExpr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18385

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
xmlXPathCompileExpr
xmlXPathCtxtCompile
xsltFuzzXPath
```


Summary: Negative-size-param in fuzz_tlv_to_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16696

```
Crash type: Negative-size-param
Crash state:
fuzz_tlv_to_string
fuzz_parse_tlv
curl_fuzzer.cc
```


Summary: UNKNOWN WRITE in ideint_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17077

```
Crash type: UNKNOWN WRITE
Crash state:
ideint_process
impeg2d_deinterlace
impeg2d_dec_pic_data_thread
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21296

```
Crash type: Use-of-uninitialized-value
Crash state:
processClientServerHello
processTLSBlock
ndpi_search_tls_tcp
```


Summary: Heap-use-after-free in rpl_glob

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20176

```
Crash type: Heap-use-after-free READ {*}
Crash state:
rpl_glob
read_config_expand
read_config_expand
```


Summary: UNKNOWN READ in arrow::BufferBuilder::Append

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20721

```
Crash type: UNKNOWN READ
Crash state:
arrow::BufferBuilder::Append
arrow::BaseBinaryBuilder<arrow::BinaryType>::Append
parquet::ArrowBinaryHelper::Append
```


Summary: Use-of-uninitialized-value in time_update_datetime

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14744

```
Crash type: Use-of-uninitialized-value
Crash state:
time_update_datetime
current_mrb_time
mrb_time_now
```


Summary: Heap-buffer-overflow in mu::ParserBase::ParseCmdCodeBulk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23330

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
mu::ParserBase::ParseCmdCodeBulk
mu::ParserBase::ParseString
mu::ParserBase::Eval
```


Summary: Heap-buffer-overflow in dex_parse_debug_item

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12973

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
dex_parse_debug_item
parse_dex_class_method
parse_class
```


Summary: Heap-use-after-free in WelsDec::MapColToList0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14060

```
Crash type: Heap-use-after-free READ 4
Crash state:
WelsDec::MapColToList0
WelsDec::PredBDirectTemporal
WelsDec::ParseInterBInfo
```


Summary: Heap-buffer-overflow in jbig2_image_get_pixel_fast

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20440

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
jbig2_image_get_pixel_fast
jbig2_decode_generic_template0_TPGDON
jbig2_immediate_generic_region
```


Summary: Heap-buffer-overflow in parquet::internal::RecordReader::Make

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20989

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
parquet::internal::RecordReader::Make
parquet::arrow::LeafReader::LeafReader
parquet::arrow::GetReader
```


Summary: Heap-buffer-overflow in tlb_set_page_mips

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15030

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
tlb_set_page_mips
mips_cpu_handle_mmu_fault_mips
tlb_fill_mips
```


Summary: Heap-use-after-free in int std::__1::__cxx_atomic_fetch_sub<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21604

```
Crash type: Heap-use-after-free WRITE 4
Crash state:
int std::__1::__cxx_atomic_fetch_sub<int>
std::__1::__atomic_base<int, true>::operator--
Object::free
```


Summary: Heap-buffer-overflow in getNameLength

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18757

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
getNameLength
getNameLength
ndpi_search_dns
```


Summary: Heap-use-after-free in node_min_byte_len

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21998

```
Crash type: Heap-use-after-free READ 4
Crash state:
node_min_byte_len
tune_quant
tune_tree
```


Summary: Heap-buffer-overflow in ndpi_int_check_stun

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19332

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
ndpi_int_check_stun
ndpi_search_stun
check_ndpi_udp_flow_func
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13941

```
Crash type: Heap-use-after-free READ 4
Crash state:
WelsDec::MapColToList0
WelsDec::PredBDirectTemporal
WelsDec::ParseInterBInfo
```


Summary: Heap-buffer-overflow in arrow::internal::CountSetBits

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20575

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
arrow::internal::CountSetBits
arrow::Array::null_count
arrow::internal::ValidateArray
```


Summary: Heap-buffer-overflow in u8_read_escape_sequence

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22180

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
u8_read_escape_sequence
flb_unescape_string_utf8
logfmt_parser
```


Summary: UNKNOWN READ in vcf_format

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18196

```
Crash type: UNKNOWN READ
Crash state:
vcf_format
vcf_write
bcf_write
```


Summary: Index-out-of-bounds in store_reg_arm

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20026

```
Crash type: Index-out-of-bounds
Crash state:
store_reg_arm
gen_load_exclusive_arm
disas_arm_insn_arm
```


Summary: Use-of-uninitialized-value in pcpp::IDnsResource::decodeName

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22451

```
Crash type: Use-of-uninitialized-value
Crash state:
pcpp::IDnsResource::decodeName
pcpp::IDnsResource::IDnsResource
pcpp::DnsQuery::DnsQuery
```


Summary: Use-of-uninitialized-value in WelsDec::CWelsDecoder::ReorderPicturesInDisplay

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12647

```
Crash type: Use-of-uninitialized-value
Crash state:
WelsDec::CWelsDecoder::ReorderPicturesInDisplay
WelsDec::CWelsDecoder::DecodeFrame2
WelsDec::CWelsDecoder::DecodeFrameNoDelay
```


Summary: Heap-buffer-overflow in rt_read_handler

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12572

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
rt_read_handler
sav_read_variable_missing_values
sav_read_variable_record
```


Summary: Heap-buffer-overflow in vorbis_book_decodev_add

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22207

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
vorbis_book_decodev_add
_01inverse
res1_inverse
```


Summary: Heap-buffer-overflow in xsltFormatNumberConversion

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17171

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
xsltFormatNumberConversion
xsltFormatNumberFunction
xmlXPathCompOpEval
```


Summary: Heap-buffer-overflow in ndpi_search_oscar_tcp_connect

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21000

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ndpi_search_oscar_tcp_connect
check_ndpi_tcp_flow_func
ndpi_detection_process_packet
```


Summary: Heap-buffer-overflow in ndpi_search_h323

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21289

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_search_h323
check_ndpi_tcp_flow_func
ndpi_detection_process_packet
```


Summary: Heap-buffer-overflow in sas_read4

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12584

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
sas_read4
sas7bcat_parse_block
readstat_parse_sas7bcat
```


Summary: Global-buffer-overflow in ssl_sigalg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13797

```
Crash type: Global-buffer-overflow READ 2
Crash state:
ssl_sigalg
tls1_process_sigalgs
tlsext_sigalgs_server_parse
```


Summary: Heap-use-after-free in ihevcd_jobq_lock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16884

```
Crash type: Heap-use-after-free READ 8
Crash state:
ihevcd_jobq_lock
ihevcd_jobq_yield
ihevcd_jobq_dequeue
```


Summary: Heap-buffer-overflow in void apply_sao_internal<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14184

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
void apply_sao_internal<unsigned short>
void apply_sao<unsigned char>
thread_task_sao::work
```


Summary: Use-of-uninitialized-value in read_non_idat_chunks

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22646

```
Crash type: Use-of-uninitialized-value
Crash state:
read_non_idat_chunks
read_chunks
spng_get_plte
```


Summary: Heap-buffer-overflow in ff_hevc_put_hevc_epel_pixels_8_sse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13568

```
Crash type: Heap-buffer-overflow READ 16
Crash state:
ff_hevc_put_hevc_epel_pixels_8_sse
acceleration_functions::put_hevc_epel
void mc_chroma<unsigned short>
```


Summary: UNKNOWN WRITE in ideint_weave_blk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16606

```
Crash type: UNKNOWN WRITE
Crash state:
ideint_weave_blk
ideint_process
impeg2d_deinterlace
```


Summary: UNKNOWN WRITE in mips_release_mips

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13852

```
Crash type: UNKNOWN WRITE
Crash state:
mips_release_mips
uc_close
fuzz_emu_mips_32be.c
```


Summary: Heap-buffer-overflow in ihevcd_sao_shift_ctb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16817

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
ihevcd_sao_shift_ctb
ihevcd_process
ihevcd_parse_slice_data
```


Summary: Heap-buffer-overflow in dex_parse_debug_item

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14021

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
dex_parse_debug_item
parse_dex_class_method
parse_class
```


Summary: Heap-buffer-overflow in asn1_item_ex_d2i

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14217

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
asn1_item_ex_d2i
ASN1_item_d2i
d2i_PrivateKey
```


Summary: UNKNOWN WRITE in arrow::BaseBinaryBuilder<arrow::BinaryType>::UnsafeAppend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21106

```
Crash type: UNKNOWN WRITE
Crash state:
arrow::BaseBinaryBuilder<arrow::BinaryType>::UnsafeAppend
parquet::PlainByteArrayDecoder::DecodeArrowDenseNonNull
parquet::PlainByteArrayDecoder::DecodeArrow
```


Summary: Global-buffer-overflow in ssl_sigalg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13800

```
Crash type: Global-buffer-overflow READ 2
Crash state:
ssl_sigalg
ssl3_get_server_key_exchange
ssl3_connect
```


Summary: Heap-buffer-overflow in sas_read2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12774

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
sas_read2
sas7bdat_parse_column_name_subheader
sas7bdat_parse_page_pass2
```


Summary: Heap-buffer-overflow in pcpp::tbp_my_own_strnlen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22483

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pcpp::tbp_my_own_strnlen
pcpp::HeaderField::HeaderField
pcpp::TextBasedProtocolMessage::parseFields
```


Summary: Heap-buffer-overflow in ih264d_cavlc_4x4res_block_totalcoeff_11to16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16514

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ih264d_cavlc_4x4res_block_totalcoeff_11to16
ih264d_cavlc_parse4x4coeff_n0to7
ih264d_cavlc_parse_8x8block_both_available
```


Summary: Use-of-uninitialized-value in xmlStrlen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15746

```
Crash type: Use-of-uninitialized-value
Crash state:
xmlStrlen
xmlStrncat
xmlNodeAddContentLen
```


Summary: Heap-buffer-overflow in FLAC__bitreader_read_rice_signed_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17069

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
FLAC__bitreader_read_rice_signed_block
read_residual_partitioned_rice_
read_subframe_lpc_
```


Summary: Heap-buffer-overflow in mu::Parser::Sum

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22927

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
mu::Parser::Sum
mu::ParserBase::ParseCmdCodeBulk
mu::ParserBase::ParseString
```


Summary: Use-of-uninitialized-value in JBIG2HuffmanDecoder::buildTable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18802

```
Crash type: Use-of-uninitialized-value
Crash state:
JBIG2HuffmanDecoder::buildTable
JBIG2Stream::readTextRegionSeg
JBIG2Stream::readSegments
```


Summary: Segv on unknown address in arrow::ipc::ReadMessage

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20124

```
Crash type: Segv on unknown address
Crash state:
arrow::ipc::ReadMessage
arrow::ipc::RecordBatchFileReader::RecordBatchFileReaderImpl::ReadMessageFromBlo
arrow::ipc::RecordBatchFileReader::RecordBatchFileReaderImpl::ReadDictionaries
```


Summary: Heap-buffer-overflow in impeg2_fmt_conv_yuv420p_to_yuv420sp_uv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16604

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
impeg2_fmt_conv_yuv420p_to_yuv420sp_uv
impeg2d_format_convert
impeg2d_dec_pic_data_thread
```


Summary: Heap-buffer-overflow in readstat_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12566

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
readstat_convert
sas7bcat_parse_value_labels
sas7bcat_parse_block
```


Summary: Global-buffer-overflow in parse_headers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14154

```
Crash type: Global-buffer-overflow READ 4
Crash state:
parse_headers
parse_http_request
fuzz_parse_http_request
```


Summary: Heap-buffer-overflow in tiffReadCallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14773

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
tiffReadCallback
OJPEGReadHeaderInfoSecTablesQTable
OJPEGReadHeaderInfoSec
```