Summary: Heap-buffer-overflow in lduw_he_p

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26691

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
lduw_he_p
ldn_he_p
flatview_write_continue
```


Summary: Use-of-uninitialized-value in tinfl_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26682

```
Crash type: Use-of-uninitialized-value
Crash state:
tinfl_decompress
mz_inflate
mz_uncompress2
```


Summary: Heap-buffer-overflow in WelsDec::ParseIntra4x4Mode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26723

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
WelsDec::ParseIntra4x4Mode
WelsDec::WelsActualDecodeMbCavlcISlice
WelsDec::WelsDecodeMbCavlcISlice
```


Summary: Stack-buffer-overflow in simdjson::internal::decimal_right_shift

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26773

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
simdjson::internal::decimal_right_shift
simdjson::internal::adjusted_mantissa simdjson::internal::compute_float<simdjson
simdjson::internal::adjusted_mantissa simdjson::internal::parse_long_mantissa<si
```


Summary: Heap-buffer-overflow in res2_inverse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22298

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
res2_inverse
mapping0_inverse
_vorbis_synthesis1
```


Summary: Heap-buffer-overflow in ccr_handle_message_from_client

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26739

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
ccr_handle_message_from_client
cras_rclient_buffer_from_client
rclient_message.cc
```


Summary: Use-of-uninitialized-value in DeblockChromaLt42_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26758

```
Crash type: Use-of-uninitialized-value
Crash state:
DeblockChromaLt42_c
DeblockChromaLt4V2_c
WelsDec::FilteringEdgeChromaH
```


Summary: Heap-buffer-overflow in flb_msgpack_gelf_value_ext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26851

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
flb_msgpack_gelf_value_ext
flb_msgpack_to_gelf
flb_msgpack_raw_to_gelf
```


Summary: UNKNOWN READ in numberparsing.h

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26858

```
Crash type: UNKNOWN READ
Crash state:
numberparsing.h
```


Summary: Use-of-uninitialized-value in WelsDec::BaseMC

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26861

```
Crash type: Use-of-uninitialized-value
Crash state:
WelsDec::BaseMC
WelsDec::GetInterBPred
WelsDec::WelsMbInterPrediction
```


Summary: Heap-buffer-overflow in void parquet::internal::DefRepLevelsToListInfo<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26829

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
void parquet::internal::DefRepLevelsToListInfo<int>
parquet::internal::DefRepLevelsToBitmap
parquet::arrow::StructReader::BuildArray
```


Summary: UNKNOWN READ in jsoncharutils.h

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26859

```
Crash type: UNKNOWN READ
Crash state:
jsoncharutils.h
```


Summary: Heap-buffer-overflow in ndpi_workflow_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26880

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_workflow_process_packet
fuzz_ndpi_reader.c
```


Summary: Heap-use-after-free in pixChangeRefcount

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26967

```
Crash type: Heap-use-after-free READ 4
Crash state:
pixChangeRefcount
pixFree
pixDestroy
```


Summary: Heap-double-free in wmem_simple_free_all

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26952

```
Crash type: Heap-double-free
Crash state:
wmem_simple_free_all
wmem_leave_packet_scope
fuzzshark.c
```


Summary: Heap-buffer-overflow in Op_YCbCr422_to_RGB_16bit::convert_colorspace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21114

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
Op_YCbCr422_to_RGB_16bit::convert_colorspace
heif::ColorConversionPipeline::convert_image
heif::convert_colorspace
```


Summary: Use-of-uninitialized-value in memory_test

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27020

```
Crash type: Use-of-uninitialized-value
Crash state:
memory_test
fuzzer_send
SendBuffered
```


Summary: Stack-use-after-return in solidity::smtutil::CHCSmtLib2Interface::querySolver

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26997

```
Crash type: Stack-use-after-return READ 8
Crash state:
solidity::smtutil::CHCSmtLib2Interface::querySolver
solidity::smtutil::CHCSmtLib2Interface::query
solidity::frontend::CHC::query
```


Summary: Heap-buffer-overflow in flb_gzip_compress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27261

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
flb_gzip_compress
utils_fuzzer.c
```


Summary: Heap-buffer-overflow in tdefl_compress_lz_codes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27263

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
tdefl_compress_lz_codes
tdefl_compress_block
tdefl_flush_block
```


Summary: UNKNOWN READ in wpabuf_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27269

```
Crash type: UNKNOWN READ
Crash state:
wpabuf_free
p2p_device_free
p2p_flush
```


Summary: Heap-buffer-overflow in _flb_strptime

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27241

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
_flb_strptime
flb_strptime
strp_fuzzer.c
```


Summary: Use-of-uninitialized-value in Mat_VarReadNextInfo5

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27258

```
Crash type: Use-of-uninitialized-value
Crash state:
Mat_VarReadNextInfo5
Mat_VarReadNextInfo
Mat_GetDir
```


Summary: Heap-double-free in flb_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27025

```
Crash type: Heap-double-free
Crash state:
flb_free
flb_sds_destroy
flb_kv_item_destroy
```


Summary: Heap-use-after-free in String_clear

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20437

```
Crash type: Heap-use-after-free READ 8
Crash state:
String_clear
clearStructure
Variant_clear
```


Summary: Heap-double-free in flb_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27279

```
Crash type: Heap-double-free
Crash state:
flb_free
flb_http_client_destroy
flb_http_client
```


Summary: Use-of-uninitialized-value in WelsDec::WelsDeblockingMb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27306

```
Crash type: Use-of-uninitialized-value
Crash state:
WelsDec::WelsDeblockingMb
WelsDec::WelsDeblockingFilterSlice
WelsDec::WelsTargetSliceConstruction
```


Summary: UNKNOWN READ in __dynamic_cast

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27315

```
Crash type: UNKNOWN READ
Crash state:
__dynamic_cast
HandleDynamicTypeCacheMiss
RDKit::SubstanceGroup::addAtomWithBookmark
```


Summary: Heap-buffer-overflow in wolfSSH_accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27298

```
Crash type: Heap-buffer-overflow READ 5
Crash state:
wolfSSH_accept
server.c
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27368

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
flb_gzip_compress
utils_fuzzer.c
```


Summary: Use-of-uninitialized-value in xmlStrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23144

```
Crash type: Use-of-uninitialized-value
Crash state:
xmlStrdup
__xmlRaiseError
xmlErrValidNode
```


Summary: Use-of-uninitialized-value in tinfl_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27413

```
Crash type: Use-of-uninitialized-value
Crash state:
tinfl_decompress
mz_inflate
mz_uncompress2
```


Summary: Heap-buffer-overflow in void arrow::internal::TransferBitmap<

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27474

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
void arrow::internal::TransferBitmap<
arrow::ConcatenateBitmaps
arrow::ConcatenateImpl::Concatenate
```


Summary: Heap-buffer-overflow in wolfSSH_CleanPath

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27436

```
Crash type: Heap-buffer-overflow READ 16
Crash state:
wolfSSH_CleanPath
ParseScpCommand
DoScpRequest
```


Summary: Stack-buffer-overflow in insert_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27480

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
insert_key
detect_netkey
sc_pkcs15emu_tcos_init_ex
```


Summary: Global-buffer-overflow in arrow::Status arrow::internal::ValidateArrayFullImpl::ValidateListLike<arrow::Li

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27475

```
Crash type: Global-buffer-overflow READ 4
Crash state:
arrow::Status arrow::internal::ValidateArrayFullImpl::ValidateListLike<arrow::Li
arrow::internal::ValidateArrayFullImpl::ValidateWithType
arrow::internal::ValidateArrayFull
```


Summary: Heap-buffer-overflow in flb_parser_json_do

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27499

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
flb_parser_json_do
flb_parser_do
parser_fuzzer.c
```


Summary: Heap-buffer-overflow in msix_vector_masked

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27418

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
msix_vector_masked
msix_is_masked
msix_table_mmio_write
```


Summary: Use-of-uninitialized-value in isSameGfxColor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27523

```
Crash type: Use-of-uninitialized-value
Crash state:
isSameGfxColor
Gfx::doAxialShFill
Gfx::opShFill
```


Summary: Heap-buffer-overflow in get_32aligned_be64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27524

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
get_32aligned_be64
nl_attr_get_be64
format_odp_tun_attr
```


Summary: Heap-buffer-overflow in H5D__scatter_mem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27625

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
H5D__scatter_mem
H5D__scatgath_read
H5D__contig_read
```


Summary: Stack-buffer-overflow in fp_read_unsigned_bin

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27666

```
Crash type: Stack-buffer-overflow READ 8
Crash state:
fp_read_unsigned_bin
mp_read_unsigned_bin
wc_RsaPublicKeyDecodeRaw
```


Summary: Stack-buffer-overflow in insert_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27719

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
insert_key
detect_netkey
sc_pkcs15emu_tcos_init_ex
```


Summary: Heap-buffer-overflow in arrow::internal::ValidateUTF8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27731

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
arrow::internal::ValidateUTF8
arrow::internal::ValidateArrayFullImpl::ValidateWithType
arrow::internal::ValidateArrayFullImpl::Visit
```


Summary: Heap-buffer-overflow in __libcpp_strstr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23145

```
Crash type: Heap-buffer-overflow READ 13
Crash state:
__libcpp_strstr
strstr
pcpp::SipRequestFirstLine::parseVersion
```


Summary: UNKNOWN READ in helper_be_stl_mmu_armeb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27736

```
Crash type: UNKNOWN READ
Crash state:
helper_be_stl_mmu_armeb
[stack]
```


Summary: Heap-buffer-overflow in Lizard_decompress_safe

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27818

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
Lizard_decompress_safe
blosc_d
do_job
```


Summary: Heap-buffer-overflow in frame_get_usermeta

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27812

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
frame_get_usermeta
blosc2_frame_to_schunk
blosc2_schunk_open_sframe
```


Summary: Heap-buffer-overflow in ih264d_parse_pslice

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27856

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
ih264d_parse_pslice
ih264d_parse_decode_slice
ih264d_parse_nal_unit
```


Summary: Heap-buffer-overflow in decompress_smooth_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27852

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
decompress_smooth_data
process_data_context_main
jpeg_read_scanlines
```


Summary: Heap-use-after-free in decode_NXAST_RAW_ENCAP

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27851

```
Crash type: Heap-use-after-free WRITE 2
Crash state:
decode_NXAST_RAW_ENCAP
ofpact_decode
ofpacts_decode
```


Summary: Container-overflow in parquet::schema::Unflatten

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20897

```
Crash type: Container-overflow READ 4
Crash state:
parquet::schema::Unflatten
parquet::FileMetaData::FileMetaDataImpl::FileMetaDataImpl
parquet::FileMetaData::FileMetaData
```


Summary: Global-buffer-overflow in draco::MeshEdgebreakerDecoderImpl<draco::MeshEdgebreakerTraversalValenceDecoder>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27950

```
Crash type: Global-buffer-overflow READ 4
Crash state:
draco::MeshEdgebreakerDecoderImpl<draco::MeshEdgebreakerTraversalValenceDecoder>
draco::MeshEdgebreakerDecoderImpl<draco::MeshEdgebreakerTraversalValenceDecoder>
draco::MeshDecoder::DecodeGeometryData
```


Summary: Heap-buffer-overflow in ojph::local::ojph_decode_codeblock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27924

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
ojph::local::ojph_decode_codeblock
grk::t1_ht::T1HT::decompress
grk::DecompressBlockExec::open
```


Summary: Segv on unknown address in ndpi_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27988

```
Crash type: Segv on unknown address
Crash state:
ndpi_free
ndpi_free_flow
fuzz_process_packet.c
```


Summary: Heap-buffer-overflow in ih264d_fill_bs1_16x16mb_pslice

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28039

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
ih264d_fill_bs1_16x16mb_pslice
ih264d_compute_bs_non_mbaff_thread
ih264d_recon_deblk_slice
```


Summary: Heap-buffer-overflow in std::__1::pair<int, void*> uWS::HttpParser::fenceAndConsumePostPadded<0>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28143

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
std::__1::pair<int, void*> uWS::HttpParser::fenceAndConsumePostPadded<0>
uWS::HttpParser::consumePostPadded
uWS::HttpContext<false>::init
```


Summary: Heap-buffer-overflow in mk_rconf_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28241

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
mk_rconf_read
mk_rconf_open
flb_parser_conf_file
```


Summary: UNKNOWN READ in std::__1::pair<unsigned int, void*> uWS::HttpParser::fenceAndConsumePostPadded<0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28216

```
Crash type: UNKNOWN READ
Crash state:
std::__1::pair<unsigned int, void*> uWS::HttpParser::fenceAndConsumePostPadded<0
uWS::HttpParser::consumePostPadded
std::__1::__function::__func<LLVMFuzzerTestOneInput::$_0, std::__1::allocator<LL
```


Summary: Heap-double-free in sc_pkcs15_free_tokeninfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28185

```
Crash type: Heap-double-free
Crash state:
sc_pkcs15_free_tokeninfo
sc_pkcs15_card_free
fuzz_pkcs15_reader.c
```


Summary: Heap-use-after-free in e1000e_write_packet_to_guest

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28194

```
Crash type: Heap-use-after-free READ 8
Crash state:
e1000e_write_packet_to_guest
e1000e_receive_iov
e1000e_nc_receive_iov
```


Summary: Heap-buffer-overflow in ieeeNUMBER_fragment_hash

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28191

```
Crash type: Heap-buffer-overflow READ 6
Crash state:
ieeeNUMBER_fragment_hash
g_hash_table_insert_internal
fragment_add_seq_common
```


Summary: Heap-use-after-free in CRYPTO_DOWN_REF

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21550

```
Crash type: Heap-use-after-free WRITE 4
Crash state:
CRYPTO_DOWN_REF
DH_free
evp_pkey_free_legacy
```


Summary: Heap-buffer-overflow in _zend_is_inconsistent

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28129

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
_zend_is_inconsistent
zend_hash_find
zend_hash_find_ptr
```


Summary: Heap-buffer-overflow in flb_sds_cat_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28222

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
flb_sds_cat_utf8
flb_msgpack_gelf_value
flb_msgpack_to_gelf
```


Summary: Heap-buffer-overflow in dotnet_parse_tilde_2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28253

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
dotnet_parse_tilde_2
dotnet_parse_tilde
dotnet_parse_com
```


Summary: Heap-buffer-overflow in flb_http_do

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28256

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
flb_http_do
http_fuzzer.c
```


Summary: Use-of-uninitialized-value in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23038

```
Crash type: Use-of-uninitialized-value
Crash state:
std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
pcpp::IDnsResource::IDnsResource
```


Summary: Heap-buffer-overflow in process_chunked_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28265

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
process_chunked_data
process_data
fuzz_process_data
```


Summary: Heap-buffer-overflow in mk_string_copy_substr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28277

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
mk_string_copy_substr
mk_rconf_meta_add
mk_rconf_read
```


Summary: Heap-buffer-overflow in tinfl_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28285

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
tinfl_decompress
mz_inflate
flb_gzip_uncompress
```


Summary: Heap-buffer-overflow in Pl_ASCII85Decoder::write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28262

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
Pl_ASCII85Decoder::write
Pl_AES_PDF::flush
Pl_AES_PDF::finish
```


Summary: Stack-buffer-overflow in ot::MeshCoP::ChannelMaskEntryBase::GetEntrySize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28315

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
ot::MeshCoP::ChannelMaskEntryBase::GetEntrySize
ot::MeshCoP::ChannelMaskEntryBase::GetNext
ot::MeshCoP::ChannelMaskBaseTlv::IsValid
```


Summary: Heap-buffer-overflow in dname_pkt_compare

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20308

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
dname_pkt_compare
scrub_normalize
scrub_message
```


Summary: Heap-buffer-overflow in blosc_run_decompression_with_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28392

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
blosc_run_decompression_with_context
blosc2_decompress_ctx
frame_decompress_chunk
```


Summary: Global-buffer-overflow in g_date_time_get_ymd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28477

```
Crash type: Global-buffer-overflow READ 2
Crash state:
g_date_time_get_ymd
g_date_time_get_year
g_date_time_format_utf8
```


Summary: Stack-use-after-return in insert_pin

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28383

```
Crash type: Stack-use-after-return READ 1
Crash state:
insert_pin
detect_idkey
sc_pkcs15emu_tcos_init_ex
```


Summary: Stack-buffer-overflow in ot::MeshCoP::ChannelMaskEntry::GetMask

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28556

```
Crash type: Stack-buffer-overflow READ 4
Crash state:
ot::MeshCoP::ChannelMaskEntry::GetMask
ot::MeshCoP::ChannelMaskTlv::GetChannelMask
ot::MeshCoP::Dataset::ConvertTo
```


Summary: Heap-buffer-overflow in McChromaWithFragMv_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28639

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
McChromaWithFragMv_c
McChroma_ssse3
WelsDec::BaseMC
```


Summary: Stack-buffer-overflow in ot::IsValidUtf8String

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28682

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
ot::IsValidUtf8String
ot::MeshCoP::NetworkNameTlv::IsValid
ot::MeshCoP::Tlv::IsValid
```


Summary: Heap-double-free in spng__free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22720

```
Crash type: Heap-double-free
Crash state:
spng__free
spng__inflate_stream
read_non_idat_chunks
```


Summary: Stack-buffer-overflow in perfetto::trace_processor::MemoryTrackerSnapshotParser::EmitRows

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28766

```
Crash type: Stack-buffer-overflow READ 4
Crash state:
perfetto::trace_processor::MemoryTrackerSnapshotParser::EmitRows
perfetto::trace_processor::MemoryTrackerSnapshotParser::GenerateGraphFromRawNode
perfetto::trace_processor::MemoryTrackerSnapshotParser::NotifyEndOfFile
```


Summary: Heap-buffer-overflow in McCopyWidthEq4_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28769

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
McCopyWidthEq4_c
McCopy_sse2
McChroma_ssse3
```


Summary: Negative-size-param in tcos_decipher

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28768

```
Crash type: Negative-size-param
Crash state:
tcos_decipher
sc_decipher
use_key
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28945

```
Crash type: Bad-cast
Crash state:
Bad-cast to pcpp::Layer from invalid vptr
pcpp::IDnsResource::getRawData
pcpp::DnsResource::getDataLength
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28981

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
dotnet_parse_tilde_2
dotnet_parse_tilde
dotnet_parse_com
```


Summary: Heap-double-free in WelsCommon::WelsFree

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29073

```
Crash type: Heap-double-free
Crash state:
WelsCommon::WelsFree
WelsCommon::CMemoryAlign::WelsFree
WelsDec::FreePicture
```


Summary: UNKNOWN READ in ndpi_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29081

```
Crash type: UNKNOWN READ
Crash state:
ndpi_free
ndpi_free_flow
fuzz_process_packet.c
```


Summary: Heap-buffer-overflow in ato16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29103

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ato16
TLSX_CSR_Parse
TLSX_Parse
```


Summary: Heap-buffer-overflow in H5MM_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29493

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
H5MM_strdup
H5O_attr_shared_decode
H5O_msg_iterate_real
```


Summary: Heap-buffer-overflow in H5MM_xstrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29553

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
H5MM_xstrdup
H5G__ent_to_link
H5G__node_iterate
```


Summary: Use-of-uninitialized-value in Splash::pipeRunSimpleXBGR8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29651

```
Crash type: Use-of-uninitialized-value
Crash state:
Splash::pipeRunSimpleXBGR8
Splash::drawSpan
Splash::fillWithPattern
```


Summary: Use-of-uninitialized-value in memory_test

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29731

```
Crash type: Use-of-uninitialized-value
Crash state:
memory_test
fuzzer_send
wolfSSH_SendPacket
```


Summary: UNKNOWN WRITE in tb_flush_armeb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30391

```
Crash type: UNKNOWN WRITE
Crash state:
tb_flush_armeb
cpu_arm_exec_armeb
tcg_cpu_exec_armeb
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30568

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
derive_collocated_motion_vectors
derive_temporal_luma_vector_prediction
fill_luma_motion_vector_predictors
```

Summary: Heap-buffer-overflow in derive_collocated_motion_vectors


Summary: UNKNOWN WRITE in flb_utils_proxy_url_split

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31306

```
Crash type: UNKNOWN WRITE
Crash state:
flb_utils_proxy_url_split
utils_fuzzer.c
```


Summary: UNKNOWN WRITE in gen_mftr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20081

```
Crash type: UNKNOWN WRITE
Crash state:
gen_mftr
```


Summary: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20021

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
OT::IntType<unsigned short, 2u>::operator unsigned int
OT::ArrayOf<OT::FeatureTableSubstitutionRecord, OT::IntType<unsigned short, 2u>
```


Summary: UNKNOWN WRITE in cpu_arm_exec_arm

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20220

```
Crash type: UNKNOWN WRITE
Crash state:
cpu_arm_exec_arm
tcg_exec_all_arm
qemu_tcg_cpu_loop
```


Summary: Heap-buffer-overflow in archive_read_format_cpio_read_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21048

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
archive_read_format_cpio_read_header
_archive_read_next_header2
_archive_read_next_header
```


Summary: UNKNOWN READ in UA_Server_initNS0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23137

```
Crash type: UNKNOWN READ
Crash state:
UA_Server_initNS0
UA_Server_newWithConfig
UA_Server_new
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20022

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
OT::IntType<unsigned short, 2u>::operator unsigned int
decltype
```


Summary: Heap-buffer-overflow in get_ndpi_flow_info6

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20091

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
get_ndpi_flow_info6
packet_processing
ndpi_workflow_process_packet
```


Summary: Heap-use-after-free in copy_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19990

```
Crash type: Heap-use-after-free READ 1
Crash state:
copy_string
do_uncompress_block
process_block
```


Summary: Heap-buffer-overflow in pcpp::SSLCertificateRequestMessage::SSLCertificateRequestMessage

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23026

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pcpp::SSLCertificateRequestMessage::SSLCertificateRequestMessage
pcpp::SSLHandshakeMessage::createHandhakeMessage
pcpp::SSLHandshakeLayer::SSLHandshakeLayer
```


Summary: UNKNOWN READ in perfetto::trace_processor::TraceStorage::GetIdForVariadicType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19999

```
Crash type: UNKNOWN READ
Crash state:
perfetto::trace_processor::TraceStorage::GetIdForVariadicType
perfetto::trace_processor::GlobalArgsTracker::AddArgSet
perfetto::trace_processor::ArgsTracker::Flush
```


Summary: Heap-buffer-overflow in ndpi_workflow_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20089

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
ndpi_workflow_process_packet
fuzz_ndpi_reader.c
```


Summary: Heap-buffer-overflow in OT::VarRegionList::serialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19956

```
Crash type: Heap-buffer-overflow READ 12
Crash state:
OT::VarRegionList::serialize
OT::VariationStore::serialize
bool OT::HVARVVAR::_subset<OT::HVAR>
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20036

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
OT::IntType<unsigned short, 2u>::operator unsigned int
OT::IndexArray::add_indexes_to
```


Summary: Heap-use-after-free in ndpi_http_check_content

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23046

```
Crash type: Heap-use-after-free READ 3
Crash state:
ndpi_http_check_content
check_content_type_and_change_protocol
ndpi_check_http_tcp
```


Summary: Use-of-uninitialized-value in WavpackDeleteTagItem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20060

```
Crash type: Use-of-uninitialized-value
Crash state:
WavpackDeleteTagItem
WavpackAppendTagItem
fuzzer.cc
```


Summary: Heap-use-after-free in LocalizedText_clear

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20061

```
Crash type: Heap-use-after-free READ 8
Crash state:
LocalizedText_clear
Variant_clear
UA_clear
```


Summary: Heap-buffer-overflow in cipher_generic_initiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19926

```
Crash type: Heap-buffer-overflow READ 16
Crash state:
cipher_generic_initiv
cipher_generic_init_internal
cryptofuzz::module::OpenSSL::OpSymmetricDecrypt_EVP
```


Summary: UNKNOWN READ in Sass::Inspect::operator

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19988

```
Crash type: UNKNOWN READ
Crash state:
Sass::Inspect::operator
Sass::Output::operator
Sass::Output::operator
```


Summary: Global-buffer-overflow in json_tokener_parse_ex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23619

```
Crash type: Global-buffer-overflow READ 4
Crash state:
json_tokener_parse_ex
tokener_parse_ex_fuzzer.cc
```


Summary: Stack-buffer-overflow in mrb_str_len_to_dbl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19902

```
Crash type: Stack-buffer-overflow WRITE 1
Crash state:
mrb_str_len_to_dbl
mrb_str_len_to_inum
mrb_str_to_i
```


Summary: Heap-buffer-overflow in pixReadFromTiffStream

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23654

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pixReadFromTiffStream
pixReadMemTiff
pixReadMem
```


Summary: Heap-buffer-overflow in dname_pkt_copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20093

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
dname_pkt_copy
pkt_strict_sub
scrub_normalize
```


Summary: Global-buffer-overflow in dissect_wassp_sub_tlv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20004

```
Crash type: Global-buffer-overflow READ 8
Crash state:
dissect_wassp_sub_tlv
dissect_wassp_sub_tlv
dissect_wassp_tlv
```


Summary: Heap-use-after-free in ihevcd_jobq_lock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17553

```
Crash type: Heap-use-after-free READ 4
Crash state:
ihevcd_jobq_lock
ihevcd_jobq_yield
ihevcd_jobq_dequeue
```


Summary: Stack-buffer-overflow in ot::Message::Write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19338

```
Crash type: Stack-buffer-overflow READ 11
Crash state:
ot::Message::Write
ot::Message::Append
ot::Mle::Mle::AppendResponse
```


Summary: UNKNOWN READ in parquet::DictDecoderImpl<parquet::PhysicalType<

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21567

```
Crash type: UNKNOWN READ
Crash state:
parquet::DictDecoderImpl<parquet::PhysicalType<
parquet::ColumnReaderImplBase<parquet::PhysicalType<
parquet::ColumnReaderImplBase<parquet::PhysicalType<
```


Summary: Use-of-uninitialized-value in WelsDec::CWelsDecoder::ReleaseBufferedReadyPicture

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18744

```
Crash type: Use-of-uninitialized-value
Crash state:
WelsDec::CWelsDecoder::ReleaseBufferedReadyPicture
WelsDec::CWelsDecoder::ReorderPicturesInDisplay
WelsDec::CWelsDecoder::DecodeFrame2WithCtx
```


Summary: Heap-use-after-free in dotnet_parse_tilde_2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19179

```
Crash type: Heap-use-after-free READ 2
Crash state:
dotnet_parse_tilde_2
dotnet_parse_tilde
dotnet_parse_com
```


Summary: Heap-buffer-overflow in parquet::LevelDecoder::SetData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20940

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
parquet::LevelDecoder::SetData
parquet::ColumnReaderImplBase<parquet::PhysicalType<
parquet::internal::TypedRecordReader<parquet::PhysicalType<
```


Summary: Heap-use-after-free in copy_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19509

```
Crash type: Heap-use-after-free READ 1
Crash state:
copy_string
do_uncompress_block
process_block
```


Summary: Heap-buffer-overflow in ih264d_decode_slice_thread

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19027

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ih264d_decode_slice_thread
ih264d_decode_picture_thread
clone
```


Summary: Global-buffer-overflow in lex_multiline_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18562

```
Crash type: Global-buffer-overflow READ 3
Crash state:
lex_multiline_string
lex_next
parse_key_value
```


Summary: Heap-buffer-overflow in get16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20712

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
get16
search_valid_dns
ndpi_search_dns
```


Summary: Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15458

```
Crash type: Null-dereference READ
Crash state:
NULL```


Summary: Use-of-uninitialized-value in ZSTD_loadCEntropy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19146

```
Crash type: Use-of-uninitialized-value
Crash state:
ZSTD_loadCEntropy
ZSTD_loadZstdDictionary
ZSTD_compress_insertDictionary
```


Summary: Heap-use-after-free in condition_free_list_type

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13882

```
Crash type: Heap-use-after-free READ 8
Crash state:
condition_free_list_type
config_parse_net_condition
next_assignment
```


Summary: Heap-use-after-free in pixReadMemBmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19723

```
Crash type: Heap-use-after-free READ {*}
Crash state:
pixReadMemBmp
pixReadMem
pix_rotate_shear_fuzzer.cc
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17147

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
ot::Message::Write
ot::Message::Append
ot::Mle::Mle::AppendNetworkData
```


Summary: Heap-use-after-free in CRYPTO_DOWN_REF

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20816

```
Crash type: Heap-use-after-free WRITE 4
Crash state:
CRYPTO_DOWN_REF
DH_free
evp_pkey_free_it
```


Summary: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18877

```
Crash type: Use-of-uninitialized-value
Crash state:
rawspeed::RawImageData::checkMemIsInitialized
PhaseOneDecompressor.cpp
posix_memalign
```


Summary: Heap-buffer-overflow in ihevcd_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18058

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ihevcd_process
ihevcd_process_thread
clone
```


Summary: Bad-free in sig_destroyed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17160

```
Crash type: Bad-free
Crash state:
sig_destroyed
signal_emit_real
signal_emit
```


Summary: UNKNOWN WRITE in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22962

```
Crash type: UNKNOWN WRITE
Crash state:
std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
pcpp::IDnsResource::IDnsResource
```


Summary: Heap-buffer-overflow in sas_read4

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12978

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
sas_read4
sas7bdat_parse_page_pass2
sas7bdat_parse_all_pages_pass2
```


Summary: UNKNOWN READ in dav1d_put_bilin_avx2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16954

```
Crash type: UNKNOWN READ
Crash state:
dav1d_put_bilin_avx2
```


Summary: Stack-buffer-overflow in ot::NetworkData::Leader::SendCommissioningGetResponse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17297

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
ot::NetworkData::Leader::SendCommissioningGetResponse
ot::NetworkData::Leader::HandleCommissioningGet
ot::Coap::CoapBase::ProcessReceivedRequest
```


Summary: Heap-buffer-overflow in spng_decode_image

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16830

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
spng_decode_image
spng_read_fuzzer.cc
```


Summary: Heap-buffer-overflow in UA_copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15152

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
UA_copy
RefTree_add
Operation_Browse
```


Summary: Heap-use-after-free in AES_wrap_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23014

```
Crash type: Heap-use-after-free READ 8
Crash state:
AES_wrap_key
aes_wrap_cipher
EVP_EncryptUpdate
```


Summary: Heap-buffer-overflow in git_buf_decode_base85

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18882

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
git_buf_decode_base85
parse_patch_binary_side
parse_patch_binary
```


Summary: Heap-buffer-overflow in r_str_utf8_codepoint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18122

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
r_str_utf8_codepoint
r_str_char_fullwidth
r_str_len_utf8
```


Summary: Heap-buffer-overflow in r_core_lines_initcache

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15035

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
r_core_lines_initcache
cb_linesto
r_config_set_i
```


Summary: Use-of-uninitialized-value in inv_txfm2d_add_facade

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12552

```
Crash type: Use-of-uninitialized-value
Crash state:
inv_txfm2d_add_facade
av1_inv_txfm2d_add_64x64_c
av1_inverse_transform_block
```


Summary: Heap-buffer-overflow in read_bits_16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20459

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
read_bits_16
decode_number
do_uncompress_block
```


Summary: Negative-size-param in parse_proxy_protocol_v2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14455

```
Crash type: Negative-size-param
Crash state:
parse_proxy_protocol_v2
parse_http_request
fuzz_parse_http_request
```


Summary: Use-of-uninitialized-value in ht_copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15603

```
Crash type: Use-of-uninitialized-value
Crash state:
ht_copy
mrb_hash_dup
mrb_vm_exec
```


Summary: Heap-buffer-overflow in av1_convolve_2d_copy_sr_sse2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12549

```
Crash type: Heap-buffer-overflow READ 16
Crash state:
av1_convolve_2d_copy_sr_sse2
av1_convolve_2d_facade
av1_make_inter_predictor
```


Summary: Stack-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15159

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
nccfdriver::attrf
nccfdriver::getCFVersion
```


Summary: Heap-buffer-overflow in sas_read8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12662

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
sas_read8
sas7bdat_parse_page_pass2
sas7bdat_parse_all_pages_pass2
```


Summary: UNKNOWN READ in dotnet_parse_tilde_2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16448

```
Crash type: UNKNOWN READ
Crash state:
dotnet_parse_tilde_2
dotnet_parse_tilde
dotnet_parse_com
```


Summary: Heap-buffer-overflow in sas_read8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13262

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
sas_read8
sas7bdat_parse_subheader_pointer
sas7bdat_parse_page_pass2
```


Summary: Heap-buffer-overflow in _iri_unescape_inline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14427

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
_iri_unescape_inline
wget_iri_parse
_add_mirror
```


Summary: Global-buffer-overflow in template_fuzzer.cc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18988

```
Crash type: Global-buffer-overflow WRITE 1
Crash state:
template_fuzzer.cc
```


Summary: Stack-buffer-overflow in ot::NetworkData::PrefixTlv::Init

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12589

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
ot::NetworkData::PrefixTlv::Init
ot::NetworkData::Local::AddOnMeshPrefix
otError ot::Ncp::NcpBase::HandlePropertyInsert<
```


Summary: Global-buffer-overflow in lex_multiline_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18626

```
Crash type: Global-buffer-overflow READ 1
Crash state:
lex_multiline_string
lex_next
parse_key_value
```


Summary: UNKNOWN READ in parquet::LevelDecoder::SetData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20666

```
Crash type: UNKNOWN READ
Crash state:
parquet::LevelDecoder::SetData
parquet::ColumnReaderImplBase<parquet::PhysicalType<
parquet::ColumnReaderImplBase<parquet::PhysicalType<
```


Summary: Heap-buffer-overflow in post_process_template

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18952

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
post_process_template
parser_shutdown
parse_string
```


Summary: UNKNOWN READ in ndpi_search_kerberos

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19175

```
Crash type: UNKNOWN READ
Crash state:
ndpi_search_kerberos
check_ndpi_tcp_flow_func
ndpi_detection_process_packet
```


Summary: Stack-use-after-return in ot::MeshCoP::ChannelMaskEntryBase::GetChannelPage

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13741

```
Crash type: Stack-use-after-return READ 1
Crash state:
ot::MeshCoP::ChannelMaskEntryBase::GetChannelPage
ot::MeshCoP::ChannelMaskTlv::GetChannelMask
ot::MeshCoP::ChannelMaskTlv::GetChannelMask
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16091

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
spng_decode_image
spng_read_fuzzer.cc
```


Summary: Index-out-of-bounds in yara_yyparse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18942

```
Crash type: Index-out-of-bounds
Crash state:
yara_yyparse
yr_lex_parse_rules_string
rules_fuzzer.cc
```


Summary: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14825

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
OT::IntType<unsigned short, 2u>::operator unsigned int
OT::AxisValue::sanitize
```


Summary: Heap-buffer-overflow in std::__1::vector<std::__1::vector<Sass::SharedImpl<Sass::ComplexSelector>, std::

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15893

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
std::__1::vector<std::__1::vector<Sass::SharedImpl<Sass::ComplexSelector>, std::
Sass::ComplexSelector::resolve_parent_refs
Sass::SelectorList::resolve_parent_refs
```


Summary: UNKNOWN READ in validate_past_idat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14935

```
Crash type: UNKNOWN READ
Crash state:
validate_past_idat
spng_decode_image
spng_read_fuzzer.cc
```


Summary: Heap-buffer-overflow in searchObjectForKeyRec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14619

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
searchObjectForKeyRec
searchObjectForKeyRec
searchObjectForKeyRec
```


Summary: Stack-buffer-overflow in ot::MeshCoP::Commissioner::GeneratePskc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19386

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
ot::MeshCoP::Commissioner::GeneratePskc
ot::Ncp::NcpBase::HandlePropertySet_SPINEL_PROP_MESHCOP_COMMISSIONER_GENERATE_PS
ot::Ncp::NcpBase::HandlePropertySetForSpecialProperties
```


Summary: UNKNOWN READ in ot::Ip6::NetifUnicastAddress::GetNext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13409

```
Crash type: UNKNOWN READ
Crash state:
ot::Ip6::NetifUnicastAddress::GetNext
ot::Ip6::Netif::RemoveUnicastAddress
ot::Mle::Mle::SetStateDetached
```


Summary: Use-of-uninitialized-value in LzmaDec_TryDummy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17189

```
Crash type: Use-of-uninitialized-value
Crash state:
LzmaDec_TryDummy
LzmaDec_DecodeToDic
LzmaDec_DecodeToBuf
```


Summary: Heap-buffer-overflow in r_read_le32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12685

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
r_read_le32
dex_method_signature2
dex_parse_debug_item
```


Summary: Heap-use-after-free in read_chunks_after_idat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16081

```
Crash type: Heap-use-after-free READ {*}
Crash state:
read_chunks_after_idat
spng_decode_image
spng_read_fuzzer.cc
```


Summary: Stack-use-after-return in ihevcd_process_thread

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17601

```
Crash type: Stack-use-after-return READ 4
Crash state:
ihevcd_process_thread
clone
```


Summary: UNKNOWN READ in fuzzshark_ip_proto-udp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16442

```
Crash type: UNKNOWN READ
Crash state:
fuzzshark_ip_proto-udp
g_hash_table_lookup
dissect_tls
```


Summary: UNKNOWN READ in bebytes2ushort

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19039

```
Crash type: UNKNOWN READ
Crash state:
bebytes2ushort
coolkey_v0_get_attribute_len
coolkey_v0_get_attribute_record_len
```


Summary: UNKNOWN READ in ot::TimerScheduler::Remove

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13383

```
Crash type: UNKNOWN READ
Crash state:
ot::TimerScheduler::Remove
ot::Mle::Mle::Stop
otThreadSetEnabled
```


Summary: Heap-use-after-free in ih264_inter_pred_luma_horz_hpel_vert_qpel_ssse3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18595

```
Crash type: Heap-use-after-free READ 16
Crash state:
ih264_inter_pred_luma_horz_hpel_vert_qpel_ssse3
ih264d_motion_compensate_mp
ih264d_decode_recon_tfr_nmb
```


Summary: Heap-buffer-overflow in circular_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13435

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
circular_memcpy
run_e8e9_filter
run_filter
```


Summary: UNKNOWN READ in url_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14501

```
Crash type: UNKNOWN READ
Crash state:
url_decode
parse_key_values
fuzz_parse_http_request
```


Summary: Heap-use-after-free in wmem_strbuf_get_str

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17305

```
Crash type: Heap-use-after-free READ 8
Crash state:
wmem_strbuf_get_str
dissect_rrc_PLMN_IdentityWithOptionalMCC_r6
dissect_per_constrained_sequence_of
```


Summary: Heap-buffer-overflow in perfetto::trace_processor::fuchsia_trace_utils::ReadTimestamp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14767

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
perfetto::trace_processor::fuchsia_trace_utils::ReadTimestamp
perfetto::trace_processor::FuchsiaTraceParser::ParseTracePacket
perfetto::trace_processor::TraceSorter::SortAndExtractEventsBeyondWindow
```


Summary: Heap-buffer-overflow in symbols

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15004

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
symbols
r_bin_object_set_items
r_bin_object_new
```


Summary: Heap-buffer-overflow in UA_unbase64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14621

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
UA_unbase64
ByteString_decodeJson
decodeFields
```


Summary: Heap-buffer-overflow in OGRFeatureFormatDateTimeBuffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23417

```
Crash type: Heap-buffer-overflow WRITE 2
Crash state:
OGRFeatureFormatDateTimeBuffer
OGRFeature::GetFieldAsString
OGRMemLayer::AlterFieldDefn
```


Summary: Stack-buffer-overflow in ot::MeshCoP::ChannelMaskEntry::GetMask

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13619

```
Crash type: Stack-buffer-overflow READ 4
Crash state:
ot::MeshCoP::ChannelMaskEntry::GetMask
ot::MeshCoP::ChannelMaskTlv::GetChannelMask
ot::MeshCoP::ChannelMaskTlv::GetChannelMask
```


Summary: Use-of-uninitialized-value in crc32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17262

```
Crash type: Use-of-uninitialized-value
Crash state:
crc32
htp_gzip_decompressor_decompress
htp_tx_res_process_body_data_ex
```


Summary: Stack-buffer-overflow in ot::NetworkData::Leader::IsStableUpdated

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15971

```
Crash type: Stack-buffer-overflow READ 8
Crash state:
ot::NetworkData::Leader::IsStableUpdated
ot::NetworkData::Leader::RegisterNetworkData
ot::NetworkData::Leader::HandleServerData
```


Summary: Heap-buffer-overflow in agentx_parse_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14481

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
agentx_parse_string
agentx_parse
agentx_parse_fuzzer.c
```


Summary: Heap-buffer-overflow in OPENSSL_strlcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16107

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
OPENSSL_strlcpy
OPENSSL_strlcat
ERR_add_error_vdata
```


Summary: Stack-use-after-return in bool OT::Coverage::serialize<hb_map_iter_t<hb_map_iter_t<hb_filter_iter_t<OT::Co

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14786

```
Crash type: Stack-use-after-return READ 4
Crash state:
bool OT::Coverage::serialize<hb_map_iter_t<hb_map_iter_t<hb_filter_iter_t<OT::Co
bool OT::SingleSubstFormat1::serialize<hb_map_iter_t<hb_map_iter_t<hb_filter_ite
bool OT::SingleSubst::serialize<hb_map_iter_t<hb_filter_iter_t<OT::Coverage::ite
```


Summary: Use-of-uninitialized-value in smtp_state_ehlo_resp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16918

```
Crash type: Use-of-uninitialized-value
Crash state:
smtp_state_ehlo_resp
smtp_statemach_act
Curl_pp_statemach
```


Summary: Heap-use-after-free in ndpi_http_check_content

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22899

```
Crash type: Heap-use-after-free READ 1
Crash state:
ndpi_http_check_content
ndpi_int_http_add_connection
ndpi_check_http_tcp
```


Summary: Use-of-uninitialized-value in mprint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13453

```
Crash type: Use-of-uninitialized-value
Crash state:
mprint
match
file_softmagic
```


Summary: Stack-buffer-overflow in nc4_get_att

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15143

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
nc4_get_att
nc4_get_att_tc
nc_get_att_text
```


Summary: Heap-buffer-overflow in Elf32_r_bin_elf_compiler

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13858

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
Elf32_r_bin_elf_compiler
info
r_bin_object_set_items
```


Summary: Global-buffer-overflow in parse_headers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14529

```
Crash type: Global-buffer-overflow WRITE 8
Crash state:
parse_headers
parse_http_request
fuzz_parse_http_request
```


Summary: UNKNOWN READ in ot::TaskletScheduler::PopTasklet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13370

```
Crash type: UNKNOWN READ
Crash state:
ot::TaskletScheduler::PopTasklet
ot::TaskletScheduler::ProcessQueuedTasklets
radio_receive_done.cpp
```


Summary: Stack-buffer-overflow in ihevcd_ref_list

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17029

```
Crash type: Stack-buffer-overflow WRITE 4
Crash state:
ihevcd_ref_list
ihevcd_parse_slice_header
ihevcd_nal_unit
```


Summary: Heap-use-after-free in sdb_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13704

```
Crash type: Heap-use-after-free READ 8
Crash state:
sdb_free
ns_free
sdb_ns_free
```


Summary: Use-of-uninitialized-value in ndpi_check_dga_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23524

```
Crash type: Use-of-uninitialized-value
Crash state:
ndpi_check_dga_name
ndpi_search_dns
check_ndpi_udp_flow_func
```


Summary: Heap-buffer-overflow in ndpi_workflow_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20766

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
ndpi_workflow_process_packet
fuzz_ndpi_reader.c
```


Summary: Stack-buffer-overflow in ZSTD_decodeLiteralsBlock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16445

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
ZSTD_decodeLiteralsBlock
ZSTD_decompressBlock
ZSTD_decompressDCtx
```


Summary: Global-buffer-overflow in lwan_strbuf_append_str

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18448

```
Crash type: Global-buffer-overflow READ {*}
Crash state:
lwan_strbuf_append_str
parse_section
parse_section_shorthand
```


Summary: Heap-double-free in opt_cleanup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15178

```
Crash type: Heap-double-free
Crash state:
opt_cleanup
bpf_optimize
pcap_compile
```


Summary: Heap-buffer-overflow in _iri_unescape_inline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14428

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
_iri_unescape_inline
wget_iri_parse
test
```


Summary: Global-buffer-overflow in lex_multiline_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18455

```
Crash type: Global-buffer-overflow READ 1
Crash state:
lex_multiline_string
lex_next
parse_config
```


Summary: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18503

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
OT::IntType<unsigned short, 2u>::operator unsigned int
decltype
```


Summary: Stack-buffer-overflow in ot::NetworkData::NetworkDataTlv::GetNext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14401

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
ot::NetworkData::NetworkDataTlv::GetNext
ot::NetworkData::Leader::IsStableUpdated
ot::NetworkData::Leader::RegisterNetworkData
```


Summary: Heap-use-after-free in WelsDec::MapColToList0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14035

```
Crash type: Heap-use-after-free READ 4
Crash state:
WelsDec::MapColToList0
WelsDec::PredBDirectTemporal
WelsDec::WelsDecodeMbCavlcBSlice
```


Summary: Use-of-uninitialized-value in UA_ServerConfig_clean

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14848

```
Crash type: Use-of-uninitialized-value
Crash state:
UA_ServerConfig_clean
UA_Server_delete
fuzz_binary_message.cc
```


Summary: Heap-buffer-overflow in idn2_to_ascii_4i

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12420

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
idn2_to_ascii_4i
libidn2_to_ascii_8z_fuzzer.c
```


Summary: Use-of-uninitialized-value in isMatchAtCPBoundary

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15505

```
Crash type: Use-of-uninitialized-value
Crash state:
isMatchAtCPBoundary
u_strFindFirst_64
icu_64::UnicodeString::indexOf
```


Summary: Heap-buffer-overflow in bool arrow::util::RleDecoder::NextCounts<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20695

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
bool arrow::util::RleDecoder::NextCounts<int>
int arrow::util::RleDecoder::GetBatchWithDictSpaced<int>
virtual thunk to parquet::DictDecoderImpl<parquet::PhysicalType<
```


Summary: UNKNOWN WRITE in uffd_cleanup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15156

```
Crash type: UNKNOWN WRITE
Crash state:
uffd_cleanup
netCDFDataset::~netCDFDataset
netCDFDataset::~netCDFDataset
```


Summary: Heap-buffer-overflow in stdalloc__strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18356

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
stdalloc__strdup
parse_hunk_body
parse_patch_hunks
```


Summary: Heap-buffer-overflow in sav_parse_long_string_missing_values_record

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13076

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
sav_parse_long_string_missing_values_record
sav_parse_records_pass2
readstat_parse_sav
```


Summary: Heap-buffer-overflow in ihevcd_parse_coding_unit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17055

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ihevcd_parse_coding_unit
ihevcd_parse_coding_quadtree
ihevcd_parse_coding_quadtree
```


Summary: Stack-buffer-overflow in Mat_uint32Swap

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17113

```
Crash type: Stack-buffer-overflow READ 4
Crash state:
Mat_uint32Swap
Mat_VarReadNextInfo5
Mat_GetDir
```


Summary: Heap-buffer-overflow in MEM_read32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14368

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
MEM_read32
ZSTDv05_decodeSequence
ZSTDv05_decompressSequences
```


Summary: Stack-use-after-return in OSSL_PARAM_get_int32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15114

```
Crash type: Stack-use-after-return READ 4
Crash state:
OSSL_PARAM_get_int32
md5_sha1_set_params
ssl3_final_finish_mac
```


Summary: Global-buffer-overflow in parse_headers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14511

```
Crash type: Global-buffer-overflow READ 2
Crash state:
parse_headers
parse_http_request
fuzz_parse_http_request
```


Summary: UNKNOWN READ in icu_64::UCharsTrie::branchNext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15580

```
Crash type: UNKNOWN READ
Crash state:
icu_64::UCharsTrie::branchNext
icu_64::CollationIterator::nextCE32FromContraction
icu_64::CollationIterator::appendCEsFromCE32
```


Summary: Heap-buffer-overflow in format_generic_odp_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14429

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
format_generic_odp_key
check_attr_len
format_odp_key_attr
```


Summary: Heap-buffer-overflow in ares_parse_aaaa_reply

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15373

```
Crash type: Heap-buffer-overflow READ 16
Crash state:
ares_parse_aaaa_reply
ares-test-fuzz.c
```


Summary: Use-of-uninitialized-value in ARM_post_printer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13768

```
Crash type: Use-of-uninitialized-value
Crash state:
ARM_post_printer
fill_insn
cs_disasm
```


Summary: UNKNOWN WRITE in ares-test-fuzz.c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15375

```
Crash type: UNKNOWN WRITE
Crash state:
ares-test-fuzz.c
```


Summary: UNKNOWN READ in r_uleb128

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13915

```
Crash type: UNKNOWN READ
Crash state:
r_uleb128
parse_class
dex_loadcode
```


Summary: Heap-buffer-overflow in r_buf_cpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14125

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
r_buf_cpy
get_relocs_64
relocs
```


Summary: Heap-buffer-overflow in CRYPTO_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17715

```
Crash type: Heap-buffer-overflow READ 14
Crash state:
CRYPTO_strdup
X509V3_add_value
i2v_GENERAL_NAME
```


Summary: UNKNOWN READ in yyparse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17968

```
Crash type: UNKNOWN READ
Crash state:
yyparse
mrb_parser_parse
mrb_parse_nstring
```


Summary: Heap-use-after-free in read_chunks_before_idat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16051

```
Crash type: Heap-use-after-free READ 2
Crash state:
read_chunks_before_idat
get_ancillary
spng_decoded_image_size
```


Summary: Heap-buffer-overflow in perfetto::trace_processor::FuchsiaTraceParser::ParseTracePacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14752

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
perfetto::trace_processor::FuchsiaTraceParser::ParseTracePacket
perfetto::trace_processor::TraceSorter::SortAndExtractEventsBeyondWindow
perfetto::trace_processor::TraceProcessorImpl::NotifyEndOfFile
```


Summary: Use-of-uninitialized-value in pcpp::tbp_my_own_strnlen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22829

```
Crash type: Use-of-uninitialized-value
Crash state:
pcpp::tbp_my_own_strnlen
pcpp::HeaderField::HeaderField
pcpp::TextBasedProtocolMessage::parseFields
```


Summary: UNKNOWN READ in _fini

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18611

```
Crash type: UNKNOWN READ
Crash state:
_fini
```


Summary: Heap-buffer-overflow in r_core_lines_initcache

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14690

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
r_core_lines_initcache
cb_linesto
r_config_set_i
```


Summary: Index-out-of-bounds in parse_file_extra_owner

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14393

```
Crash type: Index-out-of-bounds
Crash state:
parse_file_extra_owner
process_head_file_extra
process_head_file
```


Summary: Global-buffer-overflow in strsep_char

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14509

```
Crash type: Global-buffer-overflow READ {*}
Crash state:
strsep_char
parse_proxy_protocol_v1
parse_http_request
```


Summary: Heap-buffer-overflow in LzmaDec_DecodeToDic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17198

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
LzmaDec_DecodeToDic
LzmaDec_DecodeToBuf
htp_gzip_decompressor_decompress
```


Summary: UNKNOWN READ in ot::MessageQueue::GetTail

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13345

```
Crash type: UNKNOWN READ
Crash state:
ot::MessageQueue::GetTail
ot::Message::GetNext
ot::MeshForwarder::GetDirectTransmission
```


Summary: Stack-buffer-overflow in ot::Ip6::Address::FromString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14821

```
Crash type: Stack-buffer-overflow WRITE 1
Crash state:
ot::Ip6::Address::FromString
ot::Cli::Coap::ProcessRequest
ot::Cli::Interpreter::ProcessCoap
```


Summary: Stack-buffer-overflow in ot::Cli::Interpreter::ProcessService

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12642

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
ot::Cli::Interpreter::ProcessService
ot::Cli::Interpreter::ProcessLine
ot::Cli::Uart::ProcessCommand
```


Summary: Heap-use-after-free in Envoy::Server::InitManagerImpl::initializeTarget

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13221

```
Crash type: Heap-use-after-free READ 8
Crash state:
Envoy::Server::InitManagerImpl::initializeTarget
Envoy::Server::InitManagerImpl::initialize
Envoy::Server::ValidationInstance::initialize
```


Summary: Bad-free in spss_varinfo_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12595

```
Crash type: Bad-free
Crash state:
spss_varinfo_free
sav_read_variable_record
sav_parse_records_pass2
```


Summary: Heap-use-after-free in String_clear

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14487

```
Crash type: Heap-use-after-free READ 8
Crash state:
String_clear
clearStructure
UA_Array_delete
```


Summary: UNKNOWN READ in decode_fast

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20448

```
Crash type: UNKNOWN READ
Crash state:
decode_fast
unpack_dsd_samples
WavpackUnpackSamples
```


Summary: Use-of-uninitialized-value in _idn2_punycode_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13359

```
Crash type: Use-of-uninitialized-value
Crash state:
_idn2_punycode_decode
_tr46
idn2_lookup_u8
```


Summary: Heap-buffer-overflow in sctp_handle_asconf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18070

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
sctp_handle_asconf
sctp_process_control
sctp_common_input_processing
```


Summary: Heap-buffer-overflow in run_arm_filter

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15431

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
run_arm_filter
run_filter
apply_filters
```


Summary: Heap-buffer-overflow in AAT::KerxSubTableFormat4<AAT::KerxSubTableHeader>::driver_context_t::transition

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12532

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
AAT::KerxSubTableFormat4<AAT::KerxSubTableHeader>::driver_context_t::transition
void AAT::StateTableDriver<AAT::ExtendedTypes, AAT::KerxSubTableFormat4<AAT::Ker
AAT::KerxSubTableFormat4<AAT::KerxSubTableHeader>::apply
```


Summary: Heap-buffer-overflow in _iri_unescape_inline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14448

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
_iri_unescape_inline
wget_iri_parse
_parse_proxies
```


Summary: UNKNOWN READ in crc32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15278

```
Crash type: UNKNOWN READ
Crash state:
crc32
update_crc
push_data_ready
```


Summary: UNKNOWN READ in ot::Dhcp6::Dhcp6Client::ProcessNextIdentityAssociation

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13348

```
Crash type: UNKNOWN READ
Crash state:
ot::Dhcp6::Dhcp6Client::ProcessNextIdentityAssociation
ot::Dhcp6::Dhcp6Client::Start
ot::Dhcp6::Dhcp6Client::UpdateAddresses
```


Summary: Heap-buffer-overflow in ndpi_netbios_name_interpret

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21365

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_netbios_name_interpret
ndpi_int_netbios_add_connection
check_ndpi_udp_flow_func
```


Summary: Heap-double-free in _free_resources

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12945

```
Crash type: Heap-double-free
Crash state:
_free_resources
r_list_delete
r_list_purge
```


Summary: Stack-buffer-overflow in Mat_VarReadNextInfo5

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17119

```
Crash type: Stack-buffer-overflow READ 4
Crash state:
Mat_VarReadNextInfo5
Mat_GetDir
MatioRead
```


Summary: Use-of-uninitialized-value in Variant_decodeJson

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14620

```
Crash type: Use-of-uninitialized-value
Crash state:
Variant_decodeJson
UA_decodeJson
fuzz_json_decode.cc
```


Summary: Stack-buffer-overflow in ot::Mle::Mle::HandleParentResponse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15382

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
ot::Mle::Mle::HandleParentResponse
ot::Mle::Mle::HandleUdpReceive
ot::Ip6::Udp::HandleMessage
```


Summary: Heap-buffer-overflow in str_table_entry

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13956

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
str_table_entry
parse_elf_header_64_be
elf__load
```


Summary: Heap-buffer-overflow in virtual thunk to parquet::ByteStreamSplitDecoder<parquet::PhysicalType<

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21453

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
virtual thunk to parquet::ByteStreamSplitDecoder<parquet::PhysicalType<
parquet::TypedDecoder<parquet::PhysicalType<
parquet::internal::TypedRecordReader<parquet::PhysicalType<
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22872

```
Crash type: Bad-cast
Crash state:
Bad-cast to pcpp::IDnsResource from invalid vptr
pcpp::DnsLayer::~DnsLayer
pcpp::DnsLayer::~DnsLayer
```


Summary: Heap-use-after-free in WelsDec::SetUnRef

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18644

```
Crash type: Heap-use-after-free WRITE 1
Crash state:
WelsDec::SetUnRef
WelsDec::WelsResetRefPic
WelsFreeDynamicMemory
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18438

```
Crash type: Heap-use-after-free WRITE 1
Crash state:
WelsDec::SetUnRef
WelsDec::WelsResetRefPic
WelsFreeDynamicMemory
```


Summary: Global-buffer-overflow in lwan_parse_rfc_time

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14297

```
Crash type: Global-buffer-overflow READ 4
Crash state:
lwan_parse_rfc_time
parse_if_modified_since
fuzz_parse_http_request
```


Summary: Stack-buffer-overflow in parse_file_extra_owner

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14331

```
Crash type: Stack-buffer-overflow WRITE 1
Crash state:
parse_file_extra_owner
process_head_file_extra
process_head_file
```


Summary: Use-of-uninitialized-value in pe_rva_to_offset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19003

```
Crash type: Use-of-uninitialized-value
Crash state:
pe_rva_to_offset
dotnet_parse_tilde_2
dotnet_parse_tilde
```


Summary: Use-of-uninitialized-value in hb_hashmap_t<hb_serialize_context_t::object_t const*, unsigned int,

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14641

```
Crash type: Use-of-uninitialized-value
Crash state:
hb_hashmap_t<hb_serialize_context_t::object_t const*, unsigned int,
hb_hashmap_t<hb_serialize_context_t::object_t const*, unsigned int,
hb_hashmap_t<hb_serialize_context_t::object_t const*, unsigned int,
```


Summary: UNKNOWN READ in ot::Timer::GetFireTime

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13390

```
Crash type: UNKNOWN READ
Crash state:
ot::Timer::GetFireTime
ot::Timer::DoesFireBefore
ot::TimerScheduler::Add
```


Summary: Use-of-uninitialized-value in icalcomponent_remove_component

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14738

```
Crash type: Use-of-uninitialized-value
Crash state:
icalcomponent_remove_component
icalcomponent_free
icalparser_free
```


Summary: UNKNOWN READ in asn1_item_print_ctx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14546

```
Crash type: UNKNOWN READ
Crash state:
asn1_item_print_ctx
asn1_template_print_ctx
asn1_item_print_ctx
```


Summary: Use-of-uninitialized-value in bool std::__1::equal<std::__1::__wrap_iter<unsigned char const*>, std::__1::__wr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18320

```
Crash type: Use-of-uninitialized-value
Crash state:
bool std::__1::equal<std::__1::__wrap_iter<unsigned char const*>, std::__1::__wr
bool std::__1::operator==<unsigned char, std::__1::allocator<unsigned char> >
cryptofuzz::ExecutorBase<cryptofuzz::Buffer, cryptofuzz::operation::CMAC>::compa
```


Summary: Heap-buffer-overflow in hb_array_t<OT::IntType<unsigned short, 2u> const> hb_array_t<OT::IntType<unsigne

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18513

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
hb_array_t<OT::IntType<unsigned short, 2u> const> hb_array_t<OT::IntType<unsigne
OT::UnsizedArrayOf<OT::IntType<unsigned short, 2u> >::copy
_ZN22hb_serialize_context_t5_copyIN2OT14UnsizedArrayOfINS1_7IntTypeItLj2EEEEEJRj
```


Summary: Global-buffer-overflow in perfetto::trace_processor::ParseSystraceTracePoint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13481

```
Crash type: Global-buffer-overflow READ 1
Crash state:
perfetto::trace_processor::ParseSystraceTracePoint
perfetto::trace_processor::ProtoTraceParser::ParsePrint
perfetto::trace_processor::ProtoTraceParser::ParseFtracePacket
```


Summary: Use-of-uninitialized-value in MOS65XX_group_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15112

```
Crash type: Use-of-uninitialized-value
Crash state:
MOS65XX_group_name
cs_group_name
fuzz_disasm.c
```


Summary: Heap-buffer-overflow in int arrow::util::RleDecoder::GetBatchWithDictSpaced<double>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20665

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
int arrow::util::RleDecoder::GetBatchWithDictSpaced<double>
virtual thunk to parquet::DictDecoderImpl<parquet::PhysicalType<
parquet::internal::TypedRecordReader<parquet::PhysicalType<
```


Summary: Heap-buffer-overflow in acommon::ObjStack::dup_top

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18462

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
acommon::ObjStack::dup_top
acommon::StringMap::add
acommon::Config::lookup_list
```


Summary: Heap-buffer-overflow in buf_bytes_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14783

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
buf_bytes_read
r_buf_read
bin_pe_get_certificate
```


Summary: Heap-buffer-overflow in check_buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15003

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
check_buffer
r_bin_get_binplugin_by_buffer
get_plugin_from_buffer
```


Summary: UNKNOWN READ in parse_sec_attr_44

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18693

```
Crash type: UNKNOWN READ
Crash state:
parse_sec_attr_44
setcos_select_file
sc_select_file
```


Summary: Use-of-uninitialized-value in Mat_VarRead4

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16857

```
Crash type: Use-of-uninitialized-value
Crash state:
Mat_VarRead4
Mat_VarReadDataAll
matio_fuzzer.cc
```


Summary: Stack-buffer-overflow in ot::Message::Read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17330

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
ot::Message::Read
ot::NetworkData::Leader::HandleCommissioningGet
ot::Coap::CoapBase::ProcessReceivedRequest
```


Summary: Index-out-of-bounds in parse_exp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22925

```
Crash type: Index-out-of-bounds
Crash state:
parse_exp
parse_branch
parse_alts
```


Summary: Stack-buffer-overflow in ares_parse_aaaa_reply

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15459

```
Crash type: Stack-buffer-overflow WRITE 4
Crash state:
ares_parse_aaaa_reply
ares-test-fuzz.c
```


Summary: Stack-buffer-overflow in ot::MeshCoP::DatasetManager::HandleSet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15374

```
Crash type: Stack-buffer-overflow READ 15
Crash state:
ot::MeshCoP::DatasetManager::HandleSet
ot::MeshCoP::ActiveDataset::HandleSet
ot::Coap::CoapBase::ProcessReceivedRequest
```


Summary: Heap-buffer-overflow in r_utf8_strlen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13726

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
r_utf8_strlen
getstr
parse_class
```


Summary: Heap-buffer-overflow in looks_ucs32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13222

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
looks_ucs32
file_encoding
file_buffer
```


Summary: Heap-buffer-overflow in OT::HintingDevice* hb_serialize_context_t::embed<OT::HintingDevice>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20211

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
OT::HintingDevice* hb_serialize_context_t::embed<OT::HintingDevice>
OT::HintingDevice::copy
OT::Device::copy
```


Summary: Heap-buffer-overflow in byte_from_wkb_state

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16591

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
byte_from_wkb_state
lwgeom_from_wkb_state
lwcollection_from_wkb_state
```


Summary: UNKNOWN READ in _fini

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15391

```
Crash type: UNKNOWN READ
Crash state:
_fini
```


Summary: Heap-buffer-overflow in circular_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14574

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
circular_memcpy
run_arm_filter
run_filter
```


Summary: Heap-buffer-overflow in ih264d_decode_slice_thread

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18960

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
ih264d_decode_slice_thread
ih264d_decode_picture_thread
start_thread
```


Summary: Heap-buffer-overflow in acommon::DecodeDirect<unsigned short>::decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16531

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
acommon::DecodeDirect<unsigned short>::decode
acommon::Convert::convert
aspell_speller_suggest
```


Summary: Stack-buffer-overflow in tcos_decipher

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22967

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
tcos_decipher
sc_decipher
use_key
```


Summary: Heap-buffer-overflow in varlink_enqueue_json

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14708

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
varlink_enqueue_json
varlink_error
varlink_errorb
```


Summary: Heap-use-after-free in WelsDec::CWelsDecoder::SetOption

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18747

```
Crash type: Heap-use-after-free WRITE 1
Crash state:
WelsDec::CWelsDecoder::SetOption
decoder_fuzzer.cpp
WelsCommon::WelsFree
```


Summary: Global-buffer-overflow in dissect_snmp_PDUs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18816

```
Crash type: Global-buffer-overflow READ 4
Crash state:
dissect_snmp_PDUs
dissect_ber_choice
dissect_snmp_RegisterResponse
```


Summary: Use-of-uninitialized-value in parser_get_next_char

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14739

```
Crash type: Use-of-uninitialized-value
Crash state:
parser_get_next_char
parser_get_param_name_heap
icalparser_add_line
```


Summary: Heap-use-after-free in cin_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15200

```
Crash type: Heap-use-after-free READ 1
Crash state:
cin_get
get_token
prim
```


Summary: UNKNOWN READ in local_add_lv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18030

```
Crash type: UNKNOWN READ
Crash state:
local_add_lv
yyparse
mrb_parser_parse
```


Summary: Heap-buffer-overflow in ihevcd_parse_slice_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17031

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
ihevcd_parse_slice_data
ihevcd_nal_unit
ihevcd_decode
```


Summary: Use-of-uninitialized-value in OT::AxisValue::sanitize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14850

```
Crash type: Use-of-uninitialized-value
Crash state:
OT::AxisValue::sanitize
bool OT::OffsetTo<OT::AxisValue, OT::IntType<unsigned short, 2u>, true>::sanitiz
bool OT::UnsizedArrayOf<OT::OffsetTo<OT::AxisValue, OT::IntType<unsigned short,
```


Summary: Heap-buffer-overflow in _iri_unescape_inline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14449

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
_iri_unescape_inline
wget_iri_parse
init
```


Summary: Heap-use-after-free in proc_plaintext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13730

```
Crash type: Heap-use-after-free READ 4
Crash state:
proc_plaintext
do_proc_packets
proc_signature_packets
```


Summary: Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15388

```
Crash type: Null-dereference READ
Crash state:
NULL```


Summary: Stack-buffer-overflow in ot::NetworkData::PrefixTlv::GetPrefixLength

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23267

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
ot::NetworkData::PrefixTlv::GetPrefixLength
ot::NetworkData::NetworkData::FindPrefix
ot::NetworkData::Leader::Validate
```


Summary: Global-buffer-overflow in decode_tlv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13542

```
Crash type: Global-buffer-overflow READ 4
Crash state:
decode_tlv
dissect_noe
call_dissector_work
```


Summary: UNKNOWN READ in (__has_construct<std::__1::allocator<unsigned

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14479

```
Crash type: UNKNOWN READ
Crash state:
(__has_construct<std::__1::allocator<unsigned
std::__1::enable_if<__is_forward_iterator<unsigned char const*>::value, void>::t
std::__1::vector<unsigned char, std::__1::allocator<unsigned char> >::vector<uns
```


Summary: Negative-size-param in r_buf_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14832

```
Crash type: Negative-size-param
Crash state:
r_buf_read
bin_pe_get_certificate
bin_pe_init
```


Summary: Heap-use-after-free in WelsDec::ResetRefPicReferences

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13450

```
Crash type: Heap-use-after-free READ 8
Crash state:
WelsDec::ResetRefPicReferences
WelsDec::DecreasePicBuff
WelsRequestMem
```


Summary: Heap-buffer-overflow in asn1_get_next

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20373

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
asn1_get_next
x509_parse_ext_certificate_policies
x509_parse_extension_data
```


Summary: Heap-buffer-overflow in ots::OpenTypeSTAT::Serialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12840

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
ots::OpenTypeSTAT::Serialize
ProcessGeneric
ProcessTTF
```


Summary: Heap-buffer-overflow in collator_compare_fuzzer.cpp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15499

```
Crash type: Heap-buffer-overflow WRITE 3
Crash state:
collator_compare_fuzzer.cpp
```


Summary: Heap-buffer-overflow in ihevcd_get_mv_ctb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17286

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
ihevcd_get_mv_ctb
ihevcd_process
ihevcd_decode
```


Summary: UNKNOWN READ in Interpreter::evaluate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15844

```
Crash type: UNKNOWN READ
Crash state:
Interpreter::evaluate
jsonnet_vm_execute
jsonnet_evaluate_snippet_aux
```


Summary: UNKNOWN WRITE in perfetto::trace_processor::ProtoTraceParser::ParsePowerRails

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14018

```
Crash type: UNKNOWN WRITE
Crash state:
perfetto::trace_processor::ProtoTraceParser::ParsePowerRails
perfetto::trace_processor::ProtoTraceParser::ParseTracePacket
perfetto::trace_processor::TraceSorter::SortAndExtractEventsBeyondWindow
```


Summary: Heap-buffer-overflow in ndpi_add_connection_as_bittorrent

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20777

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
ndpi_add_connection_as_bittorrent
ndpi_int_search_bittorrent_tcp_zero
check_ndpi_tcp_flow_func
```


Summary: Heap-buffer-overflow in UInt32_encodeBinary

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12889

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
UInt32_encodeBinary
DiagnosticInfo_encodeBinary
DiagnosticInfo_encodeBinary
```


Summary: UNKNOWN READ in ot::PriorityQueue::GetHead

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13388

```
Crash type: UNKNOWN READ
Crash state:
ot::PriorityQueue::GetHead
ot::Ip6::Ip6::HandleSendQueue
ot::TaskletScheduler::ProcessQueuedTasklets
```


Summary: UNKNOWN READ in ot::MessageQueue::GetHead

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13386

```
Crash type: UNKNOWN READ
Crash state:
ot::MessageQueue::GetHead
ot::Coap::CoapBase::ClearRequestsAndResponses
ot::Coap::CoapSecure::Stop
```


Summary: UNKNOWN READ in ot::Message::GetPriority

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13380

```
Crash type: UNKNOWN READ
Crash state:
ot::Message::GetPriority
ot::PriorityQueue::RemoveFromList
ot::PriorityQueue::Dequeue
```


Summary: Index-out-of-bounds in prepare_macpads

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14768

```
Crash type: Index-out-of-bounds
Crash state:
prepare_macpads
_gcry_md_setkey
gcry_mac_setkey
```


Summary: Heap-buffer-overflow in get_ndpi_flow_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20109

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
get_ndpi_flow_info
get_ndpi_flow_info6
packet_processing
```


Summary: Use-of-uninitialized-value in dprintf_formatf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16699

```
Crash type: Use-of-uninitialized-value
Crash state:
dprintf_formatf
curl_mvsnprintf
curl_msnprintf
```


Summary: UNKNOWN READ in Sass::Parser::parseCompoundSelector

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15904

```
Crash type: UNKNOWN READ
Crash state:
Sass::Parser::parseCompoundSelector
Sass::Parser::parseComplexSelector
Sass::Parser::parseSelectorList
```


Summary: Global-buffer-overflow in parse_headers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14232

```
Crash type: Global-buffer-overflow READ 4
Crash state:
parse_headers
parse_http_request
fuzz_parse_http_request
```


Summary: UNKNOWN READ in WelsDec::CWelsDecoder::DecodeFrame2WithCtx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18864

```
Crash type: UNKNOWN READ
Crash state:
WelsDec::CWelsDecoder::DecodeFrame2WithCtx
WelsDec::CWelsDecoder::DecodeFrame2
WelsDec::CWelsDecoder::DecodeFrameNoDelay
```


Summary: UNKNOWN READ in ot::Ip6::Address::PrefixMatch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13349

```
Crash type: UNKNOWN READ
Crash state:
ot::Ip6::Address::PrefixMatch
ot::Dhcp6::Dhcp6Server::RemovePrefixAgent
ot::Dhcp6::Dhcp6Server::UpdateService
```


Summary: UNKNOWN READ in opj_t2_decode_packets

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18979

```
Crash type: UNKNOWN READ
Crash state:
opj_t2_decode_packets
opj_tcd_t2_decode
opj_tcd_decode_tile
```


Summary: Use-of-uninitialized-value in std::__1::vector<std::__1::vector<Sass::SharedImpl<Sass::ComplexSelector>, std::

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18066

```
Crash type: Use-of-uninitialized-value
Crash state:
std::__1::vector<std::__1::vector<Sass::SharedImpl<Sass::ComplexSelector>, std::
Sass::ComplexSelector::resolve_parent_refs
Sass::Eval::operator
```


Summary: Use-of-uninitialized-value in __RefHead_ZIP_INSERT

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15133

```
Crash type: Use-of-uninitialized-value
Crash state:
__RefHead_ZIP_INSERT
__RefHead_ZIP_INSERT
RefTree_add
```


Summary: UNKNOWN READ in ot::Ip6::Netif::UnsubscribeAllRoutersMulticast

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13353

```
Crash type: UNKNOWN READ
Crash state:
ot::Ip6::Netif::UnsubscribeAllRoutersMulticast
ot::Mle::MleRouter::HandleDetachStart
ot::Mle::Mle::SetStateDetached
```


Summary: Stack-buffer-overflow in tvb_get_ipv4_addr_with_prefix_len

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21715

```
Crash type: Stack-buffer-overflow READ 4
Crash state:
tvb_get_ipv4_addr_with_prefix_len
decode_path_prefix4
decode_prefix_MP
```


Summary: Heap-buffer-overflow in LZ4_write32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15941

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
LZ4_write32
LZ4_compress_fast_extState
LZ4_compress_fast
```


Summary: Heap-buffer-overflow in r_read_le32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13945

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
r_read_le32
r_read_le64
is_kernelcache
```


Summary: UNKNOWN READ in ot::Buffer::GetNextBuffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13412

```
Crash type: UNKNOWN READ
Crash state:
ot::Buffer::GetNextBuffer
ot::MessagePool::FreeBuffers
ot::Coap::ResponsesQueue::DequeueAllResponses
```


Summary: UNKNOWN READ in copy_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15482

```
Crash type: UNKNOWN READ
Crash state:
copy_string
do_uncompress_block
process_block
```


Summary: Heap-buffer-overflow in bytestring_to_str

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19070

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
bytestring_to_str
dissect_NUMBER_acf_lin
call_dissector_work
```


Summary: UNKNOWN READ in arrow::BaseBinaryBuilder<arrow::BinaryType>::UnsafeAppend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20697

```
Crash type: UNKNOWN READ
Crash state:
arrow::BaseBinaryBuilder<arrow::BinaryType>::UnsafeAppend
parquet::PlainByteArrayDecoder::DecodeArrowDense
parquet::PlainByteArrayDecoder::DecodeArrow
```


Summary: Use-of-uninitialized-value in ares__parse_into_addrinfo2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15379

```
Crash type: Use-of-uninitialized-value
Crash state:
ares__parse_into_addrinfo2
ares_parse_aaaa_reply
ares-test-fuzz.c
```


Summary: Stack-use-after-return in ihevcd_process_thread

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17500

```
Crash type: Stack-use-after-return READ 8
Crash state:
ihevcd_process_thread
start_thread
```


Summary: Global-buffer-overflow in parse_http_request

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14582

```
Crash type: Global-buffer-overflow READ 1
Crash state:
parse_http_request
fuzz_parse_http_request
```


Summary: Global-buffer-overflow in ne_find_element

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15056

```
Crash type: Global-buffer-overflow READ 8
Crash state:
ne_find_element
ne_parse
nestegg_init
```


Summary: Use-of-uninitialized-value in varlink_write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14688

```
Crash type: Use-of-uninitialized-value
Crash state:
varlink_write
varlink_process
defer_callback
```


Summary: Heap-buffer-overflow in OT::UnsizedArrayOf<OT::IntType<unsigned char, 1u> >::copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14637

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
OT::UnsizedArrayOf<OT::IntType<unsigned char, 1u> >::copy
bool OT::OffsetTo<OT::UnsizedArrayOf<OT::IntType<unsigned char, 1u> >, OT::IntTy
OT::NameRecord::copy
```


Summary: UNKNOWN READ in ot::Dhcp6::Dhcp6Client::UpdateAddresses

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13332

```
Crash type: UNKNOWN READ
Crash state:
ot::Dhcp6::Dhcp6Client::UpdateAddresses
ot::Mle::Mle::HandleStateChanged
ot::Notifier::HandleStateChanged
```


Summary: Heap-buffer-overflow in read_reloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21835

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
read_reloc
populate_relocs_record_from_dynamic
populate_relocs_record
```


Summary: Stack-buffer-overflow in ot::Message::Write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15447

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
ot::Message::Write
ot::Message::Append
ot::AddressResolver::SendAddressQueryResponse
```


Summary: Use-of-uninitialized-value in bool std::__1::equal<std::__1::__wrap_iter<unsigned char const*>, std::__1::__wr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14353

```
Crash type: Use-of-uninitialized-value
Crash state:
bool std::__1::equal<std::__1::__wrap_iter<unsigned char const*>, std::__1::__wr
bool std::__1::operator==<unsigned char, std::__1::allocator<unsigned char> >
std::__1::enable_if<is_convertible_v<decltype
```


Summary: Stack-use-after-return in sdb_itoa

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12751

```
Crash type: Stack-use-after-return WRITE 1
Crash state:
sdb_itoa
_parse_resource_directory
_parse_resource_directory
```


Summary: UNKNOWN READ in ot::Ip6::UdpSocket::GetNext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13405

```
Crash type: UNKNOWN READ
Crash state:
ot::Ip6::UdpSocket::GetNext
ot::Ip6::Udp::AddSocket
ot::Ip6::UdpSocket::Open
```


Summary: Heap-use-after-free in sctp_fill_hmac_digest_m

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18080

```
Crash type: Heap-use-after-free WRITE {*}
Crash state:
sctp_fill_hmac_digest_m
sctp_lowlevel_chunk_output
sctp_med_chunk_output
```


Summary: Heap-use-after-free in std::__1::vector<unsigned long, std::__1::allocator<unsigned long> >::begin

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21908

```
Crash type: Heap-use-after-free READ 8
Crash state:
std::__1::vector<unsigned long, std::__1::allocator<unsigned long> >::begin
perfetto::trace_processor::TrackTracker::ResolveDescriptorTrack
perfetto::trace_processor::TrackTracker::GetDescriptorTrackImpl
```


Summary: Stack-buffer-overflow in tvb_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15936

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
tvb_memcpy
quic_extract_header
dissect_quic
```


Summary: Heap-buffer-overflow in perfetto::base::Hash::Update

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14753

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
perfetto::base::Hash::Update
perfetto::base::StringView::Hash
perfetto::trace_processor::StringPool::InternString
```


Summary: Heap-buffer-overflow in ZSTD_copy16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17451

```
Crash type: Heap-buffer-overflow READ 16
Crash state:
ZSTD_copy16
ZSTD_decompressSequences_bmi2
ZSTD_decompressBlock_internal
```


Summary: UNKNOWN READ in perfetto::trace_processor::ProtoTraceParser::ParseTypedFtraceToRaw

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13724

```
Crash type: UNKNOWN READ
Crash state:
perfetto::trace_processor::ProtoTraceParser::ParseTypedFtraceToRaw
perfetto::trace_processor::ProtoTraceParser::ParseFtracePacket
perfetto::trace_processor::TraceSorter::SortAndExtractEventsBeyondWindow
```


Summary: Heap-buffer-overflow in inflate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15495

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
inflate
perfetto::trace_processor::GzipTraceParser::Parse
perfetto::trace_processor::TraceProcessorImpl::Parse
```


Summary: Heap-buffer-overflow in CPLErr GDALResampleChunk32R_AverageT<unsigned char, int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21558

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
CPLErr GDALResampleChunk32R_AverageT<unsigned char, int>
GDALResampleChunk32R_Average
GDALRasterBand::RasterIOResampled
```


Summary: UNKNOWN READ in wmem_strdup_printf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13725

```
Crash type: UNKNOWN READ
Crash state:
wmem_strdup_printf
dissect_parameter_sequence
dissect_rtps_submessage_v2
```


Summary: Heap-buffer-overflow in Variant_decodeJson

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18259

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
Variant_decodeJson
UA_decodeJson
fuzz_json_decode_encode.cc
```


Summary: Global-buffer-overflow in backup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18447

```
Crash type: Global-buffer-overflow READ 1
Crash state:
backup
lex_string
lex_next
```


Summary: Heap-buffer-overflow in post_process_template

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19013

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
post_process_template
parser_shutdown
parse_string
```


Summary: Use-of-uninitialized-value in g_date_time_get_week_number

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17648

```
Crash type: Use-of-uninitialized-value
Crash state:
g_date_time_get_week_number
g_date_time_new_week
parse_isoNUMBER_date
```


Summary: Heap-buffer-overflow in ndpi_workflow_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21348

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
ndpi_workflow_process_packet
fuzz_ndpi_reader.c
```