Summary: Use-of-uninitialized-value in gbNUMBER_mbc_enc_len

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21944

```
Crash type: Use-of-uninitialized-value
Crash state:
gbNUMBER_mbc_enc_len
onigenc_mb4_code_to_mbc
parse_exp
```


Summary: Heap-buffer-overflow in arrow::internal::CountSetBits

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20199

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
arrow::internal::CountSetBits
arrow::Array::null_count
arrow::internal::ValidateArray
```


Summary: Heap-use-after-free in JS_ReadObjectRec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21532

```
Crash type: Heap-use-after-free READ 4
Crash state:
JS_ReadObjectRec
JS_ReadObject
fuzz_compile.c
```


Summary: Global-buffer-overflow in WelsDec::ParseInterBInfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12652

```
Crash type: Global-buffer-overflow READ 1
Crash state:
WelsDec::ParseInterBInfo
WelsDec::WelsActualDecodeMbCavlcBSlice
WelsDec::WelsDecodeMbCavlcBSlice
```


Summary: Use-of-uninitialized-value in psscan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21670

```
Crash type: Use-of-uninitialized-value
Crash state:
psscan
document_load
spectre_read_fuzzer.c
```


Summary: Use-of-uninitialized-value in readline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21638

```
Crash type: Use-of-uninitialized-value
Crash state:
readline
psscan
document_load
```


Summary: Use-of-uninitialized-value in put4bitbwtile

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21434

```
Crash type: Use-of-uninitialized-value
Crash state:
put4bitbwtile
gtStripContig
TIFFRGBAImageGet
```


Summary: Global-buffer-overflow in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20203

```
Crash type: Global-buffer-overflow READ 1
Crash state:
arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>
arrow::Status arrow::internal::ValidateArrayDataVisitor::ValidateListArray<arrow
arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>
```


Summary: UNKNOWN WRITE in ideint_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18993

```
Crash type: UNKNOWN WRITE
Crash state:
ideint_process
impeg2d_deinterlace
impeg2d_dec_pic_data_thread
```


Summary: Global-buffer-overflow in kencodingprober::nsCodingStateMachine::NextState

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12919

```
Crash type: Global-buffer-overflow READ 4
Crash state:
kencodingprober::nsCodingStateMachine::NextState
kencodingprober::nsEscCharSetProber::HandleData
kencodingprober::nsUniversalDetector::HandleData
```


Summary: Index-out-of-bounds in WelsDec::DecodeCurrentAccessUnit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12668

```
Crash type: Index-out-of-bounds
Crash state:
WelsDec::DecodeCurrentAccessUnit
WelsDec::ConstructAccessUnit
WelsDecodeBs
```


Summary: Heap-buffer-overflow in ndpi_int_check_stun

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18737

```
Crash type: Heap-buffer-overflow READ 16
Crash state:
ndpi_int_check_stun
ndpi_search_stun
check_ndpi_udp_flow_func
```


Summary: Heap-buffer-overflow in pcpp::IPv6Extension::getExtensionLen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22105

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pcpp::IPv6Extension::getExtensionLen
pcpp::IPv6Layer::parseExtensions
pcpp::IPv6Layer::IPv6Layer
```


Summary: Index-out-of-bounds in decoder_context::has_sps

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13591

```
Crash type: Index-out-of-bounds
Crash state:
decoder_context::has_sps
pic_parameter_set::read
decoder_context::read_pps_NAL
```


Summary: Heap-buffer-overflow in cdf_read_property_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16634

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
cdf_read_property_info
cdf_unpack_summary_info
cdf_file_summary_info
```


Summary: Heap-buffer-overflow in ndpi_search_mail_smtp_tcp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20563

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ndpi_search_mail_smtp_tcp
check_ndpi_tcp_flow_func
ndpi_detection_process_packet
```


Summary: Use-of-uninitialized-value in ndpi_parse_packet_line_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23058

```
Crash type: Use-of-uninitialized-value
Crash state:
ndpi_parse_packet_line_info
ndpi_check_http_tcp
ndpi_search_http_tcp
```


Summary: UNKNOWN WRITE in DumpModeDecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14071

```
Crash type: UNKNOWN WRITE
Crash state:
DumpModeDecode
TIFFReadEncodedStrip
cv::TiffDecoder::readData_32FC3
```


Summary: Use-of-uninitialized-value in pcpp::NullLoopbackLayer::parseNextLayer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22831

```
Crash type: Use-of-uninitialized-value
Crash state:
pcpp::NullLoopbackLayer::parseNextLayer
pcpp::Packet::setRawPacket
pcpp::Packet::Packet
```


Summary: Heap-use-after-free in WelsDec::WelsReorderRefList

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20491

```
Crash type: Heap-use-after-free READ 4
Crash state:
WelsDec::WelsReorderRefList
WelsDec::InitRefPicList
WelsDec::DecodeCurrentAccessUnit
```


Summary: Heap-buffer-overflow in pcpp::IPv4Layer::getSrcIpAddress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22427

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
pcpp::IPv4Layer::getSrcIpAddress
FuzzTarget.cpp
```


Summary: Use-of-uninitialized-value in psnip_safe_size_mul

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16834

```
Crash type: Use-of-uninitialized-value
Crash state:
psnip_safe_size_mul
SafeMulDims
Mat_VarFree
```


Summary: Heap-buffer-overflow in BEInt<short, 2>::operator short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21092

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
BEInt<short, 2>::operator short
OT::IntType<short, 2u>::operator int
OT::SegmentMaps::map
```


Summary: UNKNOWN READ in xmlXPathCompileExpr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16288

```
Crash type: UNKNOWN READ
Crash state:
xmlXPathCompileExpr
xmlXPathCompPrimaryExpr
xmlXPathCompFilterExpr
```


Summary: Heap-buffer-overflow in ihevcd_parse_slice_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16805

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ihevcd_parse_slice_data
ihevcd_nal_unit
ihevcd_decode
```


Summary: Heap-buffer-overflow in helper_ret_stb_mmu_mips

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13489

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
helper_ret_stb_mmu_mips
```


Summary: Heap-buffer-overflow in ihevcd_ctb_boundary_strength_islice

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16842

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
ihevcd_ctb_boundary_strength_islice
ihevcd_parse_slice_data
ihevcd_nal_unit
```


Summary: Heap-buffer-overflow in ndpi_strnstr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22022

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_strnstr
ndpi_search_nats_tcp
check_ndpi_tcp_flow_func
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12728

```
Crash type: Heap-use-after-free READ 4
Crash state:
WelsDec::WelsReorderRefList
WelsDec::DecodeCurrentAccessUnit
WelsDec::ConstructAccessUnit
```


Summary: Use-of-uninitialized-value in ps_read_doseps

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21301

```
Crash type: Use-of-uninitialized-value
Crash state:
ps_read_doseps
psscan
document_load
```


Summary: UNKNOWN READ in hpeek

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20473

```
Crash type: UNKNOWN READ
Crash state:
hpeek
sam_hdr_create
view_sam
```


Summary: Heap-buffer-overflow in void mc_chroma<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13583

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
void mc_chroma<unsigned short>
generate_inter_prediction_samples
decode_prediction_unit
```


Summary: Heap-use-after-free in arrow::internal::CountSetBits

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20120

```
Crash type: Heap-use-after-free READ 8
Crash state:
arrow::internal::CountSetBits
arrow::Array::null_count
arrow::internal::ValidateArray
```


Summary: Heap-buffer-overflow in to_u32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16734

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
to_u32
fuzz_get_tlv_comn
fuzz_add_mime_part
```


Summary: Heap-buffer-overflow in find_dom

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15284

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
find_dom
opt_loop
bpf_optimize
```


Summary: Use-of-uninitialized-value in TIFFYCbCrtoRGB

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16844

```
Crash type: Use-of-uninitialized-value
Crash state:
TIFFYCbCrtoRGB
putcontig8bitYCbCr22tile
gtTileContig
```


Summary: Heap-buffer-overflow in getTLScertificate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19269

```
Crash type: Heap-buffer-overflow READ 6
Crash state:
getTLScertificate
tlsDetectProtocolFromCertificate
ndpi_search_tls_tcp_udp
```


Summary: Use-of-uninitialized-value in ihevc_recon_32x32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17072

```
Crash type: Use-of-uninitialized-value
Crash state:
ihevc_recon_32x32
ihevcd_iquant_itrans_recon_ctb
ihevcd_process
```


Summary: Heap-buffer-overflow in mbc_case_fold

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21977

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
mbc_case_fold
string_cmp_ic
match_at
```


Summary: Use-of-uninitialized-value in pcpp::NullLoopbackLayer::getFamily

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22084

```
Crash type: Use-of-uninitialized-value
Crash state:
pcpp::NullLoopbackLayer::getFamily
pcpp::NullLoopbackLayer::parseNextLayer
pcpp::Packet::setRawPacket
```


Summary: Use-of-uninitialized-value in pcpp::Packet::createFirstLayer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22085

```
Crash type: Use-of-uninitialized-value
Crash state:
pcpp::Packet::createFirstLayer
pcpp::Packet::setRawPacket
FuzzTarget.cpp
```


Summary: Dynamic-stack-buffer-overflow in RetrieveFPForSig

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21758

```
Crash type: Dynamic-stack-buffer-overflow WRITE 4
Crash state:
RetrieveFPForSig
DetectSetFastPatternAndItsId
SigGroupBuild
```


Summary: Use-of-uninitialized-value in jbig2_decode_mmr_line

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17855

```
Crash type: Use-of-uninitialized-value
Crash state:
jbig2_decode_mmr_line
jbig2_decode_halftone_mmr
jbig2_decode_gray_scale_image
```


Summary: Heap-buffer-overflow in ih264d_cavlc_parse4x4coeff_n8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16587

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ih264d_cavlc_parse4x4coeff_n8
ih264d_cavlc_parse_8x8block_both_available
ih264d_parse_residual4x4_cavlc
```


Summary: Use-of-uninitialized-value in decimate_dsd_run

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19925

```
Crash type: Use-of-uninitialized-value
Crash state:
decimate_dsd_run
WavpackUnpackSamples
fuzzer.cc
```


Summary: Heap-buffer-overflow in c2i_ASN1_INTEGER

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14142

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
c2i_ASN1_INTEGER
asn1_ex_c2i
asn1_d2i_ex_primitive
```


Summary: Stack-buffer-overflow in void apply_sao_internal<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13643

```
Crash type: Stack-buffer-overflow READ 4
Crash state:
void apply_sao_internal<unsigned short>
void apply_sao<unsigned char>
thread_task_sao::work
```


Summary: Negative-size-param in parquet::PlainByteArrayDecoder::DecodeArrowDense

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20669

```
Crash type: Negative-size-param
Crash state:
parquet::PlainByteArrayDecoder::DecodeArrowDense
parquet::PlainByteArrayDecoder::DecodeArrow
parquet::internal::ByteArrayChunkedRecordReader::ReadValuesSpaced
```


Summary: Heap-use-after-free in WelsDec::MapColToList0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13185

```
Crash type: Heap-use-after-free READ 4
Crash state:
WelsDec::MapColToList0
WelsDec::ParseInterBMotionInfoCabac
WelsDec::WelsDecodeMbCabacBSliceBaseMode0
```


Summary: Heap-buffer-overflow in jpc_dec_process_sot

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13310

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
jpc_dec_process_sot
jpc_decode
jp2_decode
```


Summary: Heap-buffer-overflow in pixReadFromTiffStream

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21435

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
pixReadFromTiffStream
pixReadMemTiff
pixReadMem
```


Summary: UNKNOWN WRITE in TIFFReadRGBATileExt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14185

```
Crash type: UNKNOWN WRITE
Crash state:
TIFFReadRGBATileExt
cv::TiffDecoder::readData
cv::imread
```


Summary: Stack-buffer-overflow in readstat_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12579

```
Crash type: Stack-buffer-overflow WRITE 1
Crash state:
readstat_convert
dta_handle_row
dta_handle_rows
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13457

```
Crash type: Heap-use-after-free READ 4
Crash state:
WelsDec::MapColToList0
WelsDec::PredBDirectTemporal
WelsDec::ParseInterBMotionInfoCabac
```


Summary: Negative-size-param in heif::HeifPixelImage::fill_RGB_16bit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13563

```
Crash type: Negative-size-param
Crash state:
heif::HeifPixelImage::fill_RGB_16bit
heif::HeifContext::decode_overlay_image
heif::HeifContext::decode_image
```


Summary: Heap-buffer-overflow in getSSCertificateFingerprint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18733

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
getSSCertificateFingerprint
tlsDetectProtocolFromCertificate
ndpi_search_tls_tcp_udp
```


Summary: Use-of-uninitialized-value in AnnotAppearanceBuilder::drawText

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17607

```
Crash type: Use-of-uninitialized-value
Crash state:
AnnotAppearanceBuilder::drawText
AnnotAppearanceBuilder::drawFormFieldChoice
AnnotAppearanceBuilder::drawFormField
```


Summary: UNKNOWN READ in arrow::Array::IsNull

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20139

```
Crash type: UNKNOWN READ
Crash state:
arrow::Array::IsNull
arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>
arrow::internal::ValidateArrayData
```


Summary: Heap-buffer-overflow in ASN1_get_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13803

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ASN1_get_object
asn1_check_tlen
asn1_item_ex_d2i
```


Summary: Use-of-uninitialized-value in psscan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21302

```
Crash type: Use-of-uninitialized-value
Crash state:
psscan
document_load
spectre_read_fuzzer.c
```


Summary: Heap-buffer-overflow in exif_entry_get_value

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14543

```
Crash type: Heap-buffer-overflow READ 7
Crash state:
exif_entry_get_value
content_func
exif_content_foreach_entry
```


Summary: Use-of-uninitialized-value in SampledFunction::SampledFunction

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12608

```
Crash type: Use-of-uninitialized-value
Crash state:
SampledFunction::SampledFunction
Function::parse
Function::parse
```


Summary: Heap-buffer-overflow in cdf_read_property_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16780

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
cdf_read_property_info
cdf_unpack_summary_info
cdf_file_summary_info
```


Summary: Use-of-uninitialized-value in ihevc_deblk_luma_vert_ssse3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17009

```
Crash type: Use-of-uninitialized-value
Crash state:
ihevc_deblk_luma_vert_ssse3
ihevcd_deblk_ctb
ihevcd_process
```


Summary: Heap-buffer-overflow in asn1_decode_entry

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16620

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
asn1_decode_entry
asn1_decode
asn1_decode_entry
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13037

```
Crash type: Heap-use-after-free READ 4
Crash state:
WelsDec::MapColToList0
WelsDec::PredBDirectTemporal
WelsDec::ParseInterBInfo
```


Summary: UNKNOWN READ in pcpp::Packet::setRawPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23011

```
Crash type: UNKNOWN READ
Crash state:
pcpp::Packet::setRawPacket
pcpp::Packet::Packet
FuzzTarget.cpp
```


Summary: Bad-free in aes_gcm_cleanup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14333

```
Crash type: Bad-free
Crash state:
aes_gcm_cleanup
EVP_CIPHER_CTX_free
cryptofuzz::module::CTX_Copier<evp_cipher_ctx_st>::copy
```


Summary: UNKNOWN READ in std::__1::_MetaBase<__can_be_converted_to_string_view<char, std::__1::char_trait

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23429

```
Crash type: UNKNOWN READ
Crash state:
std::__1::_MetaBase<__can_be_converted_to_string_view<char, std::__1::char_trait
bool std::__1::operator<<char, std::__1::char_traits<char>, std::__1::allocator<
std::__1::__tree_iterator<std::__1::__value_type<std::__1::basic_string<char, st
```


Summary: Stack-buffer-overflow in ot::ExtendedTlv::GetLength

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20775

```
Crash type: Stack-buffer-overflow READ 2
Crash state:
ot::ExtendedTlv::GetLength
ot::Tlv::GetSize
ot::Tlv::GetNext
```


Summary: Heap-buffer-overflow in SHA1Update

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18740

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
SHA1Update
getSSCertificateFingerprint
tlsDetectProtocolFromCertificate
```


Summary: Heap-use-after-free in WelsDec::WelsReorderRefList

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13038

```
Crash type: Heap-use-after-free READ 4
Crash state:
WelsDec::WelsReorderRefList
WelsDec::DecodeCurrentAccessUnit
WelsDec::ConstructAccessUnit
```


Summary: Heap-buffer-overflow in pcpp::DnsResource::getDataLength

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22102

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
pcpp::DnsResource::getDataLength
pcpp::DnsResource::getSize
pcpp::DnsLayer::parseResources
```


Summary: UNKNOWN WRITE in ideint_weave_blk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17084

```
Crash type: UNKNOWN WRITE
Crash state:
ideint_weave_blk
ideint_process
impeg2d_deinterlace
```


Summary: Use-of-uninitialized-value in OT::TupleVarHeader::calculate_scalar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20919

```
Crash type: Use-of-uninitialized-value
Crash state:
OT::TupleVarHeader::calculate_scalar
OT::gvar::accelerator_t::apply_deltas_to_points
bool OT::glyf::Glyph::get_points<bool OT::glyf::accelerator_t::get_points<OT::gl
```


Summary: Heap-buffer-overflow in ihevcd_parse_slice_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17036

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
ihevcd_parse_slice_data
ihevcd_decode
ihevcd_cxa_api_function
```


Summary: Heap-buffer-overflow in hts_md5_update

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22231

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
hts_md5_update
cram_decode_slice
cram_decode_slice_mt
```


Summary: Use-of-uninitialized-value in TIFFYCbCrtoRGB

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16602

```
Crash type: Use-of-uninitialized-value
Crash state:
TIFFYCbCrtoRGB
putcontig8bitYCbCr42tile
gtTileContig
```


Summary: Heap-buffer-overflow in pcpp::IPv6Extension::getExtensionLen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22636

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pcpp::IPv6Extension::getExtensionLen
pcpp::IPv6Layer::parseExtensions
pcpp::IPv6Layer::IPv6Layer
```


Summary: Heap-buffer-overflow in pixGetRGBComponentCmap

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22295

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pixGetRGBComponentCmap
pixGetRGBComponent
pixUnsharpMasking
```


Summary: Use-of-uninitialized-value in pcpp::SSLCertificateRequestMessage::SSLCertificateRequestMessage

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22513

```
Crash type: Use-of-uninitialized-value
Crash state:
pcpp::SSLCertificateRequestMessage::SSLCertificateRequestMessage
pcpp::SSLHandshakeMessage::createHandhakeMessage
pcpp::SSLHandshakeLayer::SSLHandshakeLayer
```


Summary: Use-of-uninitialized-value in FilterInput8bitWithStride_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13004

```
Crash type: Use-of-uninitialized-value
Crash state:
FilterInput8bitWithStride_c
McHorVer20_c
McHorVer30_c
```


Summary: Use-of-uninitialized-value in ndpi_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21309

```
Crash type: Use-of-uninitialized-value
Crash state:
ndpi_strdup
processClientServerHello
processTLSBlock
```


Summary: Heap-buffer-overflow in pcpp::IPv4Layer::getFragmentFlags

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22638

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
pcpp::IPv4Layer::getFragmentFlags
pcpp::IPv4Layer::isFragment
pcpp::IPv4Layer::parseNextLayer
```


Summary: Heap-buffer-overflow in asn1_parse_oid

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20363

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
asn1_parse_oid
asn1_get_oid
x509_parse_ext_certificate_policies
```


Summary: UNKNOWN READ in FlowGetHash

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21479

```
Crash type: UNKNOWN READ
Crash state:
FlowGetHash
FlowSetupPacket
DecodeICMPV4
```


Summary: Global-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21769

```
Crash type: Global-buffer-overflow READ 2
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
OT::IntType<unsigned short, 2u>::operator unsigned int
CFF::Charset0::get_glyph
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16804

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ihevcd_parse_slice_data
ihevcd_decode
ihevcd_cxa_api_function
```


Summary: UNKNOWN READ in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20135

```
Crash type: UNKNOWN READ
Crash state:
arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>
arrow::Status arrow::internal::ValidateArrayDataVisitor::ValidateListArray<arrow
arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>
```


Summary: UNKNOWN READ in std::__1::__tree<std::__1::__value_type<std::__1::basic_string<char, std::__1::c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23566

```
Crash type: UNKNOWN READ
Crash state:
std::__1::__tree<std::__1::__value_type<std::__1::basic_string<char, std::__1::c
std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<std::__1::basic_
std::__1::map<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1
```


Summary: Heap-use-after-free in r_bin_object_rebuild_classes_ht

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21602

```
Crash type: Heap-use-after-free READ 8
Crash state:
r_bin_object_rebuild_classes_ht
r_bin_object_set_items
r_bin_object_new
```


Summary: Heap-buffer-overflow in mu::ParserBase::ParseCmdCodeBulk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24164

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
mu::ParserBase::ParseCmdCodeBulk
mu::ParserBase::ParseString
set_eval_fuzzer.cc
```


Summary: Heap-buffer-overflow in pcpp::GtpV1Layer::GtpExtension::getNextExtensionHeaderType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23183

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pcpp::GtpV1Layer::GtpExtension::getNextExtensionHeaderType
pcpp::GtpV1Layer::GtpExtension::getNextExtension
pcpp::GtpV1Layer::getHeaderLen
```


Summary: Index-out-of-bounds in xsltSetAttrVTsegment

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14273

```
Crash type: Index-out-of-bounds
Crash state:
xsltSetAttrVTsegment
xsltCompileAttr
xsltParseTemplateContent
```


Summary: Heap-buffer-overflow in pixFewColorsOctcubeQuantMixed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22140

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pixFewColorsOctcubeQuantMixed
colorquant_fuzzer.cc
```


Summary: Use-of-uninitialized-value in Gfx::fillPatch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15395

```
Crash type: Use-of-uninitialized-value
Crash state:
Gfx::fillPatch
Gfx::doPatchMeshShFill
Gfx::doShadingPatternFill
```


Summary: UNKNOWN WRITE in StatsIncr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21508

```
Crash type: UNKNOWN WRITE
Crash state:
StatsIncr
AppLayerHandleUdp
FlowWorker
```


Summary: Negative-size-param in fuzz_tlv_to_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16703

```
Crash type: Negative-size-param
Crash state:
fuzz_tlv_to_string
fuzz_parse_mime_tlv
fuzz_add_mime_part
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23410

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
mu::ParserBase::ParseCmdCodeBulk
mu::ParserBase::ParseString
set_eval_fuzzer.cc
```


Summary: Heap-use-after-free in sc_pkcs15_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17170

```
Crash type: Heap-use-after-free READ 4
Crash state:
sc_pkcs15_free_object
fuzz_pkcs15_decode.c
fuzz_pkcs15_decode.c
```


Summary: Heap-buffer-overflow in arrow::Status arrow::internal::ValidateArrayVisitor::ValidateListArray<arrow::Li

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20186

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
arrow::Status arrow::internal::ValidateArrayVisitor::ValidateListArray<arrow::Li
arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayVisitor>
arrow::internal::ValidateArray
```


Summary: Segv on unknown address in vips_XYZ2Lab_line

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24290

```
Crash type: Segv on unknown address
Crash state:
vips_XYZ2Lab_line
vips_colour_gen
vips_region_generate
```


Summary: Heap-buffer-overflow in ndpi_netbios_name_interpret

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20823

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_netbios_name_interpret
ndpi_int_netbios_add_connection
check_ndpi_udp_flow_func
```


Summary: Use-of-uninitialized-value in LibRaw::init_fuji_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24016

```
Crash type: Use-of-uninitialized-value
Crash state:
LibRaw::init_fuji_block
LibRaw::fuji_decode_strip
LibRaw::fuji_decode_loop
```


Summary: UNKNOWN READ in cli_vba_readdir_new

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24354

```
Crash type: UNKNOWN READ
Crash state:
cli_vba_readdir_new
cli_vba_scandir_new
cli_scanole2
```


Summary: Heap-use-after-free in RDKit::SubstanceGroup::addParentAtomWithBookmark

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24406

```
Crash type: Heap-use-after-free READ 4
Crash state:
RDKit::SubstanceGroup::addParentAtomWithBookmark
RDKit::SGroupParsing::ParseSGroupV2000VectorDataLine
RDKit::ParseMolBlockProperties
```


Summary: UNKNOWN READ in dav1d_resize_ssse3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21547

```
Crash type: UNKNOWN READ
Crash state:
dav1d_resize_ssse3
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23926

```
Crash type: Bad-cast
Crash state:
Bad-cast to pcpp::IDnsResource from invalid vptr
pcpp::DnsLayer::parseResources
pcpp::DnsLayer::DnsLayer
```


Summary: Index-out-of-bounds in stbi__build_huffman

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22584

```
Crash type: Index-out-of-bounds
Crash state:
stbi__build_huffman
stbi__process_marker
stbi__decode_jpeg_header
```


Summary: Segv on unknown address in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23552

```
Crash type: Segv on unknown address
Crash state:
helper_uc_tracecode
```


Summary: Heap-buffer-overflow in dotnet_parse_com

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8901

```
Crash type: Heap-buffer-overflow READ 16
Crash state:
dotnet_parse_com
dotnet__load
yr_modules_load
```


Summary: Heap-buffer-overflow in org::apache::arrow::flatbuf::Message::Verify

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21681

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
org::apache::arrow::flatbuf::Message::Verify
arrow::ipc::CheckMetadataAndGetBodyLength
arrow::ipc::MessageDecoder::MessageDecoderImpl::ConsumeMetadata
```


Summary: Use-of-uninitialized-value in stbi__jpeg_decode_block_prog_ac

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22589

```
Crash type: Use-of-uninitialized-value
Crash state:
stbi__jpeg_decode_block_prog_ac
stbi__parse_entropy_coded_data
stbi__decode_jpeg_image
```


Summary: Use-of-uninitialized-value in nl_attr_is_valid

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19890

```
Crash type: Use-of-uninitialized-value
Crash state:
nl_attr_is_valid
format_odp_tun_attr
format_odp_key_attr__
```


Summary: Heap-buffer-overflow in parse_relocation_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24400

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
parse_relocation_info
get_relocs_64
relocs
```


Summary: Stack-buffer-overflow in fmt_setup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22507

```
Crash type: Stack-buffer-overflow WRITE 1
Crash state:
fmt_setup
mrb_str_format
mrb_f_sprintf
```


Summary: Use-of-uninitialized-value in QPDFWriter::unparseObject

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18633

```
Crash type: Use-of-uninitialized-value
Crash state:
QPDFWriter::unparseObject
QPDFWriter::writeObject
QPDFWriter::writeStandard
```


Summary: UNKNOWN READ in cpu_arm_exec_armeb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23109

```
Crash type: UNKNOWN READ
Crash state:
cpu_arm_exec_armeb
tcg_cpu_exec_armeb
tcg_exec_all_armeb
```


Summary: Heap-use-after-free in pixcmapDestroy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22110

```
Crash type: Heap-use-after-free READ 8
Crash state:
pixcmapDestroy
colorquant_fuzzer.cc
pixcmapDestroy
```


Summary: Use-of-uninitialized-value in float64_squash_input_denormal_aarch64eb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17032

```
Crash type: Use-of-uninitialized-value
Crash state:
float64_squash_input_denormal_aarch64eb
float64_to_float32_aarch64eb
helper_vfp_fcvtsd_aarch64eb
```


Summary: Heap-buffer-overflow in format_generic_odp_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20003

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
format_generic_odp_key
check_attr_len
format_odp_key_attr
```


Summary: Index-out-of-bounds in DHT::get_hv_rbg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23870

```
Crash type: Index-out-of-bounds
Crash state:
DHT::get_hv_rbg
DHT::make_hv_dline
DHT::make_hv_dirs
```


Summary: Heap-use-after-free in ndpi_strncasestr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22816

```
Crash type: Heap-use-after-free READ 1
Crash state:
ndpi_strncasestr
ndpi_http_check_content
ndpi_int_http_add_connection
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15896

```
Crash type: Bad-cast
Crash state:
Bad-cast to Sass::PreValue from Sass::Unary_Expression
Sass::SharedImpl<Sass::PreValue>::SharedImpl<Sass::Expression>
Sass::Parser::parse_ie_keyword_arg
```


Summary: Use-of-uninitialized-value in txt2sd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22219

```
Crash type: Use-of-uninitialized-value
Crash state:
txt2sd
fuzz_mdns_xht.cc
txt2sd
```


Summary: Use-of-uninitialized-value in TextEndsWithNewline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13191

```
Crash type: Use-of-uninitialized-value
Crash state:
TextEndsWithNewline
PPrintText
PPrintScriptStyle
```


Summary: Heap-buffer-overflow in QSpecialInteger<QBigEndianStorageType<unsigned int> >::operator unsigned int

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21909

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
QSpecialInteger<QBigEndianStorageType<unsigned int> >::operator unsigned int
QIcc::fromIccProfile
QColorSpace::fromIccProfile
```


Summary: Heap-use-after-free in int arrow::BitUtil::BitReader::GetBatch<short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20685

```
Crash type: Heap-use-after-free WRITE 2
Crash state:
int arrow::BitUtil::BitReader::GetBatch<short>
parquet::LevelDecoder::Decode
parquet::internal::TypedRecordReader<parquet::PhysicalType<
```


Summary: Use-of-uninitialized-value in PPrintText

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13014

```
Crash type: Use-of-uninitialized-value
Crash state:
PPrintText
prvTidyPPrintTree
prvTidyPPrintTree
```


Summary: Global-buffer-overflow in vte_write_debug

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22203

```
Crash type: Global-buffer-overflow READ 1
Crash state:
vte_write_debug
send_primary_da
do_esc
```


Summary: UNKNOWN READ in RDKit::labelRecursivePatterns

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24352

```
Crash type: UNKNOWN READ
Crash state:
RDKit::labelRecursivePatterns
RDKit::SmartsToMol
RDKit::ParseMarvinSmartsLine
```


Summary: Heap-buffer-overflow in Json::OurReader::parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21916

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Json::OurReader::parse
Json::OurCharReader::parse
fuzz.cpp
```


Summary: Heap-buffer-overflow in BEInt<short, 2>::operator short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21026

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
BEInt<short, 2>::operator short
OT::IntType<short, 2u>::operator int
OT::TupleVarHeader::calculate_scalar
```


Summary: Heap-buffer-overflow in stbi__YCbCr_to_RGB_simd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22605

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
stbi__YCbCr_to_RGB_simd
load_jpeg_image
stbi__jpeg_load
```


Summary: Heap-buffer-overflow in load_jpeg_image

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23153

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
load_jpeg_image
stbi__jpeg_load
stbi__load_main
```


Summary: Use-of-uninitialized-value in AES_encrypt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23015

```
Crash type: Use-of-uninitialized-value
Crash state:
AES_encrypt
AES_wrap_key
aes_wrap_cipher
```


Summary: Segv on unknown address in H5O_chunk_deserialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21315

```
Crash type: Segv on unknown address
Crash state:
H5O_chunk_deserialize
H5O_cache_chk_load
H5C_protect
```


Summary: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator=

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21580

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
BEInt<unsigned short, 2>::operator=
OT::IntType<unsigned short, 2u>::operator=
bool OT::ClassDefFormat1::serialize<hb_zip_iter_t<hb_sorted_array_t<OT::HBGlyphI
```


Summary: Use-of-uninitialized-value in UA_Array_copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22250

```
Crash type: Use-of-uninitialized-value
Crash state:
UA_Array_copy
String_copy
LocalizedText_copy
```


Summary: UNKNOWN READ in _01inverse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22245

```
Crash type: UNKNOWN READ
Crash state:
_01inverse
res1_inverse
mapping0_inverse
```


Summary: Segv on unknown address in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20457

```
Crash type: Segv on unknown address
Crash state:
std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
wabt::BinaryReaderIR::OnDataSymbol
```


Summary: Invalid-free in llvm_ks::SmallVectorImpl<llvm_ks::MCFixup>::~SmallVectorImpl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22371

```
Crash type: Invalid-free
Crash state:
llvm_ks::SmallVectorImpl<llvm_ks::MCFixup>::~SmallVectorImpl
llvm_ks::MCEncodedFragmentWithFixups<32u, 4u>::~MCEncodedFragmentWithFixups
llvm_ks::MCFragment::destroy
```


Summary: Index-out-of-bounds in MemoryRemoveTrailingZeros

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23127

```
Crash type: Index-out-of-bounds
Crash state:
MemoryRemoveTrailingZeros
CheckPWAuthSession
CheckAuthSession
```


Summary: UNKNOWN WRITE in FLAC__bitwriter_write_raw_uint32_nocheck

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19816

```
Crash type: UNKNOWN WRITE
Crash state:
FLAC__bitwriter_write_raw_uint32_nocheck
FLAC__bitwriter_write_raw_uint32
FLAC__frame_add_header
```


Summary: Index-out-of-bounds in DHT::hide_hots

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23837

```
Crash type: Index-out-of-bounds
Crash state:
DHT::hide_hots
LibRaw::dht_interpolate
LibRaw::dcraw_process
```


Summary: Use-of-uninitialized-value in stbi__jpeg_huff_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22598

```
Crash type: Use-of-uninitialized-value
Crash state:
stbi__jpeg_huff_decode
stbi__jpeg_decode_block_prog_ac
stbi__parse_entropy_coded_data
```


Summary: UNKNOWN in zend_ast_export_ex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24405

```
Crash type: UNKNOWN
Crash state:
zend_ast_export_ex
zend_ast_export_ex
zend_ast_export_ex
```


Summary: UNKNOWN WRITE in Variant_encodeJson

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20578

```
Crash type: UNKNOWN WRITE
Crash state:
Variant_encodeJson
Variant_encodeJson
Variant_encodeJson
```


Summary: Heap-buffer-overflow in search_valid_dns

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21263

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
search_valid_dns
ndpi_search_dns
check_ndpi_udp_flow_func
```


Summary: UNKNOWN READ in eval_expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23781

```
Crash type: UNKNOWN READ
Crash state:
eval_expr
eval_binary
eval_expr
```


Summary: Heap-use-after-free in destroy_op_array

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24436

```
Crash type: Heap-use-after-free READ 4
Crash state:
destroy_op_array
fuzzer_do_request
fuzzer_do_request_from_buffer
```


Summary: UNKNOWN WRITE in hb_vector_t<CFF::op_str_t>::resize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24500

```
Crash type: UNKNOWN WRITE
Crash state:
hb_vector_t<CFF::op_str_t>::resize
hb_vector_t<CFF::op_str_t>::push
CFF::parsed_values_t<CFF::op_str_t>::add_op
```


Summary: UNKNOWN WRITE in hb_vector_t<CFF::dict_val_t>::resize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24489

```
Crash type: UNKNOWN WRITE
Crash state:
hb_vector_t<CFF::dict_val_t>::resize
hb_vector_t<CFF::dict_val_t>::push
CFF::dict_val_t* hb_vector_t<CFF::dict_val_t>::push<CFF::dict_val_t const&>
```


Summary: UNKNOWN WRITE in CFF::parsed_cs_op_t::set_skip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24507

```
Crash type: UNKNOWN WRITE
Crash state:
CFF::parsed_cs_op_t::set_skip
CFF::parsed_cs_str_t::add_call_op
cff1_cs_opset_subr_subset_t::process_call_subr
```


Summary: UNKNOWN READ in hb_realloc_impl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24497

```
Crash type: UNKNOWN READ
Crash state:
hb_realloc_impl
hb_vector_t<CFF::dict_val_t>::alloc
hb_vector_t<CFF::dict_val_t>::resize
```


Summary: Object-size in void hb_ot_map_t::apply<GPOSProxy>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24508

```
Crash type: Object-size
Crash state:
void hb_ot_map_t::apply<GPOSProxy>
hb_ot_map_t::position
hb_ot_shape_plan_t::position
```


Summary: Global-buffer-overflow in OT::VarData::get_scalars

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24504

```
Crash type: Global-buffer-overflow WRITE 4
Crash state:
OT::VarData::get_scalars
OT::VariationStore::get_scalars
CFF::cff2_cs_interp_env_t::process_blend
```


Summary: Stack-buffer-overflow in dst_print_s2k

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24538

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
dst_print_s2k
stream_dump_packets_raw
stream_dump_packets
```


Summary: UNKNOWN WRITE in hb_vector_t<CFF::parsed_cs_op_t>::resize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24532

```
Crash type: UNKNOWN WRITE
Crash state:
hb_vector_t<CFF::parsed_cs_op_t>::resize
hb_vector_t<CFF::parsed_cs_op_t>::push
CFF::parsed_values_t<CFF::parsed_cs_op_t>::add_op
```


Summary: Heap-buffer-overflow in flb_unescape_string_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22132

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
flb_unescape_string_utf8
logfmt_parser
flb_parser_logfmt_do
```


Summary: UNKNOWN READ in OT::VariationSelectorRecord::operator=

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24548

```
Crash type: UNKNOWN READ
Crash state:
OT::VariationSelectorRecord::operator=
OT::VariationSelectorRecord::VariationSelectorRecord
hb_array_t<OT::VariationSelectorRecord>::reverse
```


Summary: Use-of-uninitialized-value in pb_encode_varint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24582

```
Crash type: Use-of-uninitialized-value
Crash state:
pb_encode_varint
pb_enc_varint
encode_array
```


Summary: Heap-buffer-overflow in allocate_field

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24586

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
allocate_field
pb_dec_string
decode_basic_field
```


Summary: Heap-buffer-overflow in ndpi_workflow_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24576

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_workflow_process_packet
fuzz_ndpi_reader.c
```


Summary: Heap-buffer-overflow in allocate_field

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24580

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
allocate_field
decode_pointer_field
decode_field
```


Summary: Heap-buffer-overflow in x265::PicYuv::copyFromPicture

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24590

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
x265::PicYuv::copyFromPicture
x265::Encoder::encode
x265_encoder_encode
```


Summary: Use-of-uninitialized-value in void ArduinoJsonNUMBER_71::Utf8::encodeCodepoint<ArduinoJsonNUMBER_71::StringCop

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24633

```
Crash type: Use-of-uninitialized-value
Crash state:
void ArduinoJsonNUMBER_71::Utf8::encodeCodepoint<ArduinoJsonNUMBER_71::StringCop
ArduinoJsonNUMBER_71::JsonDeserializer<ArduinoJsonNUMBER_71::BoundedReader<unsig
ArduinoJsonNUMBER_71::JsonDeserializer<ArduinoJsonNUMBER_71::BoundedReader<unsig
```


Summary: Heap-buffer-overflow in QPointF::x

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24615

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
QPointF::x
QBezier::fromPoints
QOutlineMapper::curveTo
```


Summary: UNKNOWN WRITE in count_blocks

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24704

```
Crash type: UNKNOWN WRITE
Crash state:
count_blocks
opt_init
bpf_optimize
```


Summary: UNKNOWN READ in ft_smooth_overlap_spans

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24729

```
Crash type: UNKNOWN READ
Crash state:
ft_smooth_overlap_spans
gray_sweep
gray_convert_glyph
```


Summary: Use-of-uninitialized-value in cryptofuzz::module::Nettle::OpSymmetricDecrypt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24785

```
Crash type: Use-of-uninitialized-value
Crash state:
cryptofuzz::module::Nettle::OpSymmetricDecrypt
cryptofuzz::ExecutorBase<cryptofuzz::Buffer, cryptofuzz::operation::SymmetricDec
cryptofuzz::ExecutorBase<cryptofuzz::Buffer, cryptofuzz::operation::SymmetricDec
```


Summary: UNKNOWN WRITE in avifDecoderDataFillImageGrid

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24811

```
Crash type: UNKNOWN WRITE
Crash state:
avifDecoderDataFillImageGrid
avifDecoderNextImage
avif_decode_fuzzer.cc
```


Summary: Use-of-uninitialized-value in longest_match

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24804

```
Crash type: Use-of-uninitialized-value
Crash state:
longest_match
deflate_fast
deflate
```


Summary: Use-of-uninitialized-value in slide_hash

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24820

```
Crash type: Use-of-uninitialized-value
Crash state:
slide_hash
fill_window
deflate_fast
```


Summary: Heap-use-after-free in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20906

```
Crash type: Heap-use-after-free READ 2
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
OT::IntType<unsigned short, 2u>::operator unsigned int
OT::GlyphVarData::has_data
```


Summary: Heap-buffer-overflow in populate_relocs_record

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21842

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
populate_relocs_record
rel_cache_new
get_import_addr
```


Summary: Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24786

```
Crash type: Use-of-uninitialized-value
Crash state:
fuzzing::memory::memory_test_msan
cryptofuzz::ExecutorBase<cryptofuzz::component::Ciphertext, cryptofuzz::operatio
cryptofuzz::ExecutorBase<cryptofuzz::component::Ciphertext, cryptofuzz::operatio
```


Summary: UNKNOWN READ in hb_set_digest_lowest_bits_t<unsigned long, 4u>::may_have

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24842

```
Crash type: UNKNOWN READ
Crash state:
hb_set_digest_lowest_bits_t<unsigned long, 4u>::may_have
hb_set_digest_combiner_t<hb_set_digest_lowest_bits_t<unsigned long, 4u>, hb_set_
OT::hb_ot_layout_lookup_accelerator_t::may_have
```


Summary: Heap-buffer-overflow in fdisk_partname

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24859

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
fdisk_partname
write_file_sfdisk
fdisk_script_write_file
```


Summary: Heap-use-after-free in jbig2_release_huffman_table

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21587

```
Crash type: Heap-use-after-free READ 8
Crash state:
jbig2_release_huffman_table
jbig2_text_region
jbig2_data_in
```


Summary: Segv on unknown address in Imf_2_5::hufUncompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24854

```
Crash type: Segv on unknown address
Crash state:
Imf_2_5::hufUncompress
Imf_2_5::DwaCompressor::uncompress
Imf_2_5::DwaCompressor::uncompress
```


Summary: Heap-buffer-overflow in yaml_emitter_emit_flow_mapping_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24869

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
yaml_emitter_emit_flow_mapping_key
yaml_emitter_state_machine
yaml_emitter_emit
```


Summary: Heap-use-after-free in xmlXIncludeIncludeNode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24925

```
Crash type: Heap-use-after-free READ 4
Crash state:
xmlXIncludeIncludeNode
xmlXIncludeDoProcess
xmlXIncludeLoadFallback
```


Summary: Segv on unknown address in wabt::BinaryReader::PrintError

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24992

```
Crash type: Segv on unknown address
Crash state:
wabt::BinaryReader::PrintError
wabt::BinaryReader::ReadRelocSection
wabt::BinaryReader::ReadCustomSection
```


Summary: Stack-buffer-overflow in ot::NetworkData::NetworkData::FindService

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21762

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
ot::NetworkData::NetworkData::FindService
ot::NetworkData::Leader::Validate
ot::NetworkData::Leader::RegisterNetworkData
```


Summary: Use-of-uninitialized-value in us_internal_dispatch_ready_poll

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25057

```
Crash type: Use-of-uninitialized-value
Crash state:
us_internal_dispatch_ready_poll
us_loop_run
uWS::TemplatedApp<false>::run
```


Summary: Heap-use-after-free in UA_NodeMap_delete

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25068

```
Crash type: Heap-use-after-free READ 4
Crash state:
UA_NodeMap_delete
UA_Server_new
fuzz_binary_message.cc
```


Summary: UNKNOWN READ in apache::thrift::protocol::TCompactProtocolT<apache::thrift::transport::TMemoryBu

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20670

```
Crash type: UNKNOWN READ
Crash state:
apache::thrift::protocol::TCompactProtocolT<apache::thrift::transport::TMemoryBu
parquet::format::FileMetaData::read
void parquet::DeserializeThriftUnencryptedMsg<parquet::format::FileMetaData>
```


Summary: Heap-buffer-overflow in zmq_z85_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25167

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
zmq_z85_decode
zmq::options_t::set_curve_key
zmq::options_t::setsockopt
```


Summary: Heap-buffer-overflow in macho_is_32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25134

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
macho_is_32
macho_parse_file
macho_parse_fat_file
```


Summary: Heap-buffer-overflow in ndpi_parse_packet_line_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22498

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
ndpi_parse_packet_line_info
ndpi_int_search_bittorrent_tcp_zero
ndpi_int_search_bittorrent_tcp
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25181

```
Crash type: Use-of-uninitialized-value
Crash state:
fuzzing::memory::memory_test_msan
cryptofuzz::ExecutorBase<cryptofuzz::Buffer, cryptofuzz::operation::CMAC>::postp
cryptofuzz::ExecutorBase<cryptofuzz::Buffer, cryptofuzz::operation::CMAC>::Run
```


Summary: Negative-size-param in BaseMemStream<char const>::getChars

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25221

```
Crash type: Negative-size-param
Crash state:
BaseMemStream<char const>::getChars
Stream::doGetChars
Stream::fillString
```


Summary: Heap-use-after-free in xmlTextReaderRead

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25210

```
Crash type: Heap-use-after-free READ 4
Crash state:
xmlTextReaderRead
xml.c
xmlTextReaderFreeNode
```


Summary: Memcpy-param-overlap in ot::Message::Write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25226

```
Crash type: Memcpy-param-overlap
Crash state:
ot::Message::Write
ot::Message::CopyTo
ot::Ip6::Ip6::InsertMplOption
```


Summary: Heap-buffer-overflow in Dasher::Dasher

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25243

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
Dasher::Dasher
bool drawLineAA<&
QCosmeticStroker::drawPath
```


Summary: Heap-buffer-overflow in Op_YCbCr_to_RGB<unsigned char>::convert_colorspace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25267

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
Op_YCbCr_to_RGB<unsigned char>::convert_colorspace
heif::ColorConversionPipeline::convert_image
heif::convert_colorspace
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25245

```
Crash type: Heap-use-after-free READ 4
Crash state:
UA_NodeMap_delete
UA_Server_new
fuzz_binary_message.cc
```


Summary: Heap-buffer-overflow in void arrow::internal::TransferBitmap<

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25332

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
void arrow::internal::TransferBitmap<
arrow::ConcatenateBitmaps
arrow::ConcatenateImpl::Concatenate
```


Summary: UNKNOWN READ in zend_gc_delref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25321

```
Crash type: UNKNOWN READ
Crash state:
zend_gc_delref
zval_delref_p
zval_ptr_dtor_nogc
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25340

```
Crash type: Bad-cast
Crash state:
Bad-cast to pcpp::Layer from invalid vptr
pcpp::IDnsResource::getRawData
pcpp::DnsResource::getDataLength
```


Summary: Segv on unknown address in std::__1::__tree<std::__1::__value_type<unsigned int, std::__1::pair<std::__1::b

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25376

```
Crash type: Segv on unknown address
Crash state:
std::__1::__tree<std::__1::__value_type<unsigned int, std::__1::pair<std::__1::b
uWS::TopicTree::drain
std::__1::__function::__func<LLVMFuzzerTestOneInput::$_1, std::__1::allocator<LL
```


Summary: Stack-buffer-overflow in uWS::TopicTree::trimTree

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25381

```
Crash type: Stack-buffer-overflow WRITE 8
Crash state:
uWS::TopicTree::trimTree
uWS::TopicTree::unsubscribeAll
TopicTree.cpp
```


Summary: Heap-buffer-overflow in macho_handle_segment

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25385

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
macho_handle_segment
macho_parse_file
macho__load
```


Summary: Heap-buffer-overflow in rnp_key_store_kbx_from_src

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25386

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
rnp_key_store_kbx_from_src
rnp_load_keys
keyring_kbx.c
```


Summary: Heap-buffer-overflow in populate_relocs_record

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21850

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
populate_relocs_record
relocs
r_bin_object_set_items
```


Summary: UNKNOWN READ in zend_gc_delref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25384

```
Crash type: UNKNOWN READ
Crash state:
zend_gc_delref
i_zval_ptr_dtor
zend_unclean_zval_ptr_dtor
```


Summary: Heap-buffer-overflow in mem_src_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25388

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
mem_src_read
src_peek
src_eof
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23396

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_parse_packet_line_info
ndpi_int_search_bittorrent_tcp_zero
ndpi_int_search_bittorrent_tcp
```


Summary: Use-of-uninitialized-value in gx_color_frac_map

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25463

```
Crash type: Use-of-uninitialized-value
Crash state:
gx_color_frac_map
pdf14_cmap_rgb_direct
gx_remap_concrete_DRGB
```


Summary: Stack-buffer-overflow in ndpi_search_kerberos

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25446

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
ndpi_search_kerberos
check_ndpi_udp_flow_func
ndpi_check_flow_func
```


Summary: Segv on unknown address in ndpi_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25468

```
Crash type: Segv on unknown address
Crash state:
ndpi_free
ndpi_free_flow
fuzz_process_packet.c
```


Summary: Heap-buffer-overflow in hextoint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25473

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
hextoint
get_name_from_EF_DatiPersonali
itacns_add_data_files
```


Summary: Heap-use-after-free in xmlXPathNodeSetAdd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25536

```
Crash type: Heap-use-after-free READ 4
Crash state:
xmlXPathNodeSetAdd
xmlXPathGetElementsByIds
xmlXPathIdFunction
```


Summary: Heap-buffer-overflow in mbedtls_nist_kw_wrap

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25529

```
Crash type: Heap-buffer-overflow WRITE 16
Crash state:
mbedtls_nist_kw_wrap
mbedtls_cipher_auth_encrypt
cryptofuzz::module::mbedTLS_detail::encrypt_AEAD
```


Summary: Use-of-uninitialized-value in ndpi_check_dga_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25545

```
Crash type: Use-of-uninitialized-value
Crash state:
ndpi_check_dga_name
check_content_type_and_change_protocol
ndpi_check_http_tcp
```


Summary: Use-of-uninitialized-value in BaseCryptStream::BaseCryptStream

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20200

```
Crash type: Use-of-uninitialized-value
Crash state:
BaseCryptStream::BaseCryptStream
DecryptStream::DecryptStream
Parser::getObj
```


Summary: Bad-cast to RDKit::Atom

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25547

```
Crash type: Bad-cast
Crash state:
Bad-cast to RDKit::Atom
```


Summary: Heap-buffer-overflow in le_to_u32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25533

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
le_to_u32
le_to_i32
bcf_dec_typed_int1_safe
```


Summary: Heap-use-after-free in zend_gc_delref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25526

```
Crash type: Heap-use-after-free READ 4
Crash state:
zend_gc_delref
i_zval_ptr_dtor
zval_ptr_dtor
```


Summary: Heap-buffer-overflow in int arrow::BitUtil::BitReader::GetBatch<short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21166

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
int arrow::BitUtil::BitReader::GetBatch<short>
int arrow::util::RleDecoder::GetBatch<short>
parquet::internal::TypedRecordReader<parquet::PhysicalType<
```


Summary: Heap-use-after-free in zend_assign_to_variable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25601

```
Crash type: Heap-use-after-free READ 1
Crash state:
zend_assign_to_variable
zend_std_write_property
ZEND_ASSIGN_OBJ_SPEC_CV_CONST_OP_DATA_VAR_HANDLER
```


Summary: UNKNOWN READ in OT::SBIXGlyph::copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20223

```
Crash type: UNKNOWN READ
Crash state:
OT::SBIXGlyph::copy
OT::SBIXStrike::subset
OT::sbix::add_strike
```


Summary: Heap-use-after-free in gc_mark_grey

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23350

```
Crash type: Heap-use-after-free READ 4
Crash state:
gc_mark_grey
gc_mark_roots
zend_gc_collect_cycles
```


Summary: Memcpy-param-overlap in zend_lex_tstring

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23547

```
Crash type: Memcpy-param-overlap
Crash state:
zend_lex_tstring
zendparse
zend_compile
```


Summary: UNKNOWN in get_ndpi_flow_info6

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20747

```
Crash type: UNKNOWN
Crash state:
get_ndpi_flow_info6
packet_processing
ndpi_workflow_process_packet
```


Summary: Heap-buffer-overflow in exif_process_IFD_in_MAKERNOTE

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19044

```
Crash type: Heap-buffer-overflow READ 9
Crash state:
exif_process_IFD_in_MAKERNOTE
exif_process_IFD_TAG
exif_process_IFD_in_TIFF
```


Summary: Heap-use-after-free in zend_gc_addref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25697

```
Crash type: Heap-use-after-free READ 4
Crash state:
zend_gc_addref
zend_generator_update_current
zend_generator_dtor_storage
```


Summary: Heap-buffer-overflow in concat_hash_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21257

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
concat_hash_string
ndpi_search_ssh_tcp
search_ssh_again
```


Summary: Heap-buffer-overflow in cli_codepage_to_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23499

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
cli_codepage_to_utf8
cli_vba_readdir_new
cli_vba_scandir_new
```


Summary: Use-of-uninitialized-value in zend_generator_search_multi_children_node

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25678

```
Crash type: Use-of-uninitialized-value
Crash state:
zend_generator_search_multi_children_node
zend_generator_add_child
zend_generator_yield_from
```


Summary: Heap-buffer-overflow in get16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20832

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
get16
search_valid_dns
ndpi_search_dns
```


Summary: Heap-buffer-overflow in text_normalize_buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20464

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
text_normalize_buffer
arj_read_file_header
cli_scanarj
```


Summary: Heap-buffer-overflow in ndpi_search_openvpn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22244

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
ndpi_search_openvpn
check_ndpi_udp_flow_func
ndpi_detection_process_packet
```


Summary: Heap-buffer-overflow in parquet::PlainByteArrayDecoder::DecodeArrowDense

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21009

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
parquet::PlainByteArrayDecoder::DecodeArrowDense
parquet::PlainByteArrayDecoder::DecodeArrow
parquet::internal::ByteArrayChunkedRecordReader::ReadValuesSpaced
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21960

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
cli_codepage_to_utf8
cli_vba_readdir_new
cli_vba_scandir_new
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22211

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
text_normalize_buffer
arj_read_main_header
cli_unarj_open
```


Summary: Stack-buffer-overflow in rijndaelSetupEncrypt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21329

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
rijndaelSetupEncrypt
rijndaelSetupDecrypt
aes_decrypt
```


Summary: UNKNOWN READ in __libcpp_memchr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25711

```
Crash type: UNKNOWN READ
Crash state:
__libcpp_memchr
memchr
pcpp::cross_platform_memmem
```


Summary: UNKNOWN WRITE in Imf_2_5::copyIntoFrameBuffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25770

```
Crash type: UNKNOWN WRITE
Crash state:
Imf_2_5::copyIntoFrameBuffer
Imf_2_5::LineBufferTask::execute
IlmThread_2_5::NullThreadPoolProvider::addTask
```


Summary: Heap-buffer-overflow in get_ndpi_flow_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20162

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
get_ndpi_flow_info
packet_processing
ndpi_workflow_process_packet
```


Summary: Heap-buffer-overflow in flb_msgpack_to_gelf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25780

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
flb_msgpack_to_gelf
flb_msgpack_raw_to_gelf
msgpack_to_gelf_fuzzer.c
```


Summary: Heap-buffer-overflow in encoded_to_buf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25785

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
encoded_to_buf
flb_utils_write_str
msgpack2json
```


Summary: Heap-buffer-overflow in void cv::copyToMat<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25779

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
void cv::copyToMat<int>
cv::decodeSRGBData
cv::Jpeg2KOpjDecoder::readData
```


Summary: Heap-buffer-overflow in hb_array_t<OT::IntType<unsigned char, 1u> const> hb_array_t<OT::IntType<unsigned

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20249

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
hb_array_t<OT::IntType<unsigned char, 1u> const> hb_array_t<OT::IntType<unsigned
OT::UnsizedArrayOf<OT::IntType<unsigned char, 1u> >::copy
OT::SBIXGlyph::copy
```


Summary: Stack-buffer-overflow in hermes::regex::Parser<hermes::regex::Regex<hermes::regex::UTF16RegexTraits>, cha

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25815

```
Crash type: Stack-buffer-overflow READ 2
Crash state:
hermes::regex::Parser<hermes::regex::Regex<hermes::regex::UTF16RegexTraits>, cha
hermes::regex::Parser<hermes::regex::Regex<hermes::regex::UTF16RegexTraits>, cha
hermes::regex::Parser<hermes::regex::Regex<hermes::regex::UTF16RegexTraits>, cha
```


Summary: Heap-buffer-overflow in http_process_user_agent

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25845

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
http_process_user_agent
process_chlo
ndpi_search_quic
```


Summary: Global-buffer-overflow in hb_array_t<OT::IntType<unsigned char, 1u> const> hb_array_t<OT::IntType<unsigned

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20321

```
Crash type: Global-buffer-overflow READ 1
Crash state:
hb_array_t<OT::IntType<unsigned char, 1u> const> hb_array_t<OT::IntType<unsigned
OT::UnsizedArrayOf<OT::IntType<unsigned char, 1u> >::copy
OT::SBIXGlyph::copy
```


Summary: Heap-buffer-overflow in avifROStreamRead

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25903

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
avifROStreamRead
avifROStreamReadU32
avifROStreamReadBoxHeader
```


Summary: Stack-buffer-overflow in onigenc_unicode_get_case_fold_codes_by_str

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25893

```
Crash type: Stack-buffer-overflow WRITE 4
Crash state:
onigenc_unicode_get_case_fold_codes_by_str
utf16be_get_case_fold_codes_by_str
unravel_case_fold_string
```


Summary: Stack-buffer-overflow in fmt::v7::detail::buffer<char>::push_back

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25884

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
fmt::v7::detail::buffer<char>::push_back
std::__1::back_insert_iterator<fmt::v7::detail::buffer<char> >::operator=
fmt::v7::detail::buffer_appender<char> std::__1::__copy_constexpr<char const*, f
```


Summary: Heap-buffer-overflow in hextoint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25885

```
Crash type: Heap-buffer-overflow READ 7
Crash state:
hextoint
get_name_from_EF_DatiPersonali
itacns_add_data_files
```


Summary: UNKNOWN READ in flb_sds_cat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25904

```
Crash type: UNKNOWN READ
Crash state:
flb_sds_cat
flb_msgpack_gelf_key
flb_msgpack_gelf_flatten
```


Summary: Heap-buffer-overflow in file_strncmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23044

```
Crash type: Heap-buffer-overflow READ 13
Crash state:
file_strncmp
magiccheck
match
```


Summary: Heap-use-after-free in avifFileTypeIsCompatible

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25910

```
Crash type: Heap-use-after-free READ 4
Crash state:
avifFileTypeIsCompatible
avifDecoderParse
avif_decode_fuzzer.cc
```


Summary: UNKNOWN READ in avifRWDataSet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25911

```
Crash type: UNKNOWN READ
Crash state:
avifRWDataSet
avifParseItemDataBox
avifParseMetaBox
```


Summary: Heap-buffer-overflow in parquet::arrow::SchemaManifest::Make

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25933

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
parquet::arrow::SchemaManifest::Make
parquet::arrow::FileReader::Make
parquet::arrow::internal::FuzzReader
```


Summary: Heap-buffer-overflow in SendUserAuthPkOk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25926

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
SendUserAuthPkOk
DoUserAuthRequestPublicKey
DoUserAuthRequest
```


Summary: Heap-buffer-overflow in hextoint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25935

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
hextoint
get_name_from_EF_DatiPersonali
itacns_add_data_files
```


Summary: Heap-buffer-overflow in WelsDec::NeedErrorCon

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25921

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
WelsDec::NeedErrorCon
WelsDec::CheckAndFinishLastPic
WelsDecodeBs
```


Summary: Heap-buffer-overflow in sc_oberthur_parse_publicinfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25943

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
sc_oberthur_parse_publicinfo
sc_pkcs15emu_oberthur_init
sc_pkcs15emu_oberthur_init_ex
```


Summary: Use-of-uninitialized-value in RDKit::SubstanceGroup::getBondType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25906

```
Crash type: Use-of-uninitialized-value
Crash state:
RDKit::SubstanceGroup::getBondType
RDKit::SubstanceGroup::addCState
RDKit::SGroupParsing::ParseSGroupV2000SBVLine
```


Summary: Heap-buffer-overflow in ndpi_search_kerberos

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22419

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_search_kerberos
check_ndpi_udp_flow_func
ndpi_check_flow_func
```


Summary: Heap-buffer-overflow in fmt::v6::basic_string_view<char>::basic_string_view

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21763

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
fmt::v6::basic_string_view<char>::basic_string_view
fmt::v6::basic_format_arg<fmt::v6::basic_format_context<std::__1::back_insert_it
fmt::v6::basic_format_context<std::__1::back_insert_iterator<fmt::v6::internal::
```


Summary: Stack-buffer-underflow in fmt::v6::basic_format_args<fmt::v6::basic_format_context<std::__1::back_insert_i

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21794

```
Crash type: Stack-buffer-underflow READ 16
Crash state:
fmt::v6::basic_format_args<fmt::v6::basic_format_context<std::__1::back_insert_i
fmt::v6::basic_format_args<fmt::v6::basic_format_context<std::__1::back_insert_i
fmt::v6::basic_format_context<std::__1::back_insert_iterator<fmt::v6::internal::
```


Summary: UNKNOWN READ in WelsCommon::WelsFree

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25939

```
Crash type: UNKNOWN READ
Crash state:
WelsCommon::WelsFree
WelsCommon::CMemoryAlign::WelsFree
WelsDec::FreePicture
```


Summary: Heap-buffer-overflow in WelsDec::DoErrorConSliceCopy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25932

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
WelsDec::DoErrorConSliceCopy
WelsDec::ImplementErrorCon
WelsDec::CheckAndFinishLastPic
```


Summary: Use-of-uninitialized-value in UpdateDecStatNoFreezingInfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25970

```
Crash type: Use-of-uninitialized-value
Crash state:
UpdateDecStatNoFreezingInfo
UpdateDecStat
WelsDec::DecodeFrameConstruction
```


Summary: Heap-buffer-overflow in WelsDec::UpdateP16x16MotionInfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25961

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
WelsDec::UpdateP16x16MotionInfo
WelsDec::ParseInterPMotionInfoCabac
WelsDec::WelsDecodeMbCabacPSliceBaseMode0
```


Summary: Heap-buffer-overflow in WelsDec::WelsDecodeMbCabacPSlice

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25973

```
Crash type: Heap-buffer-overflow WRITE 16
Crash state:
WelsDec::WelsDecodeMbCabacPSlice
WelsDec::WelsDecodeSlice
WelsDec::DecodeCurrentAccessUnit
```


Summary: Stack-buffer-overflow in sc_get_response

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25998

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
sc_get_response
sc_transmit
sc_transmit_apdu
```


Summary: Use-of-uninitialized-value in ares_parse_caa_reply

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26012

```
Crash type: Use-of-uninitialized-value
Crash state:
ares_parse_caa_reply
ares-test-fuzz.c
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26013

```
Crash type: Bad-cast
Crash state:
Bad-cast to pcpp::Layer from invalid vptr
pcpp::IDnsResource::getRawData
pcpp::DnsResource::getDataLength
```


Summary: Use-of-uninitialized-value in gs_scan_token

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21625

```
Crash type: Use-of-uninitialized-value
Crash state:
gs_scan_token
tokenexec_continue
interp
```


Summary: UNKNOWN READ in arrow::ipc::MessageDecoder::MessageDecoderImpl::ConsumeDataBufferInt32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21680

```
Crash type: UNKNOWN READ
Crash state:
arrow::ipc::MessageDecoder::MessageDecoderImpl::ConsumeDataBufferInt32
arrow::ipc::MessageDecoder::MessageDecoderImpl::ConsumeInitialBuffer
arrow::ipc::MessageDecoder::MessageDecoderImpl::ConsumeBuffer
```


Summary: Use-of-uninitialized-value in get_fapi_glyph_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22752

```
Crash type: Use-of-uninitialized-value
Crash state:
get_fapi_glyph_data
load_truetype_glyph
TT_Load_Glyph
```


Summary: Segv on unknown address in s_DCTD_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21416

```
Crash type: Segv on unknown address
Crash state:
s_DCTD_process
sreadbuf
s_process_read_buf
```


Summary: Use-of-uninitialized-value in s_exD_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21643

```
Crash type: Use-of-uninitialized-value
Crash state:
s_exD_process
sreadbuf
sgets
```


Summary: Use-of-uninitialized-value in zcheck_r6_password

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23440

```
Crash type: Use-of-uninitialized-value
Crash state:
zcheck_r6_password
interp
gs_call_interp
```


Summary: Use-of-uninitialized-value in load_truetype_glyph

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22182

```
Crash type: Use-of-uninitialized-value
Crash state:
load_truetype_glyph
TT_Load_Glyph
tt_glyph_load
```


Summary: Heap-use-after-free in dict_find_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20652

```
Crash type: Heap-use-after-free READ 8
Crash state:
dict_find_string
gs_main_tempnames
gs_main_finit
```


Summary: UNKNOWN READ in mem_mapped4_fill_rectangle

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22007

```
Crash type: UNKNOWN READ
Crash state:
mem_mapped4_fill_rectangle
gx_dc_pure_fill_rectangle
gx_default_fillpage
```


Summary: Use-of-uninitialized-value in FAPI_FF_get_glyph

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23115

```
Crash type: Use-of-uninitialized-value
Crash state:
FAPI_FF_get_glyph
get_fapi_glyph_data
load_truetype_glyph
```


Summary: Use-of-uninitialized-value in s_A85D_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21616

```
Crash type: Use-of-uninitialized-value
Crash state:
s_A85D_process
gs_scan_token
interp
```


Summary: Use-of-uninitialized-value in gp_pwrite_impl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21621

```
Crash type: Use-of-uninitialized-value
Crash state:
gp_pwrite_impl
clist_fwrite_chars
cmd_write_band
```


Summary: Heap-buffer-overflow in BEInt<short, 2>::operator short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20924

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
BEInt<short, 2>::operator short
OT::IntType<short, 2u>::operator int
OT::TupleVarHeader::calculate_scalar
```


Summary: Use-of-uninitialized-value in c_pdf14trans_clist_read_update

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21640

```
Crash type: Use-of-uninitialized-value
Crash state:
c_pdf14trans_clist_read_update
apply_create_compositor
execute_compositor_queue
```


Summary: Use-of-uninitialized-value in gx_dc_ht_colored_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21617

```
Crash type: Use-of-uninitialized-value
Crash state:
gx_dc_ht_colored_read
clist_playback_band
clist_playback_file_bands
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22225

```
Crash type: Use-of-uninitialized-value
Crash state:
s_exD_process
sreadbuf
s_process_read_buf
```


Summary: Segv on unknown address in process_ndpi_collected_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26015

```
Crash type: Segv on unknown address
Crash state:
process_ndpi_collected_info
packet_processing
ndpi_workflow_process_packet
```


Summary: Heap-use-after-free in xmlStaticCopyNode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26022

```
Crash type: Heap-use-after-free READ 4
Crash state:
xmlStaticCopyNode
xmlCopyNode
xmlXIncludeLoadTxt
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21622

```
Crash type: Use-of-uninitialized-value
Crash state:
gs_scan_token
interp
gs_call_interp
```


Summary: Heap-buffer-overflow in zmq::tcp_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26042

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
zmq::tcp_read
zmq::stream_engine_base_t::read
zmq::stream_engine_base_t::in_event_internal
```


Summary: Stack-buffer-overflow in tvb_get_ipv4_addr_with_prefix_len

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21718

```
Crash type: Stack-buffer-overflow READ 4
Crash state:
tvb_get_ipv4_addr_with_prefix_len
dissect_lsp_ext_ip_reachability_clv
isis_dissect_clvs
```


Summary: Use-of-uninitialized-value in stbi__expand_png_palette

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23234

```
Crash type: Use-of-uninitialized-value
Crash state:
stbi__expand_png_palette
stbi__parse_png_file
stbi__do_png
```


Summary: Heap-buffer-overflow in parquet::arrow::ApplyOriginalStorageMetadata

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26064

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
parquet::arrow::ApplyOriginalStorageMetadata
parquet::arrow::SchemaManifest::Make
parquet::arrow::FileReader::Make
```


Summary: Heap-buffer-overflow in stbi__tga_load

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22651

```
Crash type: Heap-buffer-overflow READ 3
Crash state:
stbi__tga_load
stbi__load_main
stbi__load_and_postprocess_8bit
```


Summary: Heap-buffer-overflow in WelsDec::UpdateP16x16RefIdx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26078

```
Crash type: Heap-buffer-overflow WRITE 2
Crash state:
WelsDec::UpdateP16x16RefIdx
WelsDec::PredBDirectTemporal
WelsDec::ParseInterBInfo
```


Summary: Heap-buffer-overflow in DeblockChromaLt42_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26068

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
DeblockChromaLt42_c
DeblockChromaLt4H2_c
WelsDec::FilteringEdgeChromaHV
```


Summary: Heap-use-after-free in htp_connp_is_line_terminator

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21712

```
Crash type: Heap-use-after-free READ 1
Crash state:
htp_connp_is_line_terminator
htp_connp_REQ_HEADERS
htp_connp_req_data
```


Summary: Use-of-uninitialized-value in file_vprintf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20729

```
Crash type: Use-of-uninitialized-value
Crash state:
file_vprintf
file_printf
file_buffer
```


Summary: Heap-buffer-overflow in asn1_get_next

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15408

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
asn1_get_next
x509_parse_ext_basic_constraints
x509_parse_extension
```


Summary: Heap-buffer-overflow in do_print_ex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13914

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
do_print_ex
asn1_item_print_ctx
ASN1_item_print
```


Summary: UNKNOWN READ in net_field_length_size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19830

```
Crash type: UNKNOWN READ
Crash state:
net_field_length_size
net_field_length_ll_safe
read_ok_ex
```


Summary: Heap-buffer-overflow in check_ymsg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20856

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
check_ymsg
ndpi_search_yahoo_tcp
ndpi_search_yahoo
```


Summary: UNKNOWN READ in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20038

```
Crash type: UNKNOWN READ
Crash state:
helper_uc_tracecode
```


Summary: Heap-buffer-overflow in x509_parse_ext_basic_constraints

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15451

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
x509_parse_ext_basic_constraints
x509_parse_extension
x509_parse_extensions
```


Summary: Heap-use-after-free in Pe64_r_bin_pe_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21630

```
Crash type: Heap-use-after-free READ 8
Crash state:
Pe64_r_bin_pe_free
r_bin_file_free
r_list_delete
```


Summary: UNKNOWN READ in asn1_item_print_ctx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13920

```
Crash type: UNKNOWN READ
Crash state:
asn1_item_print_ctx
asn1_template_print_ctx
asn1_item_print_ctx
```


Summary: Heap-buffer-overflow in jbig2_image_get_pixels_fast

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20358

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
jbig2_image_get_pixels_fast
jbig2_decode_generic_template0_TPGDON
jbig2_immediate_generic_region
```


Summary: Use-of-uninitialized-value in FLAC::Decoder::FuzzerStream::write_callback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16503

```
Crash type: Use-of-uninitialized-value
Crash state:
FLAC::Decoder::FuzzerStream::write_callback
write_audio_frame_to_client_
read_frame_
```


Summary: Stack-buffer-overflow in fuzz_reader_transmit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26103

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
fuzz_reader_transmit
sc_single_transmit
sc_transmit
```


Summary: Heap-buffer-overflow in sc_oberthur_parse_privateinfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26116

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
sc_oberthur_parse_privateinfo
sc_pkcs15emu_oberthur_init
sc_pkcs15emu_oberthur_init_ex
```


Summary: Index-out-of-bounds in fp_read_radix_16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26163

```
Crash type: Index-out-of-bounds
Crash state:
fp_read_radix_16
fp_read_radix
mp_read_radix
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26196

```
Crash type: Bad-cast
Crash state:
Bad-cast to pcpp::IDnsResource from invalid vptr
pcpp::DnsLayer::parseResources
pcpp::DnsLayer::DnsLayer
```


Summary: Heap-buffer-overflow in spng_decode_scanline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22595

```
Crash type: Heap-buffer-overflow WRITE 2
Crash state:
spng_decode_scanline
spng_decode_row
spng_decode_image
```


Summary: Heap-buffer-overflow in sctp_process_init

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26197

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
sctp_process_init
sctp_process_cookie_existing
sctp_handle_cookie_echo
```


Summary: Heap-buffer-overflow in McChromaWithFragMv_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26198

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
McChromaWithFragMv_c
McChroma_ssse3
WelsDec::BaseMC
```


Summary: Heap-buffer-overflow in WelsDec::WelsCheckAndRecoverForFutureDecoding

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26220

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
WelsDec::WelsCheckAndRecoverForFutureDecoding
WelsDec::WelsInitBSliceRefList
WelsDec::InitRefPicList
```


Summary: UNKNOWN WRITE in wolfCrypt_custom_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26214

```
Crash type: UNKNOWN WRITE
Crash state:
wolfCrypt_custom_free
wolfSSL_Free
GetDhPublicKey
```


Summary: Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22453

```
Crash type: Use-of-uninitialized-value
Crash state:
fuzzing::memory::memory_test_msan
cryptofuzz::ExecutorBase<cryptofuzz::Buffer, cryptofuzz::operation::CMAC>::postp
cryptofuzz::ExecutorBase<cryptofuzz::Buffer, cryptofuzz::operation::CMAC>::Run
```


Summary: Stack-buffer-overflow in flb_sds_cat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26237

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
flb_sds_cat
flb_msgpack_gelf_value
flb_msgpack_to_gelf
```


Summary: Heap-buffer-overflow in flb_msgpack_to_json

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26248

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
flb_msgpack_to_json
flb_msgpack_raw_to_json_sds
msgpack_parse_fuzzer.c
```


Summary: Heap-use-after-free in fpixChangeRefcount

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26260

```
Crash type: Heap-use-after-free READ 4
Crash state:
fpixChangeRefcount
fpixDestroy
fpix2_fuzzer.cc
```


Summary: Heap-buffer-overflow in pixFindHorizontalRuns

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26268

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
pixFindHorizontalRuns
pixFillPolygon
graphics_fuzzer.cc
```


Summary: Negative-size-param in parquet::ColumnReaderImplBase<parquet::PhysicalType<

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20698

```
Crash type: Negative-size-param
Crash state:
parquet::ColumnReaderImplBase<parquet::PhysicalType<
parquet::internal::TypedRecordReader<parquet::PhysicalType<
parquet::arrow::LeafReader::NextBatch
```


Summary: UNKNOWN WRITE in pb_release_single_field

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22329

```
Crash type: UNKNOWN WRITE
Crash state:
pb_release_single_field
pb_release
pb_decode
```


Summary: Use-of-uninitialized-value in WelsDec::GetColocatedMb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26272

```
Crash type: Use-of-uninitialized-value
Crash state:
WelsDec::GetColocatedMb
WelsDec::PredBDirectTemporal
WelsDec::WelsDecodeMbCavlcBSlice
```


Summary: Heap-use-after-free in destroy_op_array

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24567

```
Crash type: Heap-use-after-free READ 4
Crash state:
destroy_op_array
fuzzer_do_request
fuzzer_do_request_from_buffer
```


Summary: Heap-buffer-overflow in fp_to_unsigned_bin_at_pos

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26295

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
fp_to_unsigned_bin_at_pos
fp_to_unsigned_bin
mp_to_unsigned_bin
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26301

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
WelsDec::WelsCheckAndRecoverForFutureDecoding
WelsDec::WelsInitRefList
WelsDec::InitRefPicList
```


Summary: Heap-buffer-overflow in WelsDec::WelsDecodeMbCabacISliceBaseMode0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26303

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
WelsDec::WelsDecodeMbCabacISliceBaseMode0
WelsDec::WelsDecodeMbCabacISlice
WelsDec::WelsDecodeSlice
```


Summary: Heap-buffer-overflow in WelsDec::WelsDecodeMbCavlcBSlice

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26296

```
Crash type: Heap-buffer-overflow WRITE 16
Crash state:
WelsDec::WelsDecodeMbCavlcBSlice
WelsDec::WelsDecodeSlice
WelsDec::DecodeCurrentAccessUnit
```


Summary: Heap-buffer-overflow in WelsDec::DoErrorConSliceCopy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26285

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
WelsDec::DoErrorConSliceCopy
WelsDec::ImplementErrorCon
WelsDec::CheckAndFinishLastPic
```


Summary: Use-of-uninitialized-value in WelsDec::NeedErrorCon

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26291

```
Crash type: Use-of-uninitialized-value
Crash state:
WelsDec::NeedErrorCon
WelsDec::CheckAndFinishLastPic
WelsDecodeBs
```


Summary: Heap-buffer-overflow in encoded_to_buf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26304

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
encoded_to_buf
flb_utils_write_str
msgpack2json
```


Summary: Heap-buffer-overflow in WelsDec::DecodeCurrentAccessUnit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26302

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
WelsDec::DecodeCurrentAccessUnit
WelsDec::ConstructAccessUnit
WelsDecodeBs
```


Summary: Heap-buffer-overflow in WelsDec::Update8x8RefIdx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26328

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
WelsDec::Update8x8RefIdx
WelsDec::ParseInterBMotionInfoCabac
WelsDec::WelsDecodeMbCabacBSliceBaseMode0
```


Summary: Heap-buffer-overflow in pcpp::IPv6Layer::parseExtensions

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22232

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pcpp::IPv6Layer::parseExtensions
pcpp::IPv6Layer::IPv6Layer
pcpp::Packet::createFirstLayer
```


Summary: Heap-buffer-overflow in wolfSSH_accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26332

```
Crash type: Heap-buffer-overflow READ 5
Crash state:
wolfSSH_accept
server.c
```


Summary: Heap-buffer-overflow in flb_log_print

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26325

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
flb_log_print
flb_parser_typecast
logfmt_parser
```


Summary: Heap-buffer-overflow in _conv_num

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26327

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
_conv_num
_flb_strptime
flb_strptime
```


Summary: UNKNOWN READ in WelsDec::WelsMarkAsRef

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26356

```
Crash type: UNKNOWN READ
Crash state:
WelsDec::WelsMarkAsRef
WelsDec::MarkECFrameAsRef
WelsDec::CheckAndFinishLastPic
```


Summary: Heap-use-after-free in flb_parser_decoder_list_destroy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26345

```
Crash type: Heap-use-after-free READ 8
Crash state:
flb_parser_decoder_list_destroy
parser_fuzzer.c
flb_free
```


Summary: Use-of-uninitialized-value in UpdateDecStatNoFreezingInfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26346

```
Crash type: Use-of-uninitialized-value
Crash state:
UpdateDecStatNoFreezingInfo
UpdateDecStat
WelsDec::DecodeFrameConstruction
```


Summary: Heap-buffer-overflow in WelsDec::UpdateP16x16RefIdx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26389

```
Crash type: Heap-buffer-overflow WRITE 2
Crash state:
WelsDec::UpdateP16x16RefIdx
WelsDec::PredBDirectTemporal
WelsDec::ParseInterBInfo
```


Summary: Use-of-uninitialized-value in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22235

```
Crash type: Use-of-uninitialized-value
Crash state:
std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
pcpp::IDnsResource::IDnsResource
```


Summary: Heap-buffer-overflow in coap_opt_length

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26371

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
coap_opt_length
coap_pdu_parse_opt
coap_pdu_parse
```


Summary: UNKNOWN READ in presym_sym2name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26400

```
Crash type: UNKNOWN READ
Crash state:
presym_sym2name
sym2name_len
mrb_sym_name_len
```


Summary: Heap-buffer-overflow in clean_path

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26424

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
clean_path
ParseScpCommand
DoScpRequest
```


Summary: UNKNOWN READ in WelsCommon::WelsMalloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26420

```
Crash type: UNKNOWN READ
Crash state:
WelsCommon::WelsMalloc
WelsCommon::CMemoryAlign::WelsMalloc
WelsCommon::CMemoryAlign::WelsMallocz
```


Summary: UNKNOWN READ in decoder_fuzzer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26428

```
Crash type: UNKNOWN READ
Crash state:
decoder_fuzzer
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26457

```
Crash type: Bad-cast
Crash state:
Bad-cast to QPaintDevice from invalid vptr
QImage::operator=
XCFImageFormat::readXCF
```


Summary: Heap-buffer-overflow in blosc_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26442

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
blosc_c
do_job
blosc_compress_context
```


Summary: Stack-buffer-overflow in coolkey_rsa_op

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22392

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
coolkey_rsa_op
coolkey_compute_crypt
sc_decipher
```


Summary: UNKNOWN READ in WelsDec::WelsMarkAsRef

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26533

```
Crash type: UNKNOWN READ
Crash state:
WelsDec::WelsMarkAsRef
WelsDec::MarkECFrameAsRef
WelsDec::CheckAndFinishLastPic
```


Summary: Heap-buffer-overflow in RsaPad_PSS

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26567

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
RsaPad_PSS
wc_RsaPad_ex
RsaPublicEncryptEx
```


Summary: Heap-buffer-overflow in ExpandPictureChroma_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26570

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
ExpandPictureChroma_c
ExpandReferencingPicture
WelsDec::WelsCheckAndRecoverForFutureDecoding
```


Summary: Heap-buffer-overflow in flb_utils_time_to_seconds

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26593

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
flb_utils_time_to_seconds
utils_fuzzer.c
```


Summary: Use-of-uninitialized-value in WelsCommon::CMemoryAlign::~CMemoryAlign

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26612

```
Crash type: Use-of-uninitialized-value
Crash state:
WelsCommon::CMemoryAlign::~CMemoryAlign
WelsCommon::CMemoryAlign::~CMemoryAlign
WelsDec::CWelsDecoder::UninitDecoderCtx
```


Summary: Use-of-uninitialized-value in std::__1::__function::__func<LLVMFuzzerTestOneInput::$_0, std::__1::allocator<LL

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26617

```
Crash type: Use-of-uninitialized-value
Crash state:
std::__1::__function::__func<LLVMFuzzerTestOneInput::$_0, std::__1::allocator<LL
functional
std::__1::__function::__func<LLVMFuzzerTestOneInput::$_0, std::__1::allocator<LL
```


Summary: Heap-buffer-overflow in decode_chars

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26674

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
decode_chars
decode_font
process_text
```


Summary: UNKNOWN WRITE in arrow::internal::unpack32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20711

```
Crash type: UNKNOWN WRITE
Crash state:
arrow::internal::unpack32
int arrow::BitUtil::BitReader::GetBatch<int>
parquet::DictByteArrayDecoderImpl::DecodeArrowDense
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26669

```
Crash type: Bad-cast
Crash state:
Bad-cast to pcpp::IDnsResource from invalid vptr
pcpp::DnsLayer::parseResources
pcpp::DnsLayer::DnsLayer
```