Summary: Stack-buffer-overflow in check_user_password_preR5

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44983

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
check_user_password_preR5
pdfi_initialise_Decryption
pdfi_set_input_stream
```


Summary: Heap-buffer-overflow in ndpi_workflow_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45036

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ndpi_workflow_process_packet
fuzz_ndpi_reader.c
```


Summary: Heap-buffer-overflow in spgetcc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45049

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
spgetcc
gs_scan_token
gs_interpret
```


Summary: Heap-buffer-overflow in dotnet_parse_tilde_2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45161

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
dotnet_parse_tilde_2
dotnet_parse_tilde
dotnet_parse_com
```


Summary: Heap-buffer-overflow in Assimp::IOSystem2Unzip::opendisk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43414

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Assimp::IOSystem2Unzip::opendisk
call_zopendisk64
unzOpenCurrentFile3
```


Summary: UNKNOWN READ in pdfi_count_cff_index

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45173

```
Crash type: UNKNOWN READ
Crash state:
pdfi_count_cff_index
pdfi_read_cff_font
pdfi_load_font
```


Summary: Stack-buffer-overflow in msgpack_sbuffer_write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45208

Crash type: Stack-buffer-overflow READ {*}
Crash state:
msgpack_sbuffer_write
flb_pack_msgpack_to_json_format
flb_json_fuzzer.c


Summary: UNKNOWN READ in pdfi_read_cff_font

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45222

```
Crash type: UNKNOWN READ
Crash state:
pdfi_read_cff_font
pdfi_load_font
pdfi_read_type0_font
```


Summary: Stack-buffer-overflow in load_regex_matcher

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45247

```
Crash type: Stack-buffer-overflow WRITE 1
Crash state:
load_regex_matcher
cli_loadpdb
cli_load
```


Summary: Heap-use-after-free in cb_stdout_flush

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45251

```
Crash type: Heap-use-after-free READ {*}
Crash state:
cb_stdout_flush
output_pre_cb_flush
flb-it-fuzz-filter_stdout_fuzzer_OSSFUZZ
```


Summary: Container-overflow in Exiv2::Photoshop::locateIrb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45302

```
Crash type: Container-overflow READ 4
Crash state:
Exiv2::Photoshop::locateIrb
Exiv2::Photoshop::setIptcIrb
Exiv2::JpegBase::doWriteMetadata
```


Summary: Heap-buffer-overflow in vips_rect_intersectrect

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45353

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
vips_rect_intersectrect
vips_foreign_load_pdf_generate
vips_region_prepare_to_generate
```


Summary: UNKNOWN READ in spgetcc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45347

```
Crash type: UNKNOWN READ
Crash state:
spgetcc
pdfi_read_byte
pdfi_read_token
```


Summary: Heap-buffer-overflow in do_fileid

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45430

```
Crash type: Heap-buffer-overflow WRITE 2
Crash state:
do_fileid
process_command
process_block
```


Summary: UNKNOWN READ in pdfi_fapi_get_glyph

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45439

```
Crash type: UNKNOWN READ
Crash state:
pdfi_fapi_get_glyph
get_fapi_glyph_data
cff_slot_load
```


Summary: Heap-buffer-overflow in zend_gc_collect_cycles

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45369

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
zend_gc_collect_cycles
fuzzer_request_shutdown
fuzzer_do_request_from_buffer
```


Summary: Stack-buffer-overflow in sc_format_oid

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45459

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
sc_format_oid
do_store_data_object
fuzz_pkcs15init.c
```


Summary: Segv on unknown address in i_zval_ptr_dtor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45429

```
Crash type: Segv on unknown address
Crash state:
i_zval_ptr_dtor
zend_leave_helper_SPEC
zend_dispatch_try_catch_finally_helper_SPEC
```


Summary: Null-dereference READ in session_startup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43419

```
Crash type: Null-dereference READ
Crash state:
session_startup
libssh2_session_handshake
ssh2_client_fuzzer.cc
```


Summary: UNKNOWN READ in write_cond_nodes_to_conf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45523

```
Crash type: UNKNOWN READ
Crash state:
write_cond_nodes_to_conf
sepol_kernel_policydb_to_conf
binpolicy-fuzzer.c
```


Summary: Heap-buffer-overflow in grk::PacketIter::next_pcrl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45537

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
grk::PacketIter::next_pcrl
grk::T2Decompress::decompressPackets
grk::TileProcessor::decompressT2
```


Summary: Heap-buffer-overflow in process_ef

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45552

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
process_ef
process_block
process_df
```


Summary: Heap-buffer-overflow in grk::PacketIter::genPrecinctInfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45548

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
grk::PacketIter::genPrecinctInfo
grk::PacketManager::PacketManager
grk::T2Decompress::decompressPackets
```


Summary: Uncaught exception in java.base/java.nio.Bits.reserveMemory

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45563

```
Crash type: Uncaught exception
Crash state:
java.base/java.nio.Bits.reserveMemory
java.base/java.nio.DirectByteBuffer.<init>
java.base/java.nio.ByteBuffer.allocateDirect
```


Summary: Heap-buffer-overflow in __covrec_1D46B478ANUMBER

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45603

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
__covrec_1D46B478ANUMBER
__covrec_F49D057CNUMBER
__covrec_5D82FD3F85773DBDu
```


Summary: Heap-buffer-overflow in grk::PacketLengthMarkers::readPLM

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45622

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
grk::PacketLengthMarkers::readPLM
grk::CodeStreamDecompress::process_marker
grk::CodeStreamDecompress::readHeaderProcedureImpl
```


Summary: Heap-use-after-free in jsmn_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45651

```
Crash type: Heap-use-after-free WRITE 4
Crash state:
jsmn_parse
flb_json_tokenise
flb_pack_json_state
```


Summary: Heap-double-free in flb_pack_state_reset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45667

```
Crash type: Heap-double-free
Crash state:
flb_pack_state_reset
pack_json_state_fuzzer.c
flb_pack_state_init
```


Summary: Segv on unknown address in flb_config_map_properties_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45670

```
Crash type: Segv on unknown address
Crash state:
flb_config_map_properties_check
config_map_fuzzer.c
```


Summary: Heap-double-free in Imf_3_1::RgbaInputFile::~RgbaInputFile

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45718

```
Crash type: Heap-double-free
Crash state:
Imf_3_1::RgbaInputFile::~RgbaInputFile
Imf_3_1::checkOpenEXRFile
openexr_exrcheck_fuzzer.cc
```


Summary: Heap-double-free in read_config

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45671

```
Crash type: Heap-double-free
Crash state:
read_config
read_glob
read_config
```


Summary: Heap-double-free in read_config

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45687

```
Crash type: Heap-double-free
Crash state:
read_config
flb_cf_fluentbit_create
flb_cf_create_from_file
```


Summary: Segv on unknown address in flb_ra_create

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45659

```
Crash type: Segv on unknown address
Crash state:
flb_ra_create
record_ac_fuzzer.c
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45810

```
Crash type: Heap-double-free
Crash state:
flb_pack_state_reset
in_lib_collect
flb_input_collector_fd
```


Summary: Heap-buffer-overflow in jxl::N_AVX2::BlendingStage::ProcessRow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45822

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
jxl::N_AVX2::BlendingStage::ProcessRow
jxl::LowMemoryRenderPipeline::RenderRect
jxl::LowMemoryRenderPipeline::ProcessBuffers
```


Summary: Heap-buffer-overflow in jxl::WriteToPixelCallbackStage::ProcessRow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45833

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
jxl::WriteToPixelCallbackStage::ProcessRow
jxl::LowMemoryRenderPipeline::RenderRect
jxl::LowMemoryRenderPipeline::ProcessBuffers
```


Summary: Segv on unknown address in flb_sds_copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45879

```
Crash type: Segv on unknown address
Crash state:
flb_sds_copy
flb_parser_decoder_do
flb_parser_logfmt_do
```


Summary: Stack-use-after-return in template_sanity_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45880

```
Crash type: Stack-use-after-return READ 1
Crash state:
template_sanity_check
process_tmpl
process_block
```


Summary: Stack-buffer-overflow in fn_ElIn_evaluate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45886

```
Crash type: Stack-buffer-overflow WRITE 4
Crash state:
fn_ElIn_evaluate
pdfi_set_transfer
GS_TR
```


Summary: UNKNOWN READ in pdf14_buf_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45892

```
Crash type: UNKNOWN READ
Crash state:
pdf14_buf_free
rc_pdf14_maskbuf_free
pdf14_end_transparency_mask
```


Summary: Segv on unknown address in sc_file_clear_acl_entries

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45969

```
Crash type: Segv on unknown address
Crash state:
sc_file_clear_acl_entries
sc_file_free
sc_profile_free
```


Summary: UNKNOWN READ in s_RLE_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45992

```
Crash type: UNKNOWN READ
Crash state:
s_RLE_process
cmd_put_bits
clist_copy_mono
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45978

Crash type: Heap-double-free
Crash state:
flb_pack_state_reset
in_lib_collect
flb_input_collector_fd


Summary: Heap-buffer-overflow in Exiv2::getULong

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45993

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Exiv2::getULong
Exiv2::Internal::isValidBoxFileType
Exiv2::Jp2Image::readMetadata
```


Summary: Heap-use-after-free in jsmn_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45984

Crash type: Heap-use-after-free WRITE 4
Crash state:
jsmn_parse
flb_json_tokenise
flb_pack_json_state


Summary: Heap-buffer-overflow in cosm_new_file

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46002

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
cosm_new_file
epassNUMBER_pkcs15_generate_key
sc_pkcs15init_generate_key
```


Summary: Heap-buffer-overflow in epassNUMBER_hook_path

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46006

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
epassNUMBER_hook_path
epassNUMBER_hook_file
epassNUMBER_create_file
```


Summary: Heap-double-free in read_config

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46019

Crash type: Heap-double-free
Crash state:
read_config
read_glob
read_config


Summary: Segv on unknown address in flb_ra_translate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46082

Crash type: Segv on unknown address
Crash state:
flb_ra_translate
record_ac_fuzzer.c


Summary: Heap-buffer-overflow in add_compile_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46086

Crash type: Heap-buffer-overflow READ 4
Crash state:
add_compile_string
compile_tree
compile_tree


Summary: Use-of-uninitialized-value in unsigned long grk::N_SSE4::vscheduler<grk::N_SSE4::DecompressDcShiftIrrev>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46241

Crash type: Use-of-uninitialized-value
Crash state:
unsigned long grk::N_SSE4::vscheduler<grk::N_SSE4::DecompressDcShiftIrrev>
std::__1::__function::__func<unsigned long grk::N_SSE4::vscheduler<grk::N_SSE4::
tf::Executor::_invoke


Summary: Negative-size-param in jxl::N_SSE4::BlendingStage::ProcessPaddingRow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46243

```
Crash type: Negative-size-param
Crash state:
jxl::N_SSE4::BlendingStage::ProcessPaddingRow
jxl::LowMemoryRenderPipeline::RenderPadding
jxl::LowMemoryRenderPipeline::ProcessBuffers
```


Summary: Heap-use-after-free in read_data_compressed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46279

```
Crash type: Heap-use-after-free READ 4
Crash state:
read_data_compressed
archive_read_format_rar_read_data
_archive_read_data_block
```


Summary: UNKNOWN READ in pdfi_free_array

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43255

```
Crash type: UNKNOWN READ
Crash state:
pdfi_free_array
pdfi_free_object
pdfi_free_dict
```


Summary: Heap-buffer-overflow in template_compose_group

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46307

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
template_compose_group
compose_group_nonknockout_noblend_general
pdf14_compose_group
```


Summary: Heap-use-after-free in read_markers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46334

```
Crash type: Heap-use-after-free READ 4
Crash state:
read_markers
consume_markers
jpeg_consume_input
```


Summary: Heap-use-after-free in start_pass_phuff_decoder

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46338

```
Crash type: Heap-use-after-free WRITE 4
Crash state:
start_pass_phuff_decoder
start_input_pass
jinit_master_decompress
```


Summary: Heap-use-after-free in decode_mcu

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46335

```
Crash type: Heap-use-after-free WRITE 4
Crash state:
decode_mcu
consume_data
jpeg_start_decompress
```


Summary: Heap-buffer-overflow in jxl::N_AVX2::BlendingStage::ProcessPaddingRow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46304

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
jxl::N_AVX2::BlendingStage::ProcessPaddingRow
jxl::LowMemoryRenderPipeline::RenderPadding
jxl::LowMemoryRenderPipeline::ProcessBuffers
```


Summary: Heap-buffer-overflow in Imf_3_1::memstream_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46309

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
Imf_3_1::memstream_read
dispatch_read
extract_chunk_leader
```


Summary: Null-dereference READ in ubsan_GetStackTrace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46341

```
Crash type: Null-dereference READ
Crash state:
ubsan_GetStackTrace
```


Summary: UNKNOWN READ in decompress_smooth_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46349

```
Crash type: UNKNOWN READ
Crash state:
decompress_smooth_data
process_data_simple_main
jpeg_read_scanlines
```


Summary: Heap-use-after-free in jpeg_fill_bit_buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46343

```
Crash type: Heap-use-after-free WRITE 4
Crash state:
jpeg_fill_bit_buffer
jpeg_huff_decode
decode_mcu
```


Summary: Heap-use-after-free in decode_mcu

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46354

```
Crash type: Heap-use-after-free READ 4
Crash state:
decode_mcu
decompress_onepass
process_data_simple_main
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46416

Crash type: Heap-buffer-overflow READ 1
Crash state:
dhcp_reply
dhcp_packet
FuzzDhcp

Summary: Heap-buffer-overflow in dhcp_reply


Summary: Heap-buffer-overflow in generic_unpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46432

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
generic_unpack
exr_decoding_run
Imf_3_1::checkCoreFile
```


Summary: UNKNOWN READ in [heap]

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46395

```
Crash type: UNKNOWN READ
Crash state:
[heap]
```


Summary: UNKNOWN READ in start_output_pass

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46396

```
Crash type: UNKNOWN READ
Crash state:
start_output_pass
prepare_for_output_pass
output_pass_setup
```


Summary: Heap-use-after-free in save_marker

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46421

```
Crash type: Heap-use-after-free WRITE 1
Crash state:
save_marker
read_markers
consume_markers
```


Summary: UNKNOWN READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46356

```
Crash type: UNKNOWN READ
Crash state:
NULL```


Summary: Heap-buffer-overflow in LoadPSD

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46437

```
Crash type: Heap-buffer-overflow WRITE 2
Crash state:
LoadPSD
PSDHandler::read
kimgio_fuzzer.cc
```


Summary: Heap-buffer-overflow in _estrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43484

```
Crash type: Heap-buffer-overflow READ 11
Crash state:
_estrdup
exif_process_user_comment
exif_process_IFD_TAG_impl
```


Summary: Heap-buffer-overflow in lwan_h2_huffman_decode_for_fuzzing

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46506

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
lwan_h2_huffman_decode_for_fuzzing
h2_huffman_fuzzer.cc
```


Summary: Stack-use-after-scope in std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<g

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46468

```
Crash type: Stack-use-after-scope WRITE 1
Crash state:
std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<g
tf::Executor::_invoke
tf::Executor::_consume_task
```


Summary: Heap-buffer-overflow in frame_get_metalayers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46460

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
frame_get_metalayers
frame_to_schunk
blosc2_schunk_from_buffer
```


Summary: Heap-buffer-overflow in ConvertRGB24ToY_SSE41

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46436

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ConvertRGB24ToY_SSE41
ImportYUVAFromRGBA
Import
```


Summary: Heap-buffer-overflow in resize_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46474

Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
resize_packet
FuzzResizePacket
fuzz_rfc1035.c


Summary: Heap-buffer-overflow in ndpi_search_tinc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46499

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_search_tinc
check_ndpi_detection_func
ndpi_check_flow_func
```


Summary: Stack-use-after-return in QSemaphore::release

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46525

The issue already existed before oss-fuzz could reproduce it. oss-fuzz found
it after qdrawhelper routines were made multithreaded. There might be ways to
trigger the issue before that.

```
Crash type: Stack-use-after-return WRITE 8
Crash state:
QSemaphore::release
std::__1::__function::__func<void handleSpans<BlendSrcGeneric>
FunctionRunnable::run
```


Summary: Heap-buffer-overflow in ndlz8_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43519

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
ndlz8_decompress
blosc_d
do_job
```


Summary: Stack-use-after-return in std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<i

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46575

```
Crash type: Stack-use-after-return READ 1
Crash state:
std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<i
tf::Executor::_invoke
tf::Executor::_consume_task
```


Summary: Stack-buffer-overflow in void unwindstack::Symbols::BuildRemapTable<Elf64_Sym>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46546

Crash type: Stack-buffer-overflow READ {*}
Crash state:
void unwindstack::Symbols::BuildRemapTable<Elf64_Sym>
bool unwindstack::Symbols::GetName<Elf64_Sym>
unwindstack::ElfInterfaceImpl<unwindstack::ElfTypes64>::GetFunctionName


Summary: Use-of-uninitialized-value in grk::N_SCALAR::DecompressIrrev::vtrans

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46594

Crash type: Use-of-uninitialized-value
Crash state:
grk::N_SCALAR::DecompressIrrev::vtrans
unsigned long grk::N_SCALAR::vscheduler<grk::N_SCALAR::DecompressIrrev>
std::__1::__function::__func<unsigned long grk::N_SCALAR::vscheduler<grk::N_SCAL


Summary: Heap-use-after-free in gc_trace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46672

```
Crash type: Heap-use-after-free READ 2
Crash state:
gc_trace
gs_gc_reclaim
ireclaim
```


Summary: Heap-buffer-overflow in LZ4_decompress_safe

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43513

```
Crash type: Heap-buffer-overflow READ 16
Crash state:
LZ4_decompress_safe
blosc_d
do_job
```


Summary: Heap-buffer-overflow in krb_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46670

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
krb_parse
ndpi_search_kerberos
check_ndpi_detection_func
```


Summary: Heap-buffer-overflow in sc_pkcs15init_delete_by_path

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46653

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
sc_pkcs15init_delete_by_path
sc_pkcs15init_store_data
sc_pkcs15init_store_data_object
```


Summary: Uncaught exception in com.alibaba.fastjson.JSONPath.getPropertyValue

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46696

```
Crash type: Uncaught exception
Crash state:
com.alibaba.fastjson.JSONPath.getPropertyValue
java.base/jdk.internal.math.FDBigInteger.multByPow52
java.base/jdk.internal.math.FloatingDecimal$ASCIIToBinaryBuffer.floatValue
```


Summary: Stack-buffer-overflow in sc_hsm_list_files

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46679

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
sc_hsm_list_files
sc_list_files
fuzz_card.c
```


Summary: Heap-buffer-overflow in cli_bcomp_freemeta

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46687

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
cli_bcomp_freemeta
cli_bcomp_addpatt
readdb_parse_ldb_subsignature
```


Summary: Heap-buffer-overflow in JS_CallInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46701

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
JS_CallInternal
JS_EvalFunctionInternal
__JS_EvalInternal
```


Summary: Use-after-poison in absl::BytesToHexString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43554

```
Crash type: Use-after-poison READ 1
Crash state:
absl::BytesToHexString
```


Summary: UNKNOWN READ in ref_stack_counttomark

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46705

```
Crash type: UNKNOWN READ
Crash state:
ref_stack_counttomark
zcounttomark
gs_interpret
```


Summary: Segv on unknown address in gs_heap_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46734

```
Crash type: Segv on unknown address
Crash state:
gs_heap_free_object
chunk_free_object
pdfi_repair_add_object
```


Summary: Heap-buffer-overflow in void absl::BytesToHexStringInternal<std::__1::basic_string<char, std::__1::char_

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43553

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
void absl::BytesToHexStringInternal<std::__1::basic_string<char, std::__1::char_
absl::BytesToHexString
```


Summary: Invalid-free in igl::MshLoader::~MshLoader

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46818

```
Crash type: Invalid-free
Crash state:
igl::MshLoader::~MshLoader
igl_fuzzer.cpp
```


Summary: UNKNOWN READ in sc_pkcs15_decode_pubkey_ec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46852

```
Crash type: UNKNOWN READ
Crash state:
sc_pkcs15_decode_pubkey_ec
sc_pkcs15_decode_pubkey
fuzz_pkcs15_decode.c
```


Summary: Heap-use-after-free in dwg_free_TABLEGEOMETRY_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46847

```
Crash type: Heap-use-after-free READ 8
Crash state:
dwg_free_TABLEGEOMETRY_private
dwg_free_TABLEGEOMETRY
dwg_free_variable_no_class
```


Summary: Segv on unknown address in jxl::N_SSE4::WriteToU8Stage::ProcessRow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46915

```
Crash type: Segv on unknown address
Crash state:
jxl::N_SSE4::WriteToU8Stage::ProcessRow
jxl::LowMemoryRenderPipeline::RenderRect
jxl::LowMemoryRenderPipeline::ProcessBuffers
```


Summary: Heap-buffer-overflow in exif_get_long

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46917

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
exif_get_long
exif_mnote_data_fuji_load
exif_mnote_data_load
```


Summary: Heap-buffer-overflow in stringProcess

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43535

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
stringProcess
tVariantCreateExt
tVariantCreate
```


Summary: Segv on unknown address in jxl::N_AVX2::WriteToU8Stage::ProcessRow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46963

```
Crash type: Segv on unknown address
Crash state:
jxl::N_AVX2::WriteToU8Stage::ProcessRow
jxl::LowMemoryRenderPipeline::RenderRect
jxl::LowMemoryRenderPipeline::ProcessBuffers
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46994

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
dwg_encode_VERTEX_2D
dwg_encode_add_object
dwg_encode
```

Summary: Heap-buffer-overflow in dwg_encode_VERTEX_2D


Summary: Stack-use-after-return in std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<i

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46986

```
Crash type: Stack-use-after-return READ 1
Crash state:
std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<i
tf::Executor::_invoke
tf::Executor::_spawn
```


Summary: Heap-buffer-overflow in ndpi_search_raknet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47000

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
ndpi_search_raknet
check_ndpi_detection_func
ndpi_check_flow_func
```


Summary: Heap-buffer-overflow in decode_preR13_section_hdr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46983

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
decode_preR13_section_hdr
decode_preR13
dwg_decode
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47014

```
Crash type: Segv on unknown address
Crash state:
bit_write_TV
bit_write_T
dwg_encode_BLOCK
```

Summary: Segv on unknown address in bit_write_TV


Summary: Stack-buffer-overflow in sc_asn1_read_tag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47035

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
sc_asn1_read_tag
sc_asn1_find_tag
cardos_list_files
```


Summary: Heap-use-after-free in r_asm_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47113

```
Crash type: Heap-use-after-free READ 4
Crash state:
r_asm_free
r_core_fini
r_core_free
```


Summary: Invalid-free in change_pin

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47143

```
Crash type: Invalid-free
Crash state:
change_pin
_main
fuzz_pkcs15_tool.c
```


Summary: Segv on unknown address in bit_write_TV

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47126

```
Crash type: Segv on unknown address
Crash state:
bit_write_TV
bit_write_T
dwg_encode_BLOCK
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47151

```
Crash type: Segv on unknown address
Crash state:
dwg_ref_get_object
dwg_geojson_feature
dwg_geojson_object
```

Summary: Segv on unknown address in dwg_ref_get_object


Summary: Global-buffer-overflow in _dwarf_pathjoinl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47150

```
Crash type: Global-buffer-overflow READ 1
Crash state:
_dwarf_pathjoinl
_dwarf_construct_linkedto_path
dwarf_gnu_debuglink
```


Summary: Stack-buffer-overflow in BZ2_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43564

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
BZ2_decompress
BZ2_bzDecompress
ft_bzip2_file_fill_output
```


Summary: Heap-buffer-overflow in s_PFBD_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47157

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
s_PFBD_process
sreadbuf
spgetcc
```


Summary: Heap-use-after-free in mrb_funcall_with_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47213

```
Crash type: Heap-use-after-free READ 8
Crash state:
mrb_funcall_with_block
mrb_instance_new
mrb_funcall_with_block
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47190

```
Crash type: Incorrect-function-pointer-type
Crash state:
cv::split
cv::split
TestSplitAndMerge
```

Summary: Incorrect-function-pointer-type in cv::split


Summary: Heap-buffer-overflow in json_common_entity_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47259

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
json_common_entity_data
dwg_json_REPEAT
dwg_json_object
```


Summary: Memcpy-param-overlap in ZSTD_createDDict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43287

```
Crash type: Memcpy-param-overlap
Crash state:
ZSTD_createDDict
blosc_run_decompression_with_context
blosc2_decompress_ctx
```


Summary: UNKNOWN READ in md_build_attribute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43587

```
Crash type: UNKNOWN READ
Crash state:
md_build_attribute
md_enter_leave_span_a
md_process_normal_block_contents
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47300

```
Crash type: Heap-double-free
Crash state:
dwg_free_XRECORD_private
dwg_free_XRECORD
dwg_free_object
```

Summary: Heap-double-free in dwg_free_XRECORD_private


Summary: UNKNOWN READ in OT::gvar::subset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47281

```
Crash type: UNKNOWN READ
Crash state:
OT::gvar::subset
bool _try_subset<OT::gvar>
hb_subset_plan_execute_or_fail
```


Summary: Heap-use-after-free in dwg_add_handleref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47319

```
Crash type: Heap-use-after-free READ 8
Crash state:
dwg_add_handleref
dwg_add_STYLE
decode_preR13_section
```


Summary: Heap-buffer-overflow in std::__1::__tree_node_base<void*>*& std::__1::__tree<std::__1::__value_type<std:

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47391

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
std::__1::__tree_node_base<void*>*& std::__1::__tree<std::__1::__value_type<std:
std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<std::__1::basic_
nlohmann::detail::binary_reader<nlohmann::basic_json<std::__1::map, std::__1::ve
```


Summary: Segv on unknown address in zero

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43538

```
Crash type: Segv on unknown address
Crash state:
zero
zend_execute
fuzzer_do_request_from_buffer
```


Summary: Heap-buffer-overflow in Assimp::ASE::Parser::ParseLV1SoftSkinBlock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47392

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Assimp::ASE::Parser::ParseLV1SoftSkinBlock
Assimp::ASE::Parser::Parse
Assimp::ASEImporter::InternReadFile
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47464

```
Crash type: Bad-cast
Crash state:
Bad-cast to const upb_tabent' (aka 'const struct _upb_tabent')insert
upb_strtable_insert
create_fielddef
```


Summary: Heap-buffer-overflow in generic_unpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47483

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
generic_unpack
exr_decoding_run
Imf_3_2::checkCoreFile
```


Summary: UNKNOWN READ in pdfi_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47499

```
Crash type: UNKNOWN READ
Crash state:
pdfi_free_object
pdfi_clear_context
pdfi_free_context
```


Summary: Heap-buffer-overflow in opj_t1_allocate_buffers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47500

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
opj_t1_allocate_buffers
opj_t1_clbl_decode_processor
opj_thread_pool_submit_job
```


Summary: Heap-buffer-overflow in read_xref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47501

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
read_xref
pdfi_read_xref
pdfi_set_input_stream
```


Summary: Heap-buffer-overflow in uncompress_b44_impl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47503

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
uncompress_b44_impl
default_decompress_chunk
exr_decoding_run
```


Summary: Heap-buffer-overflow in md_decode_utf8__

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43589

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
md_decode_utf8__
md_link_label_hash
md_is_link_reference
```


Summary: Stack-buffer-overflow in cardos_list_files

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47512

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
cardos_list_files
sc_list_files
fuzz_card.c
```


Summary: UNKNOWN WRITE in alloc_restore_step_in

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47513

```
Crash type: UNKNOWN WRITE
Crash state:
alloc_restore_step_in
alloc_restore_all
gs_main_finit
```


Summary: Heap-buffer-overflow in sc_build_pin

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47521

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
sc_build_pin
isoNUMBER_build_pin_apdu
isoNUMBER_pin_cmd
```


Summary: Heap-use-after-free in std::__1::__tree_node_base<void*>*& std::__1::__tree<std::__1::__value_type<std:

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47533

```
Crash type: Heap-use-after-free READ 1
Crash state:
std::__1::__tree_node_base<void*>*& std::__1::__tree<std::__1::__value_type<std:
std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<std::__1::basic_
nlohmann::detail::binary_reader<nlohmann::basic_json<std::__1::map, std::__1::ve
```


Summary: Heap-buffer-overflow in pdfi_dict_get_no_store_R_inner

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47601

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
pdfi_dict_get_no_store_R_inner
pdfi_dict_get_no_store_R_key
pdfi_find_resource
```


Summary: Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47616

```
Crash type: Uncaught exception
Crash state:
com.ctc.wstx.dtd.FullDTDReader.readContentSpec
java.base/jdk.internal.org.objectweb.asm.SymbolTable$Entry.<init>
java.base/jdk.internal.org.objectweb.asm.SymbolTable.addConstantUtf8
```


Summary: Stack-use-after-return in conversation_match_element_list

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47624

```
Crash type: Stack-use-after-return READ 4
Crash state:
conversation_match_element_list
wmem_map_lookup
find_conversation_by_id
```


Summary: Segv on unknown address in sc_aux_data_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47655

```
Crash type: Segv on unknown address
Crash state:
sc_aux_data_free
sc_pkcs15_free_prkey_info
sc_pkcs15_free_object
```


Summary: Stack-buffer-overflow in spvtools::opt::CompositeInsertToCompositeConstruct

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47684

```
Crash type: Stack-buffer-overflow READ 8
Crash state:
spvtools::opt::CompositeInsertToCompositeConstruct
std::__1::__function::__func<bool
spvtools::opt::InstructionFolder::FoldInstructionInternal
```


Summary: Stack-buffer-overflow in sc_asn1_read_tag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47675

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
sc_asn1_read_tag
sc_asn1_find_tag
cardos_list_files
```


Summary: Stack-use-after-return in test_update

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47676

```
Crash type: Stack-use-after-return READ 1
Crash state:
test_update
_main
fuzz_pkcs15_tool.c
```


Summary: Heap-buffer-overflow in ndpi_search_http_tcp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47724

```
Crash type: Heap-buffer-overflow READ 12
Crash state:
ndpi_search_http_tcp
check_ndpi_detection_func
ndpi_check_flow_func
```


Summary: Stack-buffer-overflow in tlsCheckUncommonALPN

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47730

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
tlsCheckUncommonALPN
processClientServerHello
processTLSBlock
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47734

```
Crash type: Heap-buffer-overflow READ 11
Crash state:
ndpi_search_http_tcp
ndpi_search_http_tcp_again
ndpi_detection_process_packet
```


Summary: UNKNOWN WRITE in alloc_restore_step_in

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47753

```
Crash type: UNKNOWN WRITE
Crash state:
alloc_restore_step_in
alloc_restore_all
gs_main_finit
```


Summary: Heap-buffer-overflow in Curl_headers_push

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47767

```
Crash type: Heap-buffer-overflow WRITE 5
Crash state:
Curl_headers_push
Curl_client_write
Curl_http_readwrite_headers
```


Summary: Heap-buffer-overflow in myeid_create_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47769

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
myeid_create_key
sc_pkcs15init_store_secret_key
do_store_secret_key
```


Summary: Segv on unknown address in gx_device_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47770

```
Crash type: Segv on unknown address
Crash state:
gx_device_finalize
alloc_restore_step_in
dorestore
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47796

```
Crash type: Uncaught exception
Crash state:
com.ctc.wstx.dtd.FullDTDReader.readContentSpec
java.base/java.lang.String.getChars
java.base/java.io.StringReader.read
```


Summary: Null-dereference READ in load_glyph

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47798

```
Crash type: Null-dereference READ
Crash state:
load_glyph
gs_fapi_ft_get_char_raster_metrics
gs_fapi_do_char
```


Summary: Heap-buffer-overflow in CFF::Charset::collect_glyph_to_sid_map

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47790

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
CFF::Charset::collect_glyph_to_sid_map
cff_subset_plan::plan_subset_charset
cff_subset_plan::create
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47797

```
Crash type: Uncaught exception
Crash state:
com.ctc.wstx.dtd.FullDTDReader.readContentSpec
java.base/java.util.HashMap.get
com.ctc.wstx.dtd.FullDTDReader.findSharedName
```


Summary: Heap-use-after-free in inflate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47834

```
Crash type: Heap-use-after-free READ 1
Crash state:
inflate
zlib_body
zlib_decompress
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47841

```
Crash type: Stack-buffer-overflow WRITE 5
Crash state:
strcat
TranslateNumber
TranslateWord3
```

Summary: Stack-buffer-overflow in strcat


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47865

```
Crash type: Uncaught exception
Crash state:
com.ctc.wstx.dtd.FullDTDReader.readContentSpec
com.ctc.wstx.util.PrefixedName.hashCode
java.base/java.util.HashMap.hash
```


Summary: Security exception in jaz.Zer.<clinit>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47914

```
Crash type: Security exception
Crash state:
jaz.Zer.<clinit>
java.base/java.lang.Class.forName0
java.base/java.lang.Class.forName
```


Summary: Heap-buffer-overflow in json_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47961

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
json_parse
file_is_json
file_buffer
```


Summary: Heap-buffer-overflow in mem_mono_copy_mono

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43621

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
mem_mono_copy_mono
mem_mapped4_copy_color
tile_clip_copy_color
```


Summary: Heap-double-free in nft_set_context_free_many

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47963

```
Crash type: Heap-double-free
Crash state:
nft_set_context_free_many
config_parse_nft_set_context
config_parse_dhcp_pd_nft_set_context
```


Summary: Stack-buffer-overflow in input_osc_52

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47964

```
Crash type: Stack-buffer-overflow READ 9
Crash state:
input_osc_52
input_exit_osc
input_parse
```


Summary: Heap-double-free in config_parse_nft_set_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47985

```
Crash type: Heap-double-free
Crash state:
config_parse_nft_set_context
config_parse_dhcp_nft_set_context
parse_line
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47973

```
Crash type: Heap-double-free
Crash state:
nft_set_context_free_many
network_unref
network_load_one
```


Summary: Stack-buffer-overflow in simple_str_to_doublestr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47986

```
Crash type: Stack-buffer-overflow WRITE 1
Crash state:
simple_str_to_doublestr
icalvalue_new_from_string
icalparser_add_line
```


Summary: Segv on unknown address

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48005

```
Crash type: Segv on unknown address
Crash state:
NULL```


Summary: Heap-buffer-overflow in processClientServerHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43664

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
processClientServerHello
processTLSBlock
ndpi_search_tls_udp
```


Summary: Heap-buffer-overflow in jxl::JxlBoxContentDecoder::Process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48029

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
jxl::JxlBoxContentDecoder::Process
HandleBoxes
JxlDecoderProcessInput
```


Summary: UNKNOWN READ in ndpi_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48020

```
Crash type: UNKNOWN READ
Crash state:
ndpi_strdup
process_ndpi_collected_info
ndpi_workflow_process_packet
```


Summary: Heap-buffer-overflow in ndpi_search_dns

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48034

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ndpi_search_dns
check_ndpi_detection_func
ndpi_check_flow_func
```


Summary: Segv on unknown address in duckdb::ExpressionBinder::BindExpression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48047

```
Crash type: Segv on unknown address
Crash state:
duckdb::ExpressionBinder::BindExpression
duckdb::ExpressionBinder::BindExpression
duckdb::SelectBinder::BindExpression
```


Summary: Heap-buffer-overflow in frame_get_vlmetalayers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48052

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
frame_get_vlmetalayers
frame_to_schunk
blosc2_schunk_from_buffer
```


Summary: Heap-use-after-free in duckdb::Planner::CreatePlan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48062

```
Crash type: Heap-use-after-free READ 1
Crash state:
duckdb::Planner::CreatePlan
duckdb::Planner::CreatePlan
duckdb::ClientContext::CreatePreparedStatement
```


Summary: Heap-buffer-overflow in fr_size_from_str

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48069

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
fr_size_from_str
fr_value_box_from_substr
fr_value_box_from_str
```


Summary: Stack-buffer-overflow in spvtools::opt::CompositeInsertToCompositeConstruct

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48060

```
Crash type: Stack-buffer-overflow READ 4
Crash state:
spvtools::opt::CompositeInsertToCompositeConstruct
std::__1::__function::__func<bool
spvtools::opt::InstructionFolder::FoldInstructionInternal
```


Summary: Heap-buffer-overflow in jxl::BitsCoder::Read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48123

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
jxl::BitsCoder::Read
jxl::ReadVisitor::Bits
jxl::jpeg::JPEGData::VisitFields
```


Summary: Segv on unknown address in jxl::N_AVX2::XYBStage<jxl::N_AVX2::PerChannelOp<jxl::N_AVX2::Op709> >::ProcessRo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48132

```
Crash type: Segv on unknown address
Crash state:
jxl::N_AVX2::XYBStage<jxl::N_AVX2::PerChannelOp<jxl::N_AVX2::Op709> >::ProcessRo
jxl::LowMemoryRenderPipeline::RenderRect
jxl::LowMemoryRenderPipeline::ProcessBuffers
```


Summary: Heap-buffer-overflow in ucl_hash_search

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48156

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ucl_hash_search
ucl_parser_process_object_element
ucl_state_machine
```


Summary: Heap-buffer-overflow in pdfi_dict_get_no_store_R_inner

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48167

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
pdfi_dict_get_no_store_R_inner
pdfi_dict_get_no_store_R_key
pdfi_find_resource
```


Summary: Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48185

```
Crash type: Uncaught exception
Crash state:
com.ctc.wstx.dtd.FullDTDReader.readContentSpec
com.ctc.wstx.util.PrefixedName.hashCode
java.base/java.util.HashMap.hash
```


Summary: Heap-buffer-overflow in pcpp::IPv6AuthenticationHeader::getExtensionLen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43290

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pcpp::IPv6AuthenticationHeader::getExtensionLen
pcpp::IPv6Layer::parseExtensions
pcpp::IPv6Layer::IPv6Layer
```


Summary: UNKNOWN WRITE in grk::TileLengthMarkers::seek

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48224

```
Crash type: UNKNOWN WRITE
Crash state:
grk::TileLengthMarkers::seek
grk::CodeStreamDecompress::skipNonScheduledTLM
grk::CodeStreamDecompress::parseTileParts
```


Summary: Heap-use-after-free in psi_device_ref_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48305

```
Crash type: Heap-use-after-free READ 8
Crash state:
psi_device_ref_finalize
gs_gc_reclaim
ireclaim
```


Summary: Heap-buffer-overflow in coap_split_uri_sub

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48362

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
coap_split_uri_sub
coap_get_uri_path
```


Summary: Negative-size-param in ndlz4_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43671

Crash type: Negative-size-param
Crash state:
ndlz4_decompress
ndlz_decompress
blosc_d


Summary: Heap-buffer-overflow in read_blob_signed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48329

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
read_blob_signed
parse_signature_type
parse_signature_type
```


Summary: UNKNOWN READ in zfp_getcell

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48372

```
Crash type: UNKNOWN READ
Crash state:
zfp_getcell
blosc_d
_blosc_getitem
```


Summary: Heap-use-after-free in AK::HashTable<AK::StringView, AK::Traits<AK::StringView>, false>::try_lookup_for

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48405

```
Crash type: Heap-use-after-free READ 2
Crash state:
AK::HashTable<AK::StringView, AK::Traits<AK::StringView>, false>::try_lookup_for
JS::Parser::is_private_identifier_valid
JS::Parser::parse_primary_expression
```


Summary: Uncaught exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48408

```
Crash type: Uncaught exception
Crash state:
com.github.javaparser.CommentsInserter.insertComments
java.base/java.util.TreeMap.compare
java.base/java.util.TreeMap.addEntryToEmptyMap
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48470

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
LookupThousands
LookupNum3
TranslateNumber
```

Summary: Stack-buffer-overflow in LookupThousands


Summary: Stack-buffer-overflow in sc_asn1_read_tag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48476

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
sc_asn1_read_tag
sc_asn1_find_tag
cardos_list_files
```


Summary: Heap-buffer-overflow in Interp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48526

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
Interp
Ins_IUP
RunIns
```


Summary: Segv on unknown address in chunk_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48528

```
Crash type: Segv on unknown address
Crash state:
chunk_free_object
gx_ttfMemory__free
Context_Destroy
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48547

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Ins_JROF
RunIns
Instance_Reset
```

Summary: Heap-buffer-overflow in Ins_JROF


Summary: Heap-buffer-overflow in spvtools::CFA<spvtools::val::BasicBlock>::CalculateDominators

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48553

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
spvtools::CFA<spvtools::val::BasicBlock>::CalculateDominators
spvtools::val::PerformCfgChecks
spvtools::val::ValidateBinaryUsingContextAndValidationState
```


Summary: Heap-buffer-overflow in init_mt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48609

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
init_mt
vp9_decode_frame
vp9_receive_compressed_data
```


Summary: Heap-buffer-overflow in mem_true24_fill_rectangle

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43688

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
mem_true24_fill_rectangle
gx_dc_pure_fill_rectangle
gx_default_fillpage
```


Summary: Heap-buffer-overflow in string_decoder_getc_utf_8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48589

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
string_decoder_getc_utf_8
text_decoder_getc
ReadClause
```


Summary: Heap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48684

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor
perfetto::trace_processor::TrackEventModule::ParsePacket
perfetto::trace_processor::ProtoTraceParser::ParseTracePacketImpl
```


Summary: Check failed in CheckUnwind

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48629

```
Crash type: Check failed
Crash state:
CheckUnwind
vp9_loop_filter_dealloc
vp9_decoder_remove
```


Summary: Heap-buffer-overflow in json_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48736

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
json_parse
file_is_json
file_buffer
```


Summary: Segv on unknown address in gs_heap_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48746

```
Crash type: Segv on unknown address
Crash state:
gs_heap_free_object
chunk_free_object
gs_fapi_ft_get_scaled_font
```


Summary: Memcpy-param-overlap in FT_Stream_TryRead

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48749

```
Crash type: Memcpy-param-overlap
Crash state:
FT_Stream_TryRead
bdf_load_font
BDF_Face_Init
```


Summary: Heap-buffer-overflow in s_hex_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43693

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
s_hex_process
s_exD_process
sreadbuf
```


Summary: Index-out-of-bounds in decode_coefs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48816

```
Crash type: Index-out-of-bounds
Crash state:
decode_coefs
vp9_decode_block_tokens
decode_block
```


Summary: Invalid-free in round_trip_fuzzer.c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48884

```
Crash type: Invalid-free
Crash state:
round_trip_fuzzer.c
```


Summary: Heap-buffer-overflow in ndlz4_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43687

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndlz4_decompress
ndlz_decompress
blosc_d
```


Summary: Heap-use-after-free in mrb_bint_new_str

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48873

```
Crash type: Heap-use-after-free READ 1
Crash state:
mrb_bint_new_str
mrb_vm_exec
mrb_vm_run
```


Summary: Heap-buffer-overflow in fixup_pcap_pkthdr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48863

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
fixup_pcap_pkthdr
pcap_next_packet
pcap_offline_read
```


Summary: UNKNOWN READ in mrb_bint_cmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48877

```
Crash type: UNKNOWN READ
Crash state:
mrb_bint_cmp
cmpnum
num_gt
```


Summary: Heap-buffer-overflow in emit_goto

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48924

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
emit_goto
js_parse_for_in_of
js_parse_statement_or_decl
```


Summary: Segv on unknown address in onig_free_body

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48895

```
Crash type: Segv on unknown address
Crash state:
onig_free_body
onig_new
flb_regex_create
```


Summary: UNKNOWN WRITE in udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48904

```
Crash type: UNKNOWN WRITE
Crash state:
udiv
mrb_bint_mod
int_mod
```


Summary: Use-of-uninitialized-value in LZ4HC_compress_generic_noDictCtx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48910

```
Crash type: Use-of-uninitialized-value
Crash state:
LZ4HC_compress_generic_noDictCtx
LZ4_compress_HC_extStateHC_fastReset
LZ4F_compressBlockHC
```


Summary: Heap-buffer-overflow in sc_pkcs15_allocate_object_content

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48940

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
sc_pkcs15_allocate_object_content
sc_pkcs15_pincache_add
sc_pkcs15_verify_pin_with_session_pin
```


Summary: Heap-buffer-overflow in _estrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43736

```
Crash type: Heap-buffer-overflow READ 15
Crash state:
_estrdup
exif_process_user_comment
exif_process_IFD_TAG_impl
```


Summary: Use-of-uninitialized-value in LZ4_compress_fast_extState_fastReset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48993

```
Crash type: Use-of-uninitialized-value
Crash state:
LZ4_compress_fast_extState_fastReset
LZ4F_compressBlock
LZ4F_compressUpdateImpl
```


Summary: Heap-buffer-overflow in dhcp_reply

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49002

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
dhcp_reply
dhcp_packet
FuzzDhcp
```


Summary: Heap-buffer-overflow in zim_ReflectionEnumBackedCase_getBackingValue

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49068

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
zim_ReflectionEnumBackedCase_getBackingValue
execute_internal
fuzzer_execute_internal
```


Summary: UNKNOWN WRITE in SkMaskBlurFilter::blur

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49061

```
Crash type: UNKNOWN WRITE
Crash state:
SkMaskBlurFilter::blur
SkBlurMask::BoxBlur
SkBlurMaskFilterImpl::filterMask
```


Summary: Heap-use-after-free in jsmn_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49033

```
Crash type: Heap-use-after-free WRITE 4
Crash state:
jsmn_parse
flb_json_tokenise
flb_pack_json_state
```


Summary: Heap-buffer-overflow in mrb_bint_to_s

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49045

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
mrb_bint_to_s
int_to_s
mrb_vm_exec
```


Summary: Heap-buffer-overflow in internal_huf_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43763

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
internal_huf_decompress
internal_exr_undo_piz
default_decompress_chunk
```


Summary: Heap-buffer-overflow in jxl::N_AVX2::BlendingStage::ProcessPaddingRow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49049

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
jxl::N_AVX2::BlendingStage::ProcessPaddingRow
jxl::LowMemoryRenderPipeline::RenderPadding
jxl::LowMemoryRenderPipeline::ProcessBuffers
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49086

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
megasas_map_sgl
megasas_mmio_write
megasas_port_write
```

Summary: Heap-buffer-overflow in megasas_map_sgl


Summary: Heap-use-after-free in wasmtime_runtime::externref::gc::hcbc8e23ae41614fa

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49171

```
Crash type: Heap-use-after-free WRITE 8
Crash state:
wasmtime_runtime::externref::gc::hcbc8e23ae41614fa
wasmtime_fuzzing::oracles::table_ops::_$u7b$$u7b$closure$u7d$$u7d$::hd207e5ffb69
wasmtime::func::Func::invoke::ha3b06e1b5875adc9
```


Summary: Heap-use-after-free in .tmpoLlNv4

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49166

```
Crash type: Heap-use-after-free READ 8
Crash state:
.tmpoLlNv4
.tmpoLlNv4
wasmtime_setjmp
```


Summary: Container-overflow in STOFFStarMathToMMLConverterInternal::Parser::convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49164

```
Crash type: Container-overflow READ 1
Crash state:
STOFFStarMathToMMLConverterInternal::Parser::convert
STOFFStarMathToMMLConverterInternal::Parser::parse
STOFFStarMathToMMLConverter::convertStarMath
```


Summary: Stack-buffer-overflow in Lookup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49227

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
Lookup
LookupLetter
TranslateLetter
```


Summary: Heap-use-after-free in .tmpgt0oOx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49167

```
Crash type: Heap-use-after-free READ 8
Crash state:
.tmpgt0oOx
.tmpgt0oOx
wasmtime_setjmp
```


Summary: Heap-buffer-overflow in get_symbols_64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49209

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
get_symbols_64
get_main_64
binsym
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49268

```
Crash type: Use-of-uninitialized-value
Crash state:
mrb_bint_as_int
mrb_ensure_int_type
mrb_get_args
```

Summary: Use-of-uninitialized-value in mrb_bint_as_int


Summary: Heap-buffer-overflow in extract_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43299

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
extract_name
hash_questions
fuzz_util.c
```


Summary: Segv on unknown address in mrb_bint_to_s

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49269

```
Crash type: Segv on unknown address
Crash state:
mrb_bint_to_s
mrb_integer_to_str
int_to_s
```


Summary: Heap-buffer-overflow in mrb_bint_xor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49255

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
mrb_bint_xor
int_xor
mrb_vm_exec
```


Summary: Heap-buffer-overflow in mrb_vm_exec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49259

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
mrb_vm_exec
mrb_vm_run
mrb_top_run
```


Summary: Stack-buffer-overflow in sc_asn1_read_tag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49248

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
sc_asn1_read_tag
sc_asn1_find_tag
cardos_list_files
```


Summary: Heap-buffer-overflow in mrb_bint_cmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49291

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
mrb_bint_cmp
cmpnum
num_gt
```


Summary: Heap-buffer-overflow in mrb_bint_add

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49282

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
mrb_bint_add
mrb_int_add
int_add
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49277

```
Crash type: Heap-use-after-free READ 4
Crash state:
jxl::WriteToPixelCallbackStage::ProcessRow
jxl::LowMemoryRenderPipeline::RenderRect
jxl::LowMemoryRenderPipeline::ProcessBuffers
```

Summary: Heap-use-after-free in jxl::WriteToPixelCallbackStage::ProcessRow


Summary: Heap-buffer-overflow in cli_loadcrt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43828

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
cli_loadcrt
cli_load
cl_load
```


Summary: Heap-use-after-free in cras_iodev_list_disable_dev

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49368

```
Crash type: Heap-use-after-free READ 4
Crash state:
cras_iodev_list_disable_dev
cras_iodev_list_rm_output
a2dp_pcm_iodev_destroy
```


Summary: Heap-buffer-overflow in fxGetNextEntity

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49357

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
fxGetNextEntity
fxGetNextTokenJSXChild
fxJSXElement
```


Summary: UNKNOWN READ in OT::avar::map_coords

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49407

```
Crash type: UNKNOWN READ
Crash state:
OT::avar::map_coords
hb_ot_var_normalize_variations
test-ot-face.c
```


Summary: UNKNOWN READ in std::__1::basic_filebuf<char, std::__1::char_traits<char> >::underflow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49381

```
Crash type: UNKNOWN READ
Crash state:
std::__1::basic_filebuf<char, std::__1::char_traits<char> >::underflow
std::__1::basic_streambuf<char, std::__1::char_traits<char> >::uflow
std::__1::basic_streambuf<char, std::__1::char_traits<char> >::xsgetn
```


Summary: Heap-buffer-overflow in TetrahedralInterp16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49386

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
TetrahedralInterp16
cmsPipelineEval16
FixWhiteMisalignment
```


Summary: Timeout in JsonFuzzer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49401

```
Crash type: Timeout
Crash state:
JsonFuzzer
```


Summary: Heap-buffer-overflow in Type_MLU_Write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49433

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
Type_MLU_Write
SaveTags
cmsSaveProfileToIOhandler
```


Summary: Heap-buffer-overflow in udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49425

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
udiv
mrb_bint_mod
int_mod
```


Summary: Stack-buffer-overflow in load_regex_matcher

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43869

```
Crash type: Stack-buffer-overflow WRITE 1
Crash state:
load_regex_matcher
cli_loadwdb
cli_load
```


Summary: Segv on unknown address in mpz_add

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49427

```
Crash type: Segv on unknown address
Crash state:
mpz_add
mrb_bint_add
int_add
```


Summary: Segv on unknown address in urshift

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49429

```
Crash type: Segv on unknown address
Crash state:
urshift
mpz_div_2exp
mrb_bint_rshift
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49422

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Assimp::MD5::MD5Parser::ParseHeader
Assimp::MD5::MD5Parser::MD5Parser
Assimp::MD5Importer::LoadMD5MeshFile
```

Summary: Heap-buffer-overflow in Assimp::MD5::MD5Parser::ParseHeader


Summary: Heap-buffer-overflow in WriteSeqID

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49441

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
WriteSeqID
WritePositionTable
Type_ProfileSequenceId_Write
```


Summary: Heap-buffer-overflow in Write16bitTables

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49461

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
Write16bitTables
Type_LUT16_Write
SaveTags
```


Summary: Heap-buffer-overflow in cmsMLUgetASCII

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49475

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
cmsMLUgetASCII
WriteCountAndString
Type_CrdInfo_Write
```


Summary: Segv on unknown address in mpz_add

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49453

```
Crash type: Segv on unknown address
Crash state:
mpz_add
mpz_sub
mrb_bint_sub
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49455

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
TetrahedralInterp16
PrelinEval16
cmsPipelineEval16
```


Summary: Segv on unknown address in mrb_bint_cmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49470

```
Crash type: Segv on unknown address
Crash state:
mrb_bint_cmp
int_eql
mrb_funcall_with_block
```


Summary: UNKNOWN READ in EvalSegmentedFn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49490

```
Crash type: UNKNOWN READ
Crash state:
EvalSegmentedFn
cmsEvalToneCurveFloat
Type_vcgt_Write
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49510

```
Crash type: UNKNOWN READ
Crash state:
fp_cmp_mag
crtmgr_trust_list_lookup
crtmgr_add
```

Summary: UNKNOWN READ in fp_cmp_mag


Summary: Segv on unknown address in mrb_bint_cmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49493

```
Crash type: Segv on unknown address
Crash state:
mrb_bint_cmp
cmpnum
num_cmp
```


Summary: Use-of-uninitialized-value in ComputeConversion

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49495

```
Crash type: Use-of-uninitialized-value
Crash state:
ComputeConversion
DefaultICCintents
_cmsLinkProfiles
```


Summary: Heap-buffer-overflow in _cmsWriteXYZNumber

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49505

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
_cmsWriteXYZNumber
Type_ViewingConditions_Write
SaveTags
```


Summary: Stack-use-after-return in rc_free_text_enum

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49530

```
Crash type: Stack-use-after-return READ 8
Crash state:
rc_free_text_enum
gs_text_release
pdf_text_release
```


Summary: Segv on unknown address in cmsNamedColorInfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49501

```
Crash type: Segv on unknown address
Crash state:
cmsNamedColorInfo
Type_NamedColor_Write
SaveTags
```


Summary: Heap-use-after-free in gs_tifsSeekProc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49528

```
Crash type: Heap-use-after-free READ 8
Crash state:
gs_tifsSeekProc
TIFFWriteDirectorySec
TIFFRewriteDirectory
```


Summary: Global-buffer-overflow in decode_CABAC_bit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49538

```
Crash type: Global-buffer-overflow READ 1
Crash state:
decode_CABAC_bit
read_coding_unit
read_coding_quadtree
```


Summary: Heap-use-after-free in cmsFreeNamedColorList

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49546

```
Crash type: Heap-use-after-free READ 4
Crash state:
cmsFreeNamedColorList
Type_NamedColor_Free
cmsCloseProfile
```


Summary: Use-of-uninitialized-value in _LUTeval16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49549

```
Crash type: Use-of-uninitialized-value
Crash state:
_LUTeval16
cmsCreateExtendedTransform
cmsCreateTransform
```


Summary: Heap-use-after-free in jsmn_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49552

```
Crash type: Heap-use-after-free WRITE 4
Crash state:
jsmn_parse
flb_json_tokenise
flb_pack_json_state
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49542

```
Crash type: Use-of-uninitialized-value
Crash state:
udiv
mrb_bint_mod
int_mod
```

Summary: Use-of-uninitialized-value in udiv


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49602

```
Crash type: Heap-double-free
Crash state:
dwg_free_common_entity_data
dwg_free_DIMENSION_ANG2LN
dwg_free_object
```

Summary: Heap-double-free in dwg_free_common_entity_data


Summary: Heap-buffer-overflow in dwg_geojson_feature

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49618

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
dwg_geojson_feature
dwg_geojson_object
dwg_write_geojson
```


Summary: UNKNOWN WRITE in pdfi_repair_file

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49606

```
Crash type: UNKNOWN WRITE
Crash state:
pdfi_repair_file
pdfi_read_xref_stream_dict
pdfi_read_xref
```


Summary: Heap-buffer-overflow in dwg_decode_LWPOLYLINE_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49630

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
dwg_decode_LWPOLYLINE_private
dwg_decode_LWPOLYLINE
dwg_decode_add_object
```


Summary: Heap-buffer-overflow in dynapi_set_helper

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49613

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
dynapi_set_helper
dwg_dynapi_entity_set_value
dxf_blocks_read
```


Summary: Heap-buffer-overflow in dissect_softether_ip_port

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49638

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
dissect_softether_ip_port
ndpi_search_softether
check_ndpi_detection_func
```


Summary: UNKNOWN READ in pdfi_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49662

```
Crash type: UNKNOWN READ
Crash state:
pdfi_free_object
pdfi_free_font_cidtype2
pdfi_free_font
```


Summary: Heap-buffer-overflow in av1_read_mode_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49652

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
av1_read_mode_info
parse_decode_block
decode_partition
```


Summary: Heap-buffer-overflow in decode_preR13_section_hdr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49675

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
decode_preR13_section_hdr
decode_preR13
dwg_decode
```


Summary: Use-of-uninitialized-value in udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49676

```
Crash type: Use-of-uninitialized-value
Crash state:
udiv
mpz_mdiv
mrb_bint_div
```


Summary: Heap-buffer-overflow in fasthuf_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49698

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
fasthuf_decode
internal_huf_decompress
internal_exr_undo_piz
```


Summary: Uncaught exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49680

```
Crash type: Uncaught exception
Crash state:
com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal
com.code_intelligence.jazzer.sanitizers.RegexInjection.stringHook
org.antlr.runtime.BaseRecognizer.getTokenErrorDisplay
```


Summary: Heap-buffer-overflow in cli_bcomp_freemeta

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43816

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
cli_bcomp_freemeta
cli_bcomp_addpatt
cli_parse_add
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49736

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
dissect_softether_ip_port
ndpi_search_softether
check_ndpi_detection_func
```


Summary: Heap-buffer-overflow in udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49763

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
udiv
mpz_mdiv
mrb_bint_div
```


Summary: Use-of-uninitialized-value in cdef_filter_block_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49787

```
Crash type: Use-of-uninitialized-value
Crash state:
cdef_filter_block_c
cdef_filter_block_8x8_c
dav1d_cdef_brow_8bpc
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49783

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
void RDKit::ParseV3000AtomProps<std::__1::vector<std::__1::basic_string_view<cha
RDKit::ParseV3000AtomBlock
RDKit::FileParserUtils::ParseV3000CTAB
```

Summary: Heap-buffer-overflow in void RDKit::ParseV3000AtomProps<std::__1::vector<std::__1::basic_string_view<cha


Summary: Heap-use-after-free in archive_read_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49840

```
Crash type: Heap-use-after-free READ {*}
Crash state:
archive_read_data
libarchive_fuzzer.cc
process_head_file
```


Summary: Security exception in com.fasterxml.jackson.databind.node.ArrayNode.serialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49828

```
Crash type: Security exception
Crash state:
com.fasterxml.jackson.databind.node.ArrayNode.serialize
com.fasterxml.jackson.core.json.WriterBasedJsonGenerator._verifyValueWrite
com.fasterxml.jackson.core.json.WriterBasedJsonGenerator.writeStartArray
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49845

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
udiv
mrb_bint_mod
int_mod
```

Summary: Heap-buffer-overflow in udiv


Summary: Heap-use-after-free in UA_Server_networkCallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49836

```
Crash type: Heap-use-after-free READ 4
Crash state:
UA_Server_networkCallback
fuzz_binary_message.cc
UA_memoryManager_free
```


Summary: Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49858

```
Crash type: Uncaught exception
Crash state:
com.ctc.wstx.dtd.FullDTDReader.readContentSpec
java.base/java.io.StringReader.ensureOpen
java.base/java.io.StringReader.read
```


Summary: Heap-buffer-overflow in pdfi_load_font

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49847

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
pdfi_load_font
pdfi_load_dict_font
pdfi_Tf
```


Summary: Heap-use-after-free in FT_Stream_ReadULong

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49859

```
Crash type: Heap-use-after-free READ 1
Crash state:
FT_Stream_ReadULong
sfnt_init_face
tt_face_init
```


Summary: Stack-buffer-overflow in pixCountPixels

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43841

```
Crash type: Stack-buffer-overflow READ 4
Crash state:
pixCountPixels
pixCountPixelsInRect
pix3_fuzzer.cc
```


Summary: Heap-buffer-overflow in dissect_softether_host_fqdn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49901

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
dissect_softether_host_fqdn
ndpi_search_softether
check_ndpi_detection_func
```


Summary: Segv on unknown address in ndpi_free_flow_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49906

```
Crash type: Segv on unknown address
Crash state:
ndpi_free_flow_data
ndpi_flow_free
process_ndpi_collected_info
```


Summary: Use-of-uninitialized-value in mix_add_scale_stride

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49921

```
Crash type: Use-of-uninitialized-value
Crash state:
mix_add_scale_stride
cras_mix_add_scale_stride
cras_audio_area_copy
```


Summary: Heap-buffer-overflow in i2c_ASN1_INTEGER

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49963

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
i2c_ASN1_INTEGER
bn_i2c
asn1_ex_i2c
```


Summary: Heap-double-free in ada_fuzz_header.h

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50042

```
Crash type: Heap-double-free
Crash state:
ada_fuzz_header.h
snmp_free_pdu
snmp_api_fuzzer.c
```


Summary: Heap-buffer-overflow in netsnmp_memdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50096

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
netsnmp_memdup
snmp_api_fuzzer.c
```


Summary: Heap-buffer-overflow in find_jump_target

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50077

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
find_jump_target
resolve_labels
js_create_function
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50105

```
Crash type: Heap-buffer-overflow READ 10
Crash state:
dissect_softether_host_fqdn
ndpi_search_softether
check_ndpi_detection_func
```


Summary: Heap-buffer-overflow in pdfi_read_cff_dict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50099

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pdfi_read_cff_dict
pdfi_read_cff_dict
pdfi_read_cff_font
```


Summary: Heap-buffer-overflow in _cmsMAT3per

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50115

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
_cmsMAT3per
OptimizeMatrixShaper
_cmsOptimizePipeline
```


Summary: Heap-buffer-overflow in ndpi_search_florensia

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50110

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
ndpi_search_florensia
check_ndpi_detection_func
ndpi_detection_process_packet
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50194

```
Crash type: Heap-buffer-overflow WRITE 16
Crash state:
dynapi_set_helper
dwg_dynapi_header_set_value
json_HEADER
```

Summary: Heap-buffer-overflow in dynapi_set_helper


Summary: Segv on unknown address in jpeg_read_scanlines

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50217
https://pillow.readthedocs.io/en/stable/releasenotes/9.3.0.html#decode-jpeg-compressed-blp1-data-in-original-mode

```
Crash type: Segv on unknown address
Crash state:
jpeg_read_scanlines
ImagingJpegDecode
_decode
```


Summary: Stack-buffer-overflow in gs_glyph_data_from_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50267

```
Crash type: Stack-buffer-overflow WRITE 8
Crash state:
gs_glyph_data_from_string
copied_type1_subr_data
gs_type2_interpret
```


Summary: Stack-buffer-underflow in gs_type2_interpret

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50306

```
Crash type: Stack-buffer-underflow READ 4
Crash state:
gs_type2_interpret
copied_type1_glyph_outline
gs_default_glyph_info
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50295

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
jxl::N_EMU128::WriteToU8Stage::ProcessRow
jxl::LowMemoryRenderPipeline::RenderRect
jxl::LowMemoryRenderPipeline::ProcessBuffers
```

Summary: Heap-buffer-overflow in jxl::N_EMU128::WriteToU8Stage::ProcessRow


Summary: Heap-use-after-free in gx_device_forward_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50307

```
Crash type: Heap-use-after-free READ 8
Crash state:
gx_device_forward_finalize
gx_device_finalize
alloc_restore_step_in
```


Summary: Heap-buffer-overflow in s_file_write_flush

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50370

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
s_file_write_flush
sclose
stream_finalize
```


Summary: Security exception in org.apache.commons.jxpath.ri.compiler.CoreOperationMultiply.computeValue

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50372

```
Crash type: Security exception
Crash state:
org.apache.commons.jxpath.ri.compiler.CoreOperationMultiply.computeValue
org.apache.commons.jxpath.ri.compiler.CoreOperationMultiply.computeValue
org.apache.commons.jxpath.ri.compiler.CoreOperationMultiply.computeValue
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43904

```
Crash type: Heap-use-after-free READ 8
Crash state:
pdfi_cspace_free_callback
gs_cspace_final
alloc_restore_step_in
```

Summary: Heap-use-after-free in pdfi_cspace_free_callback


Summary: Security exception in jaz.Zer.<clinit>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50374

```
Crash type: Security exception
Crash state:
jaz.Zer.<clinit>
java.base/java.lang.Class.forName0
java.base/java.lang.Class.forName
```


Summary: Heap-buffer-overflow in copy_glyph_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50321

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
copy_glyph_data
copy_glyph_type1
gs_copy_glyph_options
```


Summary: Security exception in DatatypeFuzzer.fuzzerTestOneInput

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50379

```
Crash type: Security exception
Crash state:
DatatypeFuzzer.fuzzerTestOneInput
com.code_intelligence.jazzer.driver.FuzzTargetRunner.runOne
com.code_intelligence.jazzer.driver.FuzzTargetRunner.startLibFuzzer
```


Summary: Security exception in org.apache.commons.jxpath.ri.parser.XPathParser.MultiplicativeExpr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50363

```
Crash type: Security exception
Crash state:
org.apache.commons.jxpath.ri.parser.XPathParser.MultiplicativeExpr
org.apache.commons.jxpath.ri.parser.XPathParser.SubtractiveExpr
org.apache.commons.jxpath.ri.parser.XPathParser.AdditiveExpr
```


Summary: Stack-buffer-overflow in gs_glyph_data_from_bytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50326

```
Crash type: Stack-buffer-overflow WRITE 8
Crash state:
gs_glyph_data_from_bytes
pdfi_cff_subr_data
gs_type1_piece_codes
```


Summary: Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50393

```
Crash type: Security exception
Crash state:
com.ctc.wstx.dtd.FullDTDReader.readContentSpec
java.base/java.nio.charset.CharsetEncoder.replaceWith
java.base/java.nio.charset.CharsetEncoder.<init>
```


Summary: Heap-buffer-overflow in do_job

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50433

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
do_job
blosc_compress_context
blosc2_compress_ctx
```


Summary: Heap-buffer-overflow in gs_type2_interpret

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50448

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
gs_type2_interpret
copied_type1_glyph_outline
gs_default_glyph_info
```


Summary: Global-buffer-overflow in chunk_obj_alloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50436

```
Crash type: Global-buffer-overflow READ 8
Crash state:
chunk_obj_alloc
chunk_alloc_byte_array_immovable
s_zlib_alloc
```


Summary: UNKNOWN WRITE in pdfi_free_array

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50406

```
Crash type: UNKNOWN WRITE
Crash state:
pdfi_free_array
pdfi_free_object
pdfi_clear_to_mark
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50428

```
Crash type: Security exception
Crash state:
com.ctc.wstx.dtd.FullDTDReader.readContentSpec
java.base/sun.nio.cs.CESU_8.updatePositions
java.base/sun.nio.cs.CESU_8$Encoder.encodeArrayLoop
```


Summary: Security exception in com.fasterxml.jackson.dataformat.toml.Parser.parseInlineTable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50432

```
Crash type: Security exception
Crash state:
com.fasterxml.jackson.dataformat.toml.Parser.parseInlineTable
com.fasterxml.jackson.dataformat.toml.Parser.parseValue
com.fasterxml.jackson.dataformat.toml.Parser.parseKeyVal
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50466

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
sqlite3VdbeExec
sqlite3_step
osquery::readRows
```

Summary: Heap-buffer-overflow in sqlite3VdbeExec


Summary: Security exception in org.apache.commons.jxpath.ri.compiler.CoreOperation.parenthesize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50458

```
Crash type: Security exception
Crash state:
org.apache.commons.jxpath.ri.compiler.CoreOperation.parenthesize
org.apache.commons.jxpath.ri.compiler.CoreOperation.toString
com.code_intelligence.jazzer.runtime.TraceDataFlowNativeCallbacks.traceCmpInt
```


Summary: Security exception in org.apache.commons.jxpath.ri.axes.UnionContext.setPosition

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50506

```
Crash type: Security exception
Crash state:
org.apache.commons.jxpath.ri.axes.UnionContext.setPosition
org.apache.commons.jxpath.ri.axes.NodeSetContext.nextNode
org.apache.commons.jxpath.ri.axes.PredicateContext.nextNode
```


Summary: Heap-buffer-overflow in hufDecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43916

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
hufDecode
internal_huf_decompress
internal_exr_undo_piz
```


Summary: Stack-buffer-overflow in get_transaction

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50477

```
Crash type: Stack-buffer-overflow READ 2
Crash state:
get_transaction
dissect_asp
call_dissector_work_error
```


Summary: Heap-use-after-free in pdfi_cidtype2_get_glyph_index

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50527

```
Crash type: Heap-use-after-free READ 1
Crash state:
pdfi_cidtype2_get_glyph_index
gs_type42_glyph_info
pdfi_cidtype2_glyph_info
```


Summary: Heap-double-free in sc_pkcs15_encode_df

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50536

```
Crash type: Heap-double-free
Crash state:
sc_pkcs15_encode_df
sc_pkcs15init_update_any_df
sc_pkcs15init_add_object
```


Summary: Segv on unknown address in cranelift_filetests::function_runner::CompiledFunction::call::ha6b9162cd2eNUMBER

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50556

```
Crash type: Segv on unknown address
Crash state:
cranelift_filetests::function_runner::CompiledFunction::call::ha6b9162cd2eNUMBER
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50528

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
do_job
blosc_compress_context
blosc2_compress
```

Summary: Heap-buffer-overflow in do_job


Summary: Segv on unknown address in wasmtime_runtime::traphandlers::catch_traps::call_closure::hec711b3339636b04

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50596

```
Crash type: Segv on unknown address
Crash state:
wasmtime_runtime::traphandlers::catch_traps::call_closure::hec711b3339636b04
wasmtime_setjmp
wasmtime::linker::Linker$LT$T$GT$::instantiate::h7e42baf4a320e0da
```


Summary: Security exception in java.base/java.lang.StringBuffer.append

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50600

```
Crash type: Security exception
Crash state:
java.base/java.lang.StringBuffer.append
org.apache.commons.jxpath.ri.compiler.CoreFunction.toString
java.base/java.lang.String.valueOf
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50593

```
Crash type: Segv on unknown address
Crash state:
FreeCodePages
m3_FreeEnvironment
fuzzer.c
```

Summary: Segv on unknown address in FreeCodePages


Summary: Heap-buffer-overflow in resize_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50617

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
resize_packet
FuzzResizePacket
fuzz_rfc1035.c
```


Summary: Segv on unknown address in gp_semaphore_close

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43984

```
Crash type: Segv on unknown address
Crash state:
gp_semaphore_close
gx_semaphore_free
icc_linkcache_finalize
```


Summary: Security exception in java.base/java.util.Arrays.copyOf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50631

```
Crash type: Security exception
Crash state:
java.base/java.util.Arrays.copyOf
java.base/java.lang.AbstractStringBuilder.ensureCapacityInternal
java.base/java.lang.AbstractStringBuilder.append
```


Summary: Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50629

```
Crash type: Heap-buffer-overflow READ 5
Crash state:
std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
Exiv2::QuickTimeVideo::previewTagDecoder
Exiv2::QuickTimeVideo::tagDecoder
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50663

```
Crash type: UNKNOWN READ
Crash state:
pcl::PLYReader::read
ply_io.h
```

Summary: UNKNOWN READ in pcl::PLYReader::read


Summary: Heap-buffer-overflow in Ins_NPUSHB

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50656

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Ins_NPUSHB
RunIns
Instance_Reset
```


Summary: Heap-use-after-free in cmsFreeNamedColorList

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50665

```
Crash type: Heap-use-after-free READ 8
Crash state:
cmsFreeNamedColorList
Type_NamedColor_Free
cmsCloseProfile
```


Summary: Incorrect-function-pointer-type in grk::BufferedStream::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50661

```
Crash type: Incorrect-function-pointer-type
Crash state:
grk::BufferedStream::read
grk::FileFormatDecompress::read_box_hdr
grk::FileFormatDecompress::readHeaderProcedureImpl
```


Summary: Null-dereference READ in gstate_clone_core

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43989

```
Crash type: Null-dereference READ
Crash state:
gstate_clone_core
gs_gsave
gs_output_page
```


Summary: Stack-buffer-overflow in sc_hsm_decode_ecdsa_signature

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50683

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
sc_hsm_decode_ecdsa_signature
sc_hsm_compute_signature
sc_compute_signature
```


Summary: Heap-use-after-free in UA_Server_networkCallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50699

```
Crash type: Heap-use-after-free READ 4
Crash state:
UA_Server_networkCallback
fuzz_binary_message.cc
UA_memoryManager_free
```


Summary: Segv on unknown address in gs_fapi_ft_get_scaled_font

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50720

```
Crash type: Segv on unknown address
Crash state:
gs_fapi_ft_get_scaled_font
gs_fapi_prepare_font
gs_fapi_passfont
```


Summary: Heap-buffer-overflow in _cmsMAT3per

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50725

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
_cmsMAT3per
OptimizeMatrixShaper
_cmsOptimizePipeline
```


Summary: Global-buffer-overflow in get_unpack_proc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50731

```
Crash type: Global-buffer-overflow READ 8
Crash state:
get_unpack_proc
xps_begin_typed_image
default_subclass_begin_typed_image
```


Summary: Use-of-uninitialized-value in _dbus_marshal_write_basic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50762

```
Crash type: Use-of-uninitialized-value
Crash state:
_dbus_marshal_write_basic
_dbus_type_writer_write_basic
write_basic_field
```


Summary: Global-buffer-overflow in get_space_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43991

```
Crash type: Global-buffer-overflow READ 1
Crash state:
get_space_object
zsetcolorspace
gs_interpret
```


Summary: Stack-buffer-overflow in CBS_stow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50791

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
CBS_stow
i2c_ASN1_INTEGER
asn1_ex_i2c
```


Summary: Negative-size-param in PackChunkyBytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50832

```
Crash type: Negative-size-param
Crash state:
PackChunkyBytes
PrecalculatedXFORM
cmsDoTransform
```


Summary: Heap-buffer-overflow in Ins_NPUSHW

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50834

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Ins_NPUSHW
RunIns
Instance_Reset
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50835

```
Crash type: Use-of-uninitialized-value
Crash state:
init_main_qtable
LibRaw::fuji_decode_strip
LibRaw::fuji_decode_loop
```

Summary: Use-of-uninitialized-value in init_main_qtable


Summary: Heap-buffer-overflow in generic_unpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43961

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
generic_unpack
exr_decoding_run
Imf_3_1::checkCoreFile
```


Summary: Heap-buffer-overflow in ttfOutliner__BuildGlyphOutlineAux

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50847

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ttfOutliner__BuildGlyphOutlineAux
ttfOutliner__Outline
gx_ttf_outline
```


Summary: Heap-use-after-free in xps_tifsSeekProc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50893

```
Crash type: Heap-use-after-free READ 8
Crash state:
xps_tifsSeekProc
TIFFRewriteDirectory
TIFFFlush
```


Summary: Heap-use-after-free in gx_monitor_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43981

```
Crash type: Heap-use-after-free READ 8
Crash state:
gx_monitor_free
icc_linkcache_finalize
i_free_object
```


Summary: Heap-buffer-overflow in Exiv2::MemIo::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50901

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
Exiv2::MemIo::read
Exiv2::BasicIo::readOrThrow
Exiv2::QuickTimeVideo::tagDecoder
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50924

```
Crash type: Heap-use-after-free WRITE 8
Crash state:
mk_event_timeout_destroy
flb_sched_destroy
flb_config_exit
```

Summary: Heap-use-after-free in mk_event_timeout_destroy


Summary: Use-of-uninitialized-value in json_buildv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50949

```
Crash type: Use-of-uninitialized-value
Crash state:
json_buildv
json_build
show_boot_entries
```


Summary: Heap-buffer-overflow in jxl::N_AVX2::BlendingStage::ProcessPaddingRow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50915

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
jxl::N_AVX2::BlendingStage::ProcessPaddingRow
jxl::LowMemoryRenderPipeline::RenderPadding
jxl::LowMemoryRenderPipeline::ProcessBuffers
```


Summary: Heap-buffer-overflow in DetectGetLastSMFromMpmLists

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50929

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
DetectGetLastSMFromMpmLists
DetectFastPatternSetup
SigParse
```


Summary: Heap-buffer-overflow in Core::Stream::File::open_path

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43978

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
Core::Stream::File::open_path
Core::Stream::File::open
Audio::FlacLoaderPlugin::FlacLoaderPlugin
```


Summary: Negative-size-param in wc_Sha3_256_Final

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50953

```
Crash type: Negative-size-param
Crash state:
wc_Sha3_256_Final
wc_Hash
wc_RsaPad_ex
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50946

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
wc_Shake256_Final
wc_ed448_sign_msg_ex
wc_ed448_sign_msg
```

Summary: Stack-buffer-overflow in wc_Shake256_Final


Summary: Heap-buffer-overflow in _cmsMAT3per

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50956

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
_cmsMAT3per
OptimizeMatrixShaper
_cmsOptimizePipeline
```


Summary: Heap-use-after-free in ndlz4_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50991

```
Crash type: Heap-use-after-free READ 4
Crash state:
ndlz4_decompress
blosc_d
do_job
```


Summary: Heap-buffer-overflow in pcpp::HttpRequestFirstLine::parseVersion

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51006

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pcpp::HttpRequestFirstLine::parseVersion
pcpp::HttpRequestFirstLine::HttpRequestFirstLine
pcpp::HttpRequestLayer::HttpRequestLayer
```


Summary: UNKNOWN READ in pdfi_setcolorN

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43994

```
Crash type: UNKNOWN READ
Crash state:
pdfi_setcolorN
pdfi_interpret_stream_operator
pdfi_interpret_content_stream
```