Summary: Segv on unknown address in dwg_free_MTEXTATTRIBUTEOBJECTCONTEXTDATA_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32604

```
Crash type: Segv on unknown address
Crash state:
dwg_free_MTEXTATTRIBUTEOBJECTCONTEXTDATA_private
dwg_free_MTEXTATTRIBUTEOBJECTCONTEXTDATA
dwg_free_variable_no_class
```


Summary: Stack-use-after-return in v9fs_string_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32624

```
Crash type: Stack-use-after-return READ 8
Crash state:
v9fs_string_free
v9fs_xattrwalk
coroutine_trampoline
```


Summary: UNKNOWN READ in unsigned short flatbuffers::ReadScalar<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32647

```
Crash type: UNKNOWN READ
Crash state:
unsigned short flatbuffers::ReadScalar<unsigned short>
flatbuffers::Table::GetOptionalFieldOffset
flatbuffers::Table::CheckField
```


Summary: Heap-buffer-overflow in ebitmap_match_any

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32675

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
ebitmap_match_any
avtab_map
cil_check_neverallow
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32682

```
Crash type: Use-of-uninitialized-value
Crash state:
void intra_prediction_angular<unsigned short>
void decode_intra_prediction_internal<unsigned short>
decode_intra_prediction
```

Summary: Use-of-uninitialized-value in void intra_prediction_angular<unsigned short>


Summary: Segv on unknown address

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32767

```
Crash type: Segv on unknown address
Crash state:
NULL```


Summary: Heap-use-after-free in std::__1::vector<char, std::__1::allocator<char> >::size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32822

```
Crash type: Heap-use-after-free READ 8
Crash state:
std::__1::vector<char, std::__1::allocator<char> >::size
std::__1::vector<char, std::__1::allocator<char> >::resize
Assimp::TXmlParser<pugi::xml_node>::clear
```


Summary: Global-buffer-overflow in read_coding_unit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32791

```
Crash type: Global-buffer-overflow READ 1
Crash state:
read_coding_unit
read_coding_quadtree
read_coding_quadtree
```


Summary: Stack-buffer-overflow in read_mft_common

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32837

```
Crash type: Stack-buffer-overflow WRITE 1
Crash state:
read_mft_common
bool read_tag_mft1<skcms_B2A>
read_b2a
```


Summary: Heap-buffer-overflow in H5O__sdspace_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29517

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
H5O__sdspace_decode
H5O_sdspace_shared_decode
H5O_attr_decode
```


Summary: Heap-buffer-overflow in gif_internal_decode_frame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32855

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
gif_internal_decode_frame
gif_decode_frame
vips_foreign_load_nsgif_generate
```


Summary: Heap-buffer-overflow in read_paint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32913

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
read_paint
tt_face_get_paint
FT_Get_Paint
```


Summary: Heap-buffer-overflow in TextPool::getPool

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32952

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
TextPool::getPool
TextPage::coalesce
TextOutputDev::endPage
```


Summary: Heap-buffer-overflow in get_word_rgb_row

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32964

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
get_word_rgb_row
tjLoadImage
compress.cc
```


Summary: Heap-buffer-overflow in ossl_aria_set_encrypt_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33022

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ossl_aria_set_encrypt_key
cipher_hw_aria_initkey
cipher_generic_init_internal
```


Summary: Use-of-uninitialized-value in DES_set_key_unchecked

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33023

```
Crash type: Use-of-uninitialized-value
Crash state:
DES_set_key_unchecked
ossl_cipher_hw_tdes_ede3_initkey
tdes_init
```


Summary: Heap-buffer-overflow in Camellia_Ekeygen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33028

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Camellia_Ekeygen
Camellia_set_key
cipher_hw_camellia_initkey
```


Summary: Stack-use-after-return in v9fs_setattr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32995

```
Crash type: Stack-use-after-return READ 4
Crash state:
v9fs_setattr
coroutine_trampoline
```


Summary: Heap-buffer-overflow in OT::AnchorFormat1* hb_serialize_context_t::embed<OT::AnchorFormat1>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33031

```
Crash type: Heap-buffer-overflow READ 6
Crash state:
OT::AnchorFormat1* hb_serialize_context_t::embed<OT::AnchorFormat1>
OT::AnchorFormat1::copy
OT::Anchor::subset
```


Summary: UNKNOWN READ in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33017

```
Crash type: UNKNOWN READ
Crash state:
helper_uc_tracecode
```


Summary: Segv on unknown address in dwg_free_summaryinfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33059

```
Crash type: Segv on unknown address
Crash state:
dwg_free_summaryinfo
dwg_free
llvmfuzz.c
```


Summary: Heap-buffer-overflow in frame_get_vlmetalayers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33071

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
frame_get_vlmetalayers
frame_to_schunk
blosc2_schunk_from_buffer
```


Summary: Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33052

```
Crash type: Null-dereference READ
Crash state:
NULL```


Summary: Heap-buffer-overflow in load_u32_be

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33039

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
load_u32_be
ossl_sm4_set_key
cipher_hw_sm4_initkey
```


Summary: Heap-buffer-overflow in ih264d_decode_slice_thread

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33167

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ih264d_decode_slice_thread
ih264d_decode_picture_thread
clone
```


Summary: Heap-use-after-free in std::__1::__tree_iterator<std::__1::__value_type<std::__1::basic_string<char, st

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33227

```
Crash type: Heap-use-after-free READ 8
Crash state:
std::__1::__tree_iterator<std::__1::__value_type<std::__1::basic_string<char, st
void draco::Metadata::AddEntry<std::__1::vector<unsigned char, std::__1::allocat
draco::MetadataDecoder::DecodeEntry
```


Summary: Heap-buffer-overflow in blosc_d

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33264

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
blosc_d
_blosc_getitem
blosc2_getitem_ctx
```


Summary: Heap-buffer-overflow in H5MM_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29500

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
H5MM_memcpy
H5O_attr_decode
H5O_attr_shared_decode
```


Summary: Heap-buffer-overflow in frame_get_metalayers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33251

```
Crash type: Heap-buffer-overflow READ 6
Crash state:
frame_get_metalayers
frame_to_schunk
blosc2_schunk_from_buffer
```


Summary: Heap-buffer-overflow in op_Const64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33318

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
op_Const64
EvaluateExpression
InitElements
```


Summary: UNKNOWN READ in blosc_d

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33292

```
Crash type: UNKNOWN READ
Crash state:
blosc_d
do_job
blosc_run_decompression_with_context
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33315

```
Crash type: Heap-use-after-free READ 8
Crash state:
std::__1::__tree_iterator<std::__1::__value_type<std::__1::basic_string<char, st
draco::Metadata::AddSubMetadata
draco::MetadataDecoder::DecodeMetadata
```


Summary: Heap-use-after-free in zend_gc_delref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33335

```
Crash type: Heap-use-after-free READ 4
Crash state:
zend_gc_delref
zval_delref_p
zval_ptr_dtor_nogc
```


Summary: Heap-use-after-free in ZSTD_freeDDict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33324

```
Crash type: Heap-use-after-free READ 4
Crash state:
ZSTD_freeDDict
blosc2_free_ctx
blosc2_schunk_free
```


Summary: Heap-buffer-overflow in decode_mcu_fast

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33340

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
decode_mcu_fast
decode_mcu
consume_data
```


Summary: UNKNOWN READ in op_BranchIfPrologue_s

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33397

```
Crash type: UNKNOWN READ
Crash state:
op_BranchIfPrologue_s
m3_CallVL
m3_CallV
```


Summary: Heap-use-after-free in module_check_cast

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33444

```
Crash type: Heap-use-after-free READ 4
Crash state:
module_check_cast
server_connect_unref
server_unref
```


Summary: Heap-buffer-overflow in _estrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33445

```
Crash type: Heap-buffer-overflow READ 12
Crash state:
_estrdup
exif_process_user_comment
exif_process_IFD_TAG_impl
```


Summary: Stack-use-after-return in pdf14_initialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33529

```
Crash type: Stack-use-after-return WRITE 8
Crash state:
pdf14_initialize
pdf14_procs_initialize
pdf14_RGB_initialize
```


Summary: Heap-buffer-overflow in _estrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33495

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
_estrdup
exif_process_user_comment
exif_process_IFD_TAG_impl
```


Summary: Heap-buffer-overflow in av1_free_cdef_buffers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33480

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
av1_free_cdef_buffers
decoder_destroy
aom_codec_destroy
```


Summary: Heap-buffer-overflow in av1_cdef_init_fb_row_mt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33511

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
av1_cdef_init_fb_row_mt
av1_cdef_fb_row
cdef_sb_row_worker_hook
```


Summary: Heap-buffer-overflow in op_Const64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33554

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
op_Const64
EvaluateExpression
m3_LoadModule
```


Summary: Heap-buffer-overflow in grk::FileFormatDecompress::apply_palette_clr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33544

```
Crash type: Heap-buffer-overflow WRITE 16
Crash state:
grk::FileFormatDecompress::apply_palette_clr
grk::FileFormatDecompress::applyColour
grk_decompress_fuzzer.cpp
```


Summary: UNKNOWN WRITE in CompileBlock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33555

```
Crash type: UNKNOWN WRITE
Crash state:
CompileBlock
Compile_LoopOrBlock
CompileBlockStatements
```


Summary: Heap-buffer-overflow in strlcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33556

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
strlcpy
parse_lxc_mntopts
set_config_rootfs_options
```


Summary: UNKNOWN WRITE in InitDataSegments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33663

```
Crash type: UNKNOWN WRITE
Crash state:
InitDataSegments
CompileBlockStatements
CompileBlock
```


Summary: Segv on unknown address in std::__Fuzzer::basic_string<char, std::__Fuzzer::char_traits<char>, std::__Fuzze

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33682

```
Crash type: Segv on unknown address
Crash state:
std::__Fuzzer::basic_string<char, std::__Fuzzer::char_traits<char>, std::__Fuzze
std::__Fuzzer::moneypunct_byname<char, true>::init
```


Summary: UNKNOWN WRITE in Runtime_Release

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33689

```
Crash type: UNKNOWN WRITE
Crash state:
Runtime_Release
EvaluateExpression
InitDataSegments
```


Summary: Stack-buffer-overflow in XCFImageFormat::loadTileRLE

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33742

```
Crash type: Stack-buffer-overflow WRITE 1
Crash state:
XCFImageFormat::loadTileRLE
XCFImageFormat::loadLevel
XCFImageFormat::loadHierarchy
```


Summary: UNKNOWN READ in ntlm_decode_type2_target

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33720

```
Crash type: UNKNOWN READ
Crash state:
ntlm_decode_type2_target
Curl_auth_decode_ntlm_type2_message
Curl_sasl_continue
```


Summary: UNKNOWN READ in m3_Realloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33744

```
Crash type: UNKNOWN READ
Crash state:
m3_Realloc
InitMemory
CompileBlockStatements
```


Summary: UNKNOWN WRITE in m3_FreeModule

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33726

```
Crash type: UNKNOWN WRITE
Crash state:
m3_FreeModule
_FreeModule
Compile_ExtendedOpcode
```


Summary: UNKNOWN READ in blosc_d

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29171

```
Crash type: UNKNOWN READ
Crash state:
blosc_d
do_job
blosc_run_decompression_with_context
```


Summary: UNKNOWN READ in ReadLEB_u32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33749

```
Crash type: UNKNOWN READ
Crash state:
ReadLEB_u32
InitElements
Compile_ExtendedOpcode
```


Summary: Heap-use-after-free in m3_FreeRuntime

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33765

```
Crash type: Heap-use-after-free READ 8
Crash state:
m3_FreeRuntime
fuzzer.c
Runtime_Release
```


Summary: Heap-double-free in flb_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33750

```
Crash type: Heap-double-free
Crash state:
flb_free
flb_parser_json_do
flb_parser_do
```


Summary: Container-overflow in unsigned long jsoncons::detail::escape_string<char, jsoncons::string_sink<std::_

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33781

```
Crash type: Container-overflow READ 1
Crash state:
unsigned long jsoncons::detail::escape_string<char, jsoncons::string_sink<std::_
jsoncons::basic_json_encoder<char, jsoncons::string_sink<std::__1::basic_string<
jsoncons::basic_json_visitor<char>::key
```


Summary: Heap-use-after-free in iov_from_buf_full

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33785

```
Crash type: Heap-use-after-free WRITE 2
Crash state:
iov_from_buf_full
iov_from_buf
virtio_net_receive_rcu
```


Summary: Heap-use-after-free in AK::StringView::StringView

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33852

```
Crash type: Heap-use-after-free READ 8
Crash state:
AK::StringView::StringView
void AK::__format_value<AK::String>
AK::vformat_impl
```


Summary: Heap-use-after-free in real_param

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33862

```
Crash type: Heap-use-after-free READ 1
Crash state:
real_param
zpdfinkpath
interp
```


Summary: Heap-buffer-overflow in tt_face_get_paint_layers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33855

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
tt_face_get_paint_layers
FT_Get_Paint_Layers
colrv1_traverse_paint
```


Summary: UNKNOWN READ in libfsext_directory_entry_read_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33935

```
Crash type: UNKNOWN READ
Crash state:
libfsext_directory_entry_read_data
libfsext_directory_read_inline_data
libfsext_directory_read_file_io_handle
```


Summary: UNKNOWN READ in MEM_read32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33956

```
Crash type: UNKNOWN READ
Crash state:
MEM_read32
ZSTD_compressBlock_greedy_extDict_row
ZSTD_ldm_blockCompress
```


Summary: UNKNOWN WRITE in _fini

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33944

```
Crash type: UNKNOWN WRITE
Crash state:
_fini
```


Summary: Global-buffer-overflow in libfsext_inode_read_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33940

```
Crash type: Global-buffer-overflow READ {*}
Crash state:
libfsext_inode_read_data
libfsext_inode_read_element_data
libfdata_vector_get_element_value_by_index
```


Summary: Heap-use-after-free in cleanup_live_vars

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33947

```
Crash type: Heap-use-after-free READ 4
Crash state:
cleanup_live_vars
zend_cleanup_unfinished_execution
zend_generator_cleanup_unfinished_execution
```


Summary: Heap-buffer-overflow in readstat_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33991

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
readstat_convert
sav_process_row
sav_read_uncompressed_data
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34047

```
Crash type: Use-of-uninitialized-value
Crash state:
decode_CABAC_FL_bypass
decode_coeff_abs_level_remaining
residual_coding
```

Summary: Use-of-uninitialized-value in decode_CABAC_FL_bypass


Summary: Stack-use-after-return in zend_fiber_suspend_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34013

```
Crash type: Stack-use-after-return READ 4
Crash state:
zend_fiber_suspend_context
zend_fiber_suspend
zim_Fiber_suspend
```


Summary: Stack-buffer-overflow in flb_sds_cat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34025

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
flb_sds_cat
flb_ra_translate
record_ac_fuzzer.c
```


Summary: Heap-buffer-overflow in skip_to_next_entry

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34110

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
skip_to_next_entry
get_exception_handler
_PyEval_EvalFrameDefault
```


Summary: Heap-double-free in flb_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34116

```
Crash type: Heap-double-free
Crash state:
flb_free
flb_parser_json_do
flb_parser_do
```


Summary: Use-of-uninitialized-value in nn_check_initialized

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34156

```
Crash type: Use-of-uninitialized-value
Crash state:
nn_check_initialized
nn_zero
ecgdsa_sign_raw
```


Summary: Heap-buffer-overflow in std::__1::char_traits<char>::length

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34230

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
std::__1::char_traits<char>::length
std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
ODDLParser::logInvalidTokenError
```


Summary: Stack-buffer-overflow in TranslateNumber_1

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34285

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
TranslateNumber_1
TranslateNumber
TranslateWord3
```


Summary: Heap-use-after-free in LookupDict2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34298

```
Crash type: Heap-use-after-free READ 4
Crash state:
LookupDict2
LookupDictList
Lookup
```


Summary: Negative-size-param in frame_get_vlmetalayers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34259

```
Crash type: Negative-size-param
Crash state:
frame_get_vlmetalayers
frame_to_schunk
blosc2_schunk_from_buffer
```


Summary: Heap-buffer-overflow in string_decoder_getc_utf_8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34299

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
string_decoder_getc_utf_8
text_decoder_getc
GetC
```


Summary: Stack-buffer-overflow in TranslateClause

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34332

```
Crash type: Stack-buffer-overflow READ 16
Crash state:
TranslateClause
SpeakNextClause
Synthesize
```


Summary: Heap-use-after-free in dwg_free_TABLEGEOMETRY_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34377

```
Crash type: Heap-use-after-free READ 8
Crash state:
dwg_free_TABLEGEOMETRY_private
dwg_free_TABLEGEOMETRY
dwg_free_variable_no_class
```


Summary: Heap-buffer-overflow in _m3d_safestr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34416

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
_m3d_safestr
m3d_load
Assimp::M3DWrapper::M3DWrapper
```


Summary: UNKNOWN READ in std::__1::__tree<std::__1::__value_type<Json::Value::CZString, Json::Value>, std

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34443

```
Crash type: UNKNOWN READ
Crash state:
std::__1::__tree<std::__1::__value_type<Json::Value::CZString, Json::Value>, std
std::__1::map<Json::Value::CZString, Json::Value, std::__1::less<Json::Value::CZ
Json::Value::begin
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34461

```
Crash type: Heap-use-after-free READ 4
Crash state:
xmlAddNextSibling
xmlXIncludeCopyRange
xmlXIncludeCopyXPointer
```

Summary: Heap-use-after-free in xmlAddNextSibling


Summary: UNKNOWN READ in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34457

```
Crash type: UNKNOWN READ
Crash state:
helper_uc_tracecode
```


Summary: Heap-buffer-overflow in _blosc_getitem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34458

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
_blosc_getitem
blosc2_getitem_ctx
blosc2_getitem
```


Summary: UNKNOWN READ in Json::decodePrefixedString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34484

```
Crash type: UNKNOWN READ
Crash state:
Json::decodePrefixedString
Json::Value::asString
perfetto::trace_processor::json::AddJsonValueToArgs
```


Summary: Global-buffer-overflow in IsLetterGroup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34494

```
Crash type: Global-buffer-overflow READ 1
Crash state:
IsLetterGroup
MatchRule
TranslateRules
```


Summary: Heap-buffer-overflow in processClientServerHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34500

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
processClientServerHello
processTLSBlock
ndpi_search_tls_tcp
```


Summary: Heap-buffer-overflow in jxl::PerformAlphaWeightedAdd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34518

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
jxl::PerformAlphaWeightedAdd
jxl::PerformBlending
jxl::ImageBlender::RectBlender::DoBlending
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34533

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
string_decoder_getc_utf_8
text_decoder_getc
GetC
```


Summary: UNKNOWN READ in [heap]

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34575

```
Crash type: UNKNOWN READ
Crash state:
[heap]
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34531

```
Crash type: UNKNOWN READ
Crash state:
std::__1::__tree<std::__1::__value_type<Json::Value::CZString, Json::Value>, std
std::__1::map<Json::Value::CZString, Json::Value, std::__1::less<Json::Value::CZ
Json::Value::begin
```


Summary: Heap-use-after-free in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34584

```
Crash type: Heap-use-after-free WRITE 8
Crash state:
AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr
AK::String::String
JS::abstract_relation
```


Summary: Heap-buffer-overflow in mrb_format_float

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34652

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
mrb_format_float
fmt_float
mrb_str_format
```


Summary: Uncaught exception

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34646

```
Crash type: Uncaught exception
Crash state:
NULL```


Summary: UNKNOWN READ in mrb_ary_shift_m

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34691

```
Crash type: UNKNOWN READ
Crash state:
mrb_ary_shift_m
mrb_vm_exec
mrb_vm_run
```


Summary: Heap-buffer-overflow in ldl_he_p

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29181

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ldl_he_p
ldn_he_p
flatview_write_continue
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34665

```
Crash type: UNKNOWN READ
Crash state:
std::__1::__tree<std::__1::__value_type<Json::Value::CZString, Json::Value>, std
std::__1::map<Json::Value::CZString, Json::Value, std::__1::less<Json::Value::CZ
Json::Value::begin
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34692

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
InterpretCondition
InterpretPhoneme
MakePhonemeList
```

Summary: Stack-buffer-overflow in InterpretCondition


Summary: Heap-buffer-overflow in sampled_data_finish

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34675

```
Crash type: Heap-buffer-overflow WRITE 16
Crash state:
sampled_data_finish
sampled_data_continue
interp
```


Summary: Heap-use-after-free in AK::NonnullOwnPtr<JS::IndexedPropertyStorage>::operator->

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34688

```
Crash type: Heap-use-after-free READ 8
Crash state:
AK::NonnullOwnPtr<JS::IndexedPropertyStorage>::operator->
JS::IndexedProperties::array_like_size
JS::IndexedProperties::append
```


Summary: Stack-buffer-overflow in DecodeSingleResponse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34713

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
DecodeSingleResponse
DecodeResponseData
DecodeBasicOcspResponse
```


Summary: Global-buffer-overflow in DoEmbedded2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34718

```
Crash type: Global-buffer-overflow READ 4
Crash state:
DoEmbedded2
CalcLengths
SpeakNextClause
```


Summary: Global-buffer-overflow in SubstitutePhonemes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34747

```
Crash type: Global-buffer-overflow READ 2
Crash state:
SubstitutePhonemes
MakePhonemeList
TranslateClause
```


Summary: Segv on unknown address in GetASNHeader_ex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34719

```
Crash type: Segv on unknown address
Crash state:
GetASNHeader_ex
GetASNHeader
GetASNInt
```


Summary: Uncaught exception in com.esotericsoftware.kryo.serializers.FieldSerializer.read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34733

```
Crash type: Uncaught exception
Crash state:
com.esotericsoftware.kryo.serializers.FieldSerializer.read
com.esotericsoftware.kryo.Kryo.readObject
DeserializeStringFuzzer.fuzzerTestOneInput
```


Summary: Use-of-uninitialized-value in StandardSecurityHandler::StandardSecurityHandler

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34778

```
Crash type: Use-of-uninitialized-value
Crash state:
StandardSecurityHandler::StandardSecurityHandler
SecurityHandler::make
PDFDoc::checkEncryption
```


Summary: UNKNOWN WRITE in dwg_free_BLOCK_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34766

```
Crash type: UNKNOWN WRITE
Crash state:
dwg_free_BLOCK_private
dwg_free_BLOCK
dwg_free_object
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34831

```
Crash type: UNKNOWN READ
Crash state:
virtio_gpu_disable_scanout
virtio_gpu_set_scanout
virtio_gpu_simple_process_cmd
```

Summary: UNKNOWN READ in virtio_gpu_disable_scanout


Summary: Stack-buffer-overflow in jsoncons::bson::decimal128_to_chars

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34816

```
Crash type: Stack-buffer-overflow WRITE 6
Crash state:
jsoncons::bson::decimal128_to_chars
jsoncons::bson::basic_bson_parser<jsoncons::binary_stream_source, std::__1::allo
jsoncons::bson::basic_bson_parser<jsoncons::binary_stream_source, std::__1::allo
```


Summary: Heap-buffer-overflow in AK::Formatter<char const*, void>::format

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34863

```
Crash type: Heap-buffer-overflow READ 3
Crash state:
AK::Formatter<char const*, void>::format
void AK::__format_value<char const*>
AK::vformat_impl
```


Summary: UNKNOWN READ in FuzzedFileProvider::seek

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34845

```
Crash type: UNKNOWN READ
Crash state:
FuzzedFileProvider::seek
_IO_do_write
_IO_file_close_it
```


Summary: Heap-use-after-free in AK::Utf8CodePointIterator::operator*

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34911

```
Crash type: Heap-use-after-free READ 1
Crash state:
AK::Utf8CodePointIterator::operator*
AK::URLParser::parse
AK::URL::URL
```


Summary: Heap-use-after-free in multiline_parser_conf_file

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34960

```
Crash type: Heap-use-after-free READ 8
Crash state:
multiline_parser_conf_file
flb_parser_conf_file
config_fuzzer.c
```


Summary: Use-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34971

```
Crash type: Use-after-poison WRITE 8
Crash state:
AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr
AK::String::String
JS::abstract_relation
```


Summary: Heap-use-after-free in AK::StringImpl::create

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34973

```
Crash type: Heap-use-after-free READ {*}
Crash state:
AK::StringImpl::create
AK::String::String
AK::URLParser::parse_data_url
```


Summary: Use-after-poison in AK::NonnullOwnPtr<JS::IndexedPropertyStorage>::operator->

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35038

```
Crash type: Use-after-poison READ 8
Crash state:
AK::NonnullOwnPtr<JS::IndexedPropertyStorage>::operator->
JS::IndexedProperties::array_like_size
JS::IndexedProperties::append
```


Summary: Heap-buffer-overflow in frame_get_vlmetalayers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35086

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
frame_get_vlmetalayers
frame_to_schunk
blosc2_schunk_from_buffer
```


Summary: Negative-size-param in mrb_str_format

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35109

```
Crash type: Negative-size-param
Crash state:
mrb_str_format
mrb_f_sprintf
mrb_vm_exec
```


Summary: Heap-buffer-overflow in proto_item_append_text

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35102

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
proto_item_append_text
dissect_pfcp_3gpp_enterprise_ies
call_dissector_work
```


Summary: Heap-buffer-overflow in jxl::ThreadPool::RunCallState<jxl::ConvertToExternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35172

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
jxl::ThreadPool::RunCallState<jxl::ConvertToExternal
jpegxl::ThreadParallelRunner::ThreadFunc
void* std::__1::__thread_proxy<std::__1::tuple<std::__1::unique_ptr<std::__1::__
```


Summary: Heap-buffer-overflow in mk_rconf_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35185

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
mk_rconf_read
mk_rconf_open
flb_parser_conf_file
```


Summary: Heap-buffer-overflow in mk_string_copy_substr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35202

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
mk_string_copy_substr
mk_rconf_meta_add
mk_rconf_read
```


Summary: Use-of-uninitialized-value in jxl::N_SCALAR::Epf0Row

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35234

```
Crash type: Use-of-uninitialized-value
Crash state:
jxl::N_SCALAR::Epf0Row
jxl::FilterPipeline::ApplyFiltersRow
jxl::FinalizeImageRect
```


Summary: Heap-buffer-overflow in FSE_writeNCount_generic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35209

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
FSE_writeNCount_generic
FSE_writeNCount
HUF_compressWeights
```


Summary: Use-of-uninitialized-value in jxl::N_AVX2::FloatToRGBA8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35231

```
Crash type: Use-of-uninitialized-value
Crash state:
jxl::N_AVX2::FloatToRGBA8
jxl::FinalizeImageRect
jxl::ThreadPool::RunCallState<jxl::FinalizeFrameDecoding
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35251

```
Crash type: Use-after-poison WRITE 8
Crash state:
AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr
AK::String::String
JS::abstract_relation
```


Summary: Heap-buffer-overflow in ndpi_set_detected_protocol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35288

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ndpi_set_detected_protocol
ndpi_match_hostname_protocol
processClientServerHello
```


Summary: Heap-use-after-free in jxl::ImageBlender::PrepareBlending

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35293

```
Crash type: Heap-use-after-free READ 8
Crash state:
jxl::ImageBlender::PrepareBlending
jxl::FinalizeFrameDecoding
jxl::FrameDecoder::Flush
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35300

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ndpi_set_detected_protocol
ndpi_int_http_add_connection
check_content_type_and_change_protocol
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35337

```
Crash type: Use-after-poison WRITE 8
Crash state:
AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr
AK::String::String
JS::abstract_relation
```


Summary: Uncaught exception

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35392

```
Crash type: Uncaught exception
Crash state:
NULL```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35436

```
Crash type: Use-after-poison WRITE 8
Crash state:
AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr
AK::String::String
JS::abstract_relation
```


Summary: Heap-buffer-overflow in __cil_cat_expr_range_to_bitmap_helper

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35492

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
__cil_cat_expr_range_to_bitmap_helper
__cil_expr_to_bitmap
__evaluate_cat_expression
```


Summary: Heap-buffer-overflow in explicit_bzero

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35485

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
explicit_bzero
crypto_free
ssh_disconnect
```


Summary: Segv on unknown address in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35514

```
Crash type: Segv on unknown address
Crash state:
helper_uc_tracecode
```


Summary: Heap-buffer-overflow in ZSTD_decompressMultiFrame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35537

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
ZSTD_decompressMultiFrame
ZSTD_decompress_usingDDict
blosc_d
```


Summary: Negative-size-param in WebPRescalerInit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35583

```
Crash type: Negative-size-param
Crash state:
WebPRescalerInit
AllocateAndInitRescaler
VP8LDecodeImage
```


Summary: Heap-buffer-overflow in ebitmap_match_any

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35553

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
ebitmap_match_any
avtab_map
cil_check_neverallow
```


Summary: UNKNOWN WRITE in QOutlineMapper::convertPath

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35566

```
Crash type: UNKNOWN WRITE
Crash state:
QOutlineMapper::convertPath
QRasterPaintEngine::fill
QPaintEngineEx::stroke
```


Summary: UNKNOWN READ in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35567

```
Crash type: UNKNOWN READ
Crash state:
helper_uc_tracecode
```


Summary: Heap-buffer-overflow in decode_header_value_literal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35675

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
decode_header_value_literal
decode_header
h2o_hpack_parse_request
```


Summary: Heap-use-after-free in tsk_fs_attr_set_run

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35684

```
Crash type: Heap-use-after-free READ 8
Crash state:
tsk_fs_attr_set_run
fatfs_make_data_runs
tsk_fs_file_attr_check
```


Summary: Heap-buffer-overflow in OT::CPALV1Tail::serialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35672

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
OT::CPALV1Tail::serialize
OT::CPAL::subset
bool _try_subset<OT::CPAL>
```


Summary: Heap-buffer-overflow in mrb_vm_exec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35712

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
mrb_vm_exec
mrb_vm_run
mrb_top_run
```


Summary: Heap-buffer-overflow in dispatch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35727

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
dispatch
dispatch_linked
codegen
```


Summary: UNKNOWN READ in mrb_vm_ci_env

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35718

```
Crash type: UNKNOWN READ
Crash state:
mrb_vm_ci_env
cipop
mrb_vm_exec
```


Summary: Stack-buffer-overflow in sc_asn1_read_tag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35766

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
sc_asn1_read_tag
sc_asn1_find_tag
piv_compute_signature
```


Summary: Use-of-uninitialized-value in jxl::ModularFrameDecoder::DecodeAcMetadata

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35778

```
Crash type: Use-of-uninitialized-value
Crash state:
jxl::ModularFrameDecoder::DecodeAcMetadata
jxl::FrameDecoder::ProcessDCGroup
jxl::ThreadPool::RunCallState<jxl::Status
```


Summary: UNKNOWN READ in v_FindFunction

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35801

```
Crash type: UNKNOWN READ
Crash state:
v_FindFunction
m3_FindFunction
fuzzer.c
```


Summary: Stack-buffer-overflow in bool re2::DFA::InlinedSearchLoop<true, true, true>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35821

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
bool re2::DFA::InlinedSearchLoop<true, true, true>
re2::DFA::Search
re2::Prog::SearchDFA
```


Summary: Heap-buffer-overflow in check_bad_address

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35868

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
check_bad_address
check_for_bogus_wildcard
FuzzCheckForBogusWildcard
```


Summary: Stack-buffer-overflow in is_same_net6

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35889

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
is_same_net6
dhcp6_maybe_relay
dhcp6_maybe_relay
```


Summary: Heap-use-after-free in zend_gc_addref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35876

```
Crash type: Heap-use-after-free READ 4
Crash state:
zend_gc_addref
ZEND_ASSIGN_OP_SPEC_VAR_TMPVAR_HANDLER
fuzzer_execute_ex
```


Summary: Heap-buffer-overflow in dhcp_reply

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35870

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
dhcp_reply
dhcp_packet
FuzzDhcp
```


Summary: Heap-buffer-overflow in extract_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35858

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
extract_name
hash_questions
fuzz_util.c
```


Summary: Heap-buffer-overflow in extract_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35861

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
extract_name
answer_auth
FuzzAuth
```


Summary: Heap-buffer-overflow in resize_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35898

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
resize_packet
FuzzResizePacket
fuzz_rfc1035.c
```


Summary: Heap-buffer-overflow in print_mac

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35887

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
print_mac
log_packet
dhcp_reply
```


Summary: Heap-buffer-overflow in extract_addresses

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35865

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
extract_addresses
FuzzExtractTheAddress
fuzz_rfc1035.c
```


Summary: Heap-buffer-overflow in answer_request

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35920

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
answer_request
FuzzAnswerTheRequest
fuzz_rfc1035.c
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35912

```
Crash type: Segv on unknown address
Crash state:
helper_uc_tracecode
```


Summary: Heap-buffer-overflow in json_string_unescape

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35925

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
json_string_unescape
after_value
execute_callbacks
```


Summary: Dynamic-stack-buffer-overflow in hsql::SQLParserResult::addStatement

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35946

```
Crash type: Dynamic-stack-buffer-overflow WRITE 8
Crash state:
hsql::SQLParserResult::addStatement
hsql_parse
hsql::SQLParser::parse
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35950

```
Crash type: Use-of-uninitialized-value
Crash state:
residual_coding
read_transform_unit
read_transform_tree
```

Summary: Use-of-uninitialized-value in residual_coding


Summary: Dynamic-stack-buffer-overflow in std::__1::__wrap_iter<hsql::Expr**>::__wrap_iter

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35944

```
Crash type: Dynamic-stack-buffer-overflow WRITE 8
Crash state:
std::__1::__wrap_iter<hsql::Expr**>::__wrap_iter
std::__1::vector<hsql::Expr*, std::__1::allocator<hsql::Expr*> >::__make_iter
std::__1::vector<hsql::Expr*, std::__1::allocator<hsql::Expr*> >::begin
```


Summary: Stack-buffer-overflow in Buffer_AppendIndentUnchecked

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36009

```
Crash type: Stack-buffer-overflow WRITE 1
Crash state:
Buffer_AppendIndentUnchecked
encode
encode
```


Summary: Dynamic-stack-buffer-overflow in mdb_numeric_to_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35972

```
Crash type: Dynamic-stack-buffer-overflow WRITE 16
Crash state:
mdb_numeric_to_string
mdb_xfer_bound_data
_mdb_attempt_bind
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36056

```
Crash type: UNKNOWN READ
Crash state:
void mc_chroma<unsigned short>
generate_inter_prediction_samples
decode_prediction_unit
```

Summary: UNKNOWN READ in void mc_chroma<unsigned short>


Summary: Heap-buffer-overflow in blosc_run_decompression_with_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36093

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
blosc_run_decompression_with_context
blosc2_decompress_ctx
frame_decompress_chunk
```


Summary: Dynamic-stack-buffer-overflow in CryptDigestUpdateInt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36074

```
Crash type: Dynamic-stack-buffer-overflow WRITE 8
Crash state:
CryptDigestUpdateInt
ComputeCpHash
CheckCommandAudit
```


Summary: Dynamic-stack-buffer-overflow in std::__1::pair<unsigned int, unsigned int>::pair<unsigned int, unsigned int, fal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36062

```
Crash type: Dynamic-stack-buffer-overflow WRITE 4
Crash state:
std::__1::pair<unsigned int, unsigned int>::pair<unsigned int, unsigned int, fal
std::__1::pair<std::__1::__unwrap_ref_decay<unsigned int>::type, std::__1::__unw
void GFWX::decode<short>
```


Summary: Heap-buffer-overflow in stbi__convert_16_to_8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36087

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
stbi__convert_16_to_8
stbi__load_and_postprocess_8bit
stbi_load_from_memory
```


Summary: Use-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36127

```
Crash type: Use-after-poison WRITE 8
Crash state:
AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr
AK::String::String
JS::abstract_relation
```


Summary: Dynamic-stack-buffer-overflow in fmt::v8::detail::dragonbox::umul192_upper64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36110

```
Crash type: Dynamic-stack-buffer-overflow WRITE 8
Crash state:
fmt::v8::detail::dragonbox::umul192_upper64
fmt::v8::detail::dragonbox::cache_accessor<double>::compute_mul
fmt::v8::detail::dragonbox::decimal_fp<double> fmt::v8::detail::dragonbox::to_de
```


Summary: Heap-buffer-overflow in ZSTD_createDDict_advanced

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36103

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
ZSTD_createDDict_advanced
ZSTD_createDDict
blosc_run_decompression_with_context
```


Summary: Dynamic-stack-buffer-overflow in std::__1::__wrap_iter<char const*>::__wrap_iter

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36137

```
Crash type: Dynamic-stack-buffer-overflow WRITE 8
Crash state:
std::__1::__wrap_iter<char const*>::__wrap_iter
std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
geos::io::StringTokenizer::StringTokenizer
```


Summary: Heap-use-after-free in pdfi_dereference

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43268

```
Crash type: Heap-use-after-free READ 4
Crash state:
pdfi_dereference
pdfi_dict_next
pdfi_check_Resources
```


Summary: Heap-buffer-overflow in check_bad_address

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43308

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
check_bad_address
check_for_bogus_wildcard
FuzzCheckForBogusWildcard
```


Summary: Stack-buffer-overflow in sgets

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44160

```
Crash type: Stack-buffer-overflow WRITE 1
Crash state:
sgets
pdfi_read_bytes
read_xref_entry_slow
```


Summary: Heap-buffer-overflow in SkRect::setBoundsCheck

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51933

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
SkRect::setBoundsCheck
SkEdgeClipper::clipCubic
SkEdgeClipper::ClipPath
```


Summary: Segv on unknown address in upb_MiniTable_SetSubEnum

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51950

```
Crash type: Segv on unknown address
Crash state:
upb_MiniTable_SetSubEnum
_upb_MessageDef_LinkMiniTable
_upb_FileDef_Create
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51965

```
Crash type: Index-out-of-bounds
Crash state:
LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab
LibRaw::ahd_interpolate
LibRaw::dcraw_process
```

Summary: Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab


Summary: Heap-buffer-overflow in AffixMgr::cpdcase_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51988

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
AffixMgr::cpdcase_check
AffixMgr::compound_check
HunspellImpl::checkword
```


Summary: Heap-buffer-overflow in parse_line

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52049

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
parse_line
readcfgfile
fuzz_cfg_parser.c
```


Summary: Heap-double-free in flb_sds_destroy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44153

```
Crash type: Heap-double-free
Crash state:
flb_sds_destroy
flb_parser_conf_file
config_random_fuzzer.c
```


Summary: Heap-buffer-overflow in Exiv2::MemIo::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52053

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
Exiv2::MemIo::read
Exiv2::BasicIo::readOrThrow
Exiv2::QuickTimeVideo::userDataDecoder
```


Summary: Heap-buffer-overflow in msyylex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52066

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
msyylex
loadMapInternal
msLoadMap
```


Summary: Heap-use-after-free in msFreeMap

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52102

```
Crash type: Heap-use-after-free READ 8
Crash state:
msFreeMap
msLoadMap
mapfuzzer.c
```


Summary: Null-dereference READ in AlertJson

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52128

```
Crash type: Null-dereference READ
Crash state:
AlertJson
JsonAlertLogger
OutputPacketLog
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52139

```
Crash type: Index-out-of-bounds
Crash state:
LibRaw::kodak_radc_load_raw
LibRaw::unpack
LoadRAW
```

Summary: Index-out-of-bounds in LibRaw::kodak_radc_load_raw


Summary: Segv on unknown address in pdfi_array_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44151

```
Crash type: Segv on unknown address
Crash state:
pdfi_array_get
pdfi_TJ
pdfi_interpret_stream_operator
```


Summary: Stack-buffer-underflow in gs_type2_interpret

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52145

```
Crash type: Stack-buffer-underflow READ 4
Crash state:
gs_type2_interpret
gs_type1_glyph_info
pdfi_cff_glyph_info
```


Summary: Stack-buffer-overflow in check_content_type_and_change_protocol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52160

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
check_content_type_and_change_protocol
ndpi_search_http_tcp
check_ndpi_detection_func
```


Summary: Heap-buffer-overflow in ndpi_search_irc_tcp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52174

```
Crash type: Heap-buffer-overflow READ 9
Crash state:
ndpi_search_irc_tcp
check_ndpi_detection_func
ndpi_detection_process_packet
```


Summary: Heap-buffer-overflow in msSetError

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52175

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
msSetError
loadColor
loadMapInternal
```


Summary: Heap-buffer-overflow in AffixMgr::compound_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52195

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
AffixMgr::compound_check
SuggestMgr::checkword
SuggestMgr::testsug
```


Summary: Heap-buffer-overflow in dprint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52204

```
Crash type: Heap-buffer-overflow READ 13
Crash state:
dprint
get_hdr_field
parse_headers
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52229

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
check_content_type_and_change_protocol
check_content_type_and_change_protocol
ndpi_search_http_tcp
```


Summary: Heap-use-after-free in hb_bit_set_invertible_t::intersects

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44198

```
Crash type: Heap-use-after-free READ 1
Crash state:
hb_bit_set_invertible_t::intersects
OT::CoverageFormat2::intersected_coverage_glyphs
OT::ChainContextFormat1::closure
```


Summary: Heap-buffer-overflow in onig_node_str_cat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52276

```
Crash type: Heap-buffer-overflow READ 3
Crash state:
onig_node_str_cat
setup_tree
setup_tree
```


Summary: Heap-buffer-overflow in msyylex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52305

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
msyylex
loadLayer
loadMapInternal
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52317

```
Crash type: Heap-buffer-overflow READ 16
Crash state:
AffixMgr::compound_check
SuggestMgr::checkword
SuggestMgr::testsug
```


Summary: Heap-buffer-overflow in parse_via

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52326

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
parse_via
get_hdr_field
parse_headers
```


Summary: Heap-buffer-overflow in onigenc_unicode_mbc_case_fold

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52330

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
onigenc_unicode_mbc_case_fold
mbc_case_fold
update_string_node_case_fold
```


Summary: Stack-buffer-overflow in Curl_output_aws_sigv4

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52349

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
Curl_output_aws_sigv4
output_auth_headers
Curl_http_output_auth
```


Summary: Stack-buffer-overflow in AffixMgr::suffix_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52397

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
AffixMgr::suffix_check
AffixMgr::affix_check
AffixMgr::compound_check
```


Summary: Heap-buffer-overflow in parse_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44199

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
parse_object
parse_object
parse_object
```


Summary: UNKNOWN READ in loadSymbol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52410

```
Crash type: UNKNOWN READ
Crash state:
loadSymbol
loadMapInternal
msLoadMap
```


Summary: Heap-buffer-overflow in flb_parser_create

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52414

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
flb_parser_create
flb_parser_conf_file
config_random_fuzzer.c
```


Summary: Heap-buffer-overflow in AffixMgr::cpdpat_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52430

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
AffixMgr::cpdpat_check
AffixMgr::compound_check
SuggestMgr::checkword
```


Summary: UNKNOWN READ in ndpi_search_irc_tcp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52435

```
Crash type: UNKNOWN READ
Crash state:
ndpi_search_irc_tcp
check_ndpi_detection_func
ndpi_detection_process_packet
```


Summary: Heap-buffer-overflow in AffixMgr::suffix_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52455

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
AffixMgr::suffix_check
AffixMgr::affix_check
AffixMgr::compound_check
```


Summary: Heap-buffer-overflow in asn_build_unsigned_int64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52465

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
asn_build_unsigned_int64
snmp_build_var_op
snmp_pdu_build
```


Summary: UNKNOWN READ in LibRaw::sget4

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52475

```
Crash type: UNKNOWN READ
Crash state:
LibRaw::sget4
LibRaw::parseAdobeRAFMakernote
LibRaw::parse_tiff_ifd
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52486

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
AffixMgr::compound_check
HunspellImpl::checkword
HunspellImpl::spell_internal
```


Summary: Heap-use-after-free in xps_image_enum_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52492

```
Crash type: Heap-use-after-free READ 8
Crash state:
xps_image_enum_finalize
alloc_restore_step_in
dorestore
```


Summary: Security exception in org.codehaus.janino.Parser.parseAssignmentExpression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52507

```
Crash type: Security exception
Crash state:
org.codehaus.janino.Parser.parseAssignmentExpression
java.base/java.nio.charset.CharsetEncoder.<init>
java.base/java.nio.charset.CharsetEncoder.<init>
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52517

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
Curl_output_aws_sigv4
output_auth_headers
Curl_http_output_auth
```


Summary: Security exception in jaz.Zer.<clinit>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52546

```
Crash type: Security exception
Crash state:
jaz.Zer.<clinit>
java.base/java.lang.Class.forName0
java.base/java.lang.Class.forName
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52565

```
Crash type: UNKNOWN READ
Crash state:
fp_cmp_mag
crtmgr_trust_list_lookup
crtmgr_add
```

Summary: UNKNOWN READ in fp_cmp_mag


Summary: Heap-use-after-free in xmlXIncludeCopyXPointer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52554

```
Crash type: Heap-use-after-free READ 4
Crash state:
xmlXIncludeCopyXPointer
xmlXIncludeDoProcess
xmlXIncludeProcessTreeFlagsData
```


Summary: Invalid-free in _dealloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52587

```
Crash type: Invalid-free
Crash state:
_dealloc
_Py_DECREF
frame_dealloc
```


Summary: Heap-buffer-overflow in LibRaw_buffer_datastream::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52579

```
Crash type: Heap-buffer-overflow WRITE 6
Crash state:
LibRaw_buffer_datastream::read
LibRaw::read_shorts
LibRaw::kodak_thumb_load_raw
```


Summary: Stack-buffer-overflow in add_ff_action

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52596

```
Crash type: Stack-buffer-overflow WRITE 9
Crash state:
add_ff_action
dissect_ieeeNUMBER_pv0
dissect_ieeeNUMBER_common
```


Summary: Heap-buffer-overflow in void apply_string<GSUBProxy>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44212

Crash type: Heap-buffer-overflow READ 2
Crash state:
void apply_string<GSUBProxy>
void hb_ot_map_t::apply<GSUBProxy>
hb_ot_map_t::substitute


Summary: Stack-buffer-overflow in authentic_parse_size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52662

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
authentic_parse_size
authentic_get_tagged_data
authentic_parse_credential_data
```


Summary: Heap-buffer-overflow in Ins_ALIGNRP

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52664

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
Ins_ALIGNRP
RunIns
Instance_Reset
```


Summary: Heap-buffer-overflow in parse_classes_64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52644

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
parse_classes_64
classes
r_bin_object_set_items
```


Summary: Heap-buffer-overflow in parse_subrip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52634

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
parse_subrip
parse_webvtt
gst_sub_parse_chain
```


Summary: UNKNOWN READ in unescape_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44237

```
Crash type: UNKNOWN READ
Crash state:
unescape_string
parse_string
parse_object
```


Summary: Heap-buffer-overflow in LibRaw::kodak_rgb_load_raw

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52672

```
Crash type: Heap-buffer-overflow WRITE 2
Crash state:
LibRaw::kodak_rgb_load_raw
LibRaw::kodak_thumb_loader
LibRaw::unpack_thumb
```


Summary: Security exception in jaz.Zer.<clinit>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52699

```
Crash type: Security exception
Crash state:
jaz.Zer.<clinit>
java.base/java.lang.Class.forName0
java.base/java.lang.Class.forName
```


Summary: Stack-use-after-return in gs_type2_interpret

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52691

```
Crash type: Stack-use-after-return READ 4
Crash state:
gs_type2_interpret
pdfi_cff_glyph_outline
gs_default_glyph_info
```


Summary: Heap-buffer-overflow in fasthuf_initialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52730

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
fasthuf_initialize
internal_huf_decompress
internal_exr_undo_piz
```


Summary: Heap-buffer-overflow in dhcp_reply

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43300

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
dhcp_reply
dhcp_packet
FuzzDhcp
```


Summary: Heap-buffer-overflow in ZSTD_compressLiterals

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44239

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
ZSTD_compressLiterals
ZSTD_entropyCompressSeqStore
ZSTD_compressSequences
```


Summary: UNKNOWN READ in APFSBtreeNodeIterator<APFSJObjBtreeNode> APFSJObjBtreeNode::find<unsigned long,

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52740

```
Crash type: UNKNOWN READ
Crash state:
APFSBtreeNodeIterator<APFSJObjBtreeNode> APFSJObjBtreeNode::find<unsigned long,
std::__1::pair<APFSBtreeNodeIterator<APFSJObjBtreeNode>, APFSBtreeNodeIterator<A
APFSJObjTree::obj
```


Summary: Security exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52783

```
Crash type: Security exception
Crash state:
com.github.javaparser.CommentsInserter.insertComments
java.base/java.util.Objects.equals
com.github.javaparser.Position.equals
```


Summary: Stack-buffer-overflow in LibRaw::xtrans_interpolate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52775

```
Crash type: Stack-buffer-overflow WRITE 4
Crash state:
LibRaw::xtrans_interpolate
LibRaw::dcraw_process
RAWHandler::read
```


Summary: Heap-buffer-overflow in APFSJObject::add_entry

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52764

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
APFSJObject::add_entry
APFSJObject::APFSJObject
APFSJObject::APFSJObject
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52802

```
Crash type: Heap-buffer-overflow WRITE 2
Crash state:
LibRaw::kodak_rgb_load_raw
LibRaw::kodak_thumb_loader
LibRaw::unpack_thumb
```


Summary: Use-after-poison in /mnt/scratch0/clusterfuzz/bot/builds/clusterfuzz-builds_ruby_e5a0a396033f4deba21

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52788

```
Crash type: Use-after-poison READ 1
Crash state:
/mnt/scratch0/clusterfuzz/bot/builds/clusterfuzz-builds_ruby_e5a0a396033f4deba21
/mnt/scratch0/clusterfuzz/bot/builds/clusterfuzz-builds_ruby_e5a0a396033f4deba21
/mnt/scratch0/clusterfuzz/bot/builds/clusterfuzz-builds_ruby_e5a0a396033f4deba21
```


Summary: Security exception in java.base/jdk.internal.math.FloatingDecimal.readJavaFormatString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52812

```
Crash type: Security exception
Crash state:
java.base/jdk.internal.math.FloatingDecimal.readJavaFormatString
java.base/jdk.internal.math.FloatingDecimal.parseDouble
java.base/java.lang.Double.parseDouble
```


Summary: Heap-use-after-free in OT::CoverageFormat1::intersected_coverage_glyphs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44257

```
Crash type: Heap-use-after-free READ 4
Crash state:
OT::CoverageFormat1::intersected_coverage_glyphs
OT::ChainContextFormat3::closure
OT::hb_closure_context_t::return_t OT::SubstLookupSubTable::dispatch<OT::hb_clos
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52807

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
parse_classes_64
classes
r_bin_object_set_items
```


Summary: Heap-buffer-overflow in expert_set_info_vformat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52814

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
expert_set_info_vformat
expert_add_info_format
dissect_rpcap
```


Summary: Heap-buffer-overflow in wmem_strbuf_append_vprintf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52797

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
wmem_strbuf_append_vprintf
wmem_strbuf_append_printf
dissect_dibs
```


Summary: Heap-buffer-overflow in ForceZero

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52822

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
ForceZero
BuildMessage
SendFinished
```


Summary: Heap-buffer-overflow in g_strchug

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52798

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
g_strchug
dissect_dcm_main
call_dissector_work
```


Summary: Container-overflow in spvtools::opt::blockmergeutil::CanMergeWithSuccessor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52863

```
Crash type: Container-overflow READ 8
Crash state:
spvtools::opt::blockmergeutil::CanMergeWithSuccessor
std::__1::__function::__func<spvtools::opt::BlockMergePass::Process
spvtools::opt::IRContext::ProcessCallTreeFromRoots
```


Summary: Heap-use-after-free in hb_bit_set_invertible_t::next

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44263

```
Crash type: Heap-use-after-free READ 1
Crash state:
hb_bit_set_invertible_t::next
hb_bit_set_invertible_t::intersects
hb_sparseset_t<hb_bit_set_invertible_t>::intersects
```


Summary: Heap-use-after-free in xmlXIncludeDoProcess

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52869

```
Crash type: Heap-use-after-free READ 4
Crash state:
xmlXIncludeDoProcess
xmlXIncludeProcessNode
xmlTextReaderRead
```


Summary: Global-buffer-overflow in get_unpack_proc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52870

```
Crash type: Global-buffer-overflow READ 8
Crash state:
get_unpack_proc
xps_begin_typed_image
epo_begin_typed_image
```


Summary: Heap-buffer-overflow in LibRaw::phase_one_correct

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52887

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
LibRaw::phase_one_correct
LibRaw::raw2image_ex
LibRaw::dcraw_process
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52922

```
Crash type: Security exception
Crash state:
java.base/jdk.internal.math.FloatingDecimal.readJavaFormatString
java.base/jdk.internal.math.FloatingDecimal.parseDouble
java.base/java.lang.Double.parseDouble
```


Summary: Heap-buffer-overflow in void rawspeed::DngOpcodes::PixelOpcode::applyOP<unsigned short, rawspeed::DngOpc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52944

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
void rawspeed::DngOpcodes::PixelOpcode::applyOP<unsigned short, rawspeed::DngOpc
rawspeed::DngOpcodes::applyOpCodes
rawspeed::DngDecoder::handleMetadata
```


Summary: UNKNOWN WRITE in Assimp::ObjFileMtlImporter::getFloatValue

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52935

```
Crash type: UNKNOWN WRITE
Crash state:
Assimp::ObjFileMtlImporter::getFloatValue
Assimp::ObjFileMtlImporter::load
Assimp::ObjFileMtlImporter::ObjFileMtlImporter
```


Summary: Heap-use-after-free in gs_font_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52986

```
Crash type: Heap-use-after-free READ 8
Crash state:
gs_font_finalize
gs_gc_reclaim
ireclaim
```


Summary: Heap-buffer-overflow in add_compile_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52979

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
add_compile_string
compile_tree
compile_tree
```


Summary: Security exception in org.codehaus.janino.Parser.parseAssignmentExpression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52971

```
Crash type: Security exception
Crash state:
org.codehaus.janino.Parser.parseAssignmentExpression
java.base/sun.nio.cs.CESU_8$Encoder.encodeLoop
java.base/java.nio.charset.CharsetEncoder.encode
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52967

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndlz8_decompress
blosc_d
do_job
```

Summary: Heap-buffer-overflow in ndlz8_decompress


Summary: Heap-buffer-overflow in rx_ip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53029

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
rx_ip
mip_rx
fuzz.c
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53019

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
io_memory_read
r_io_plugin_read
r_io_desc_read
```

Summary: Heap-buffer-overflow in io_memory_read


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44379

```
Crash type: Heap-buffer-overflow READ 3
Crash state:
add_compile_string
compile_tree
compile_tree
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53039

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
LibRaw::phase_one_correct
LibRaw::raw2image_ex
LibRaw::dcraw_process
```


Summary: Heap-buffer-overflow in onigenc_unicode_mbc_case_fold

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53030

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
onigenc_unicode_mbc_case_fold
mbc_case_fold
string_cmp_ic
```


Summary: UNKNOWN READ in Ins_MSIRP

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53052

```
Crash type: UNKNOWN READ
Crash state:
Ins_MSIRP
RunIns
Instance_Reset
```


Summary: Heap-buffer-overflow in onigenc_mbn_mbc_case_fold

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53041

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
onigenc_mbn_mbc_case_fold
euckr_mbc_case_fold
match_at
```


Summary: Heap-buffer-overflow in gbNUMBER_mbc_enc_len

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53046

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
gbNUMBER_mbc_enc_len
onigenc_mbn_mbc_to_code
gbNUMBER_mbc_to_code
```


Summary: Stack-buffer-underflow in gs_type2_interpret

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53054

```
Crash type: Stack-buffer-underflow READ 4
Crash state:
gs_type2_interpret
gs_type1_glyph_info
pdfi_cff_glyph_info
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53036

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
gbNUMBER_mbc_enc_len
match_at
search_in_range
```


Summary: UNKNOWN READ in unescape_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44300

```
Crash type: UNKNOWN READ
Crash state:
unescape_string
parse_string
parse_object
```


Summary: Heap-buffer-overflow in js_free_function_def

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53055

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
js_free_function_def
js_parse_function_decl2
js_parse_postfix_expr
```


Summary: Heap-buffer-overflow in mg_mqtt_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53038

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
mg_mqtt_parse
fuzz.c
```


Summary: Heap-buffer-overflow in parse_via_param

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53080

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
parse_via_param
parse_via
get_hdr_field
```


Summary: UNKNOWN READ in pcpp::SomeIpSdLayer::SomeIpSdLayer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53099

```
Crash type: UNKNOWN READ
Crash state:
pcpp::SomeIpSdLayer::SomeIpSdLayer
pcpp::SomeIpLayer::parseSomeIpLayer
pcpp::UdpLayer::parseNextLayer
```


Summary: UNKNOWN WRITE in wasmtime_fuzzing::oracles::instantiate_many::h1a28dda90c13f877

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53102

```
Crash type: UNKNOWN WRITE
Crash state:
wasmtime_fuzzing::oracles::instantiate_many::h1a28dda90c13f877
instantiate_many::_::run::he4646225c064edb2
```


Summary: Stack-buffer-overflow in merge_utf16be_ascii

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53149

```
Crash type: Stack-buffer-overflow WRITE 1
Crash state:
merge_utf16be_ascii
probe_isoNUMBER
superblocks_probe
```


Summary: Heap-buffer-overflow in LibRaw_buffer_datastream::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53158

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
LibRaw_buffer_datastream::read
LibRaw::uncompressed_fp_dng_load_raw
LibRaw::unpack
```


Summary: Heap-buffer-overflow in parse_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44301

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
parse_object
parse_object
parse_object
```


Summary: Index-out-of-bounds in str_init_embed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53173

```
Crash type: Index-out-of-bounds
Crash state:
str_init_embed
str_new
mrb_str_new
```


Summary: UNKNOWN READ in pack_unpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53161

```
Crash type: UNKNOWN READ
Crash state:
pack_unpack
mrb_pack_unpack
mrb_vm_exec
```


Summary: Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53181

```
Crash type: Null-dereference READ
Crash state:
NULL```


Summary: Negative-size-param in mrb_str_format

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53183

```
Crash type: Negative-size-param
Crash state:
mrb_str_format
mrb_f_sprintf
mrb_vm_exec
```


Summary: Heap-buffer-overflow in virtio_net_queue_enable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53186

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
virtio_net_queue_enable
virtio_queue_enable
virtio_pci_common_write
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53199

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
parse_content_length
get_hdr_field
parse_headers
```

Summary: Heap-buffer-overflow in parse_content_length


Summary: Use-of-uninitialized-value in TLSDecodeHandshakeHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53209

```
Crash type: Use-of-uninitialized-value
Crash state:
TLSDecodeHandshakeHello
SSLv3ParseHandshakeType
SSLDecode
```


Summary: Heap-buffer-overflow in parse_subrip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53210

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
parse_subrip
parse_webvtt
gst_sub_parse_chain
```


Summary: Heap-use-after-free in output_thread

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53324

```
Crash type: Heap-use-after-free READ 8
Crash state:
output_thread
step_callback
flb_task_destroy
```


Summary: UNKNOWN WRITE in instantiate_many::_::run::hb58bf0fc7b8817e5

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53381

```
Crash type: UNKNOWN WRITE
Crash state:
instantiate_many::_::run::hb58bf0fc7b8817e5
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53397

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
parse_content_length
get_hdr_field
parse_headers
```


Summary: Heap-buffer-overflow in crc64_clmul

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53423

```
Crash type: Heap-buffer-overflow READ 16
Crash state:
crc64_clmul
lzma_crc64
lzma_check_update
```


Summary: Stack-buffer-overflow in sc_path_print

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53417

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
sc_path_print
sc_select_file
sc_pkcs15init_rmdir
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53483

```
Crash type: Heap-double-free
Crash state:
dwg_free
llvmfuzz.c
dwg_free
```

Summary: Heap-double-free in dwg_free


Summary: Stack-buffer-overflow in FLAC::Decoder::FuzzerDecoder::metadata_callback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53454

```
Crash type: Stack-buffer-overflow WRITE 8
Crash state:
FLAC::Decoder::FuzzerDecoder::metadata_callback
FLAC::Decoder::Stream::metadata_callback_
read_metadata_
```


Summary: Heap-buffer-overflow in bytes_copy_rectangle_zero_padding

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53456

```
Crash type: Heap-buffer-overflow WRITE 7
Crash state:
bytes_copy_rectangle_zero_padding
cmd_put_bits
clist_change_bits
```


Summary: Heap-buffer-overflow in json_common_entity_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53468

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
json_common_entity_data
json_objects_write
dwg_write_json
```


Summary: Heap-use-after-free in template_execute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53469

```
Crash type: Heap-use-after-free READ 1
Crash state:
template_execute
msgpack_unpack_next
cb_stdout_flush
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53536

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
authentic_get_tagged_data
authentic_parse_credential_data
authentic_pin_get_policy
```

Summary: Stack-buffer-overflow in authentic_get_tagged_data


Summary: Heap-buffer-overflow in archive_read_has_encrypted_entries

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53594

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
archive_read_has_encrypted_entries
libarchive_fuzzer.cc
```


Summary: Heap-buffer-overflow in sputs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53619

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
sputs
gx_serialize_Indexed
pdf_color_space_named
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53617

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
dwg_json_LTYPE
json_objects_write
dwg_write_json
```

Summary: Heap-buffer-overflow in dwg_json_LTYPE


Summary: Use-of-uninitialized-value in rawspeed::RawImageData::checkRowIsInitialized

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53618

```
Crash type: Use-of-uninitialized-value
Crash state:
rawspeed::RawImageData::checkRowIsInitialized
rawspeed::RawImageData::checkMemIsInitialized
rawspeed::RawDecoder::decodeRaw
```


Summary: Heap-buffer-overflow in print_mac

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43304

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
print_mac
log_packet
dhcp_reply
```


Summary: Heap-buffer-overflow in ndpi_strncasestr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44405

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_strncasestr
check_content_type_and_change_protocol
ndpi_search_http_tcp
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53631

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
msc_zero_object
msc_create_object
muscle_create_directory
```

Summary: Stack-buffer-overflow in msc_zero_object


Summary: Security exception in java.desktop/java.awt.image.DataBufferInt.<init>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53708

```
Crash type: Security exception
Crash state:
java.desktop/java.awt.image.DataBufferInt.<init>
java.desktop/java.awt.image.Raster.createPackedRaster
org.apache.commons.imaging.formats.jpeg.decoder.JpegDecoder.visitSOS
```


Summary: Stack-buffer-overflow in cmap_put_ranges

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53711

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
cmap_put_ranges
psf_write_cmap
pdf_write_cmap
```


Summary: Heap-buffer-overflow in OT::hb_ot_apply_context_t::skipping_iterator_t::next

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53714

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
OT::hb_ot_apply_context_t::skipping_iterator_t::next
OT::Layout::GSUB_impl::Ligature<OT::Layout::SmallTypes>::apply
bool OT::hb_accelerate_subtables_context_t::apply_to<OT::Layout::GSUB_impl::Liga
```


Summary: Heap-buffer-overflow in s_hex_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44406

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
s_hex_process
s_exD_process
sreadbuf
```


Summary: Heap-buffer-overflow in bit_calc_CRC

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53750

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
bit_calc_CRC
decode_preR13
dwg_decode
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53722

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
OT::hb_ot_apply_context_t::skipping_iterator_t::next
bool OT::match_input<OT::IntType<unsigned short, 2u> >
bool OT::context_apply_lookup<OT::IntType<unsigned short, 2u> >
```


Summary: UNKNOWN READ in chunk_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53758

```
Crash type: UNKNOWN READ
Crash state:
chunk_free_object
gx_final_DeviceN
gs_cspace_final
```


Summary: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53767

```
Crash type: Security exception
Crash state:
com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal
com.code_intelligence.jazzer.sanitizers.RegexInjection.patternHook
org.hamcrest.text.MatchesPattern.matchesPattern
```


Summary: Heap-use-after-free in mbedtls_pkcs7_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53798

```
Crash type: Heap-use-after-free READ 8
Crash state:
mbedtls_pkcs7_free
mbedtls_pkcs7_parse_der
fuzz_pkcs7.c
```


Summary: Heap-use-after-free in gs_font_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53847

```
Crash type: Heap-use-after-free READ 8
Crash state:
gs_font_finalize
gs_gc_reclaim
ireclaim
```


Summary: UNKNOWN WRITE in gdev_mem_open_scan_lines_interleaved

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53903

```
Crash type: UNKNOWN WRITE
Crash state:
gdev_mem_open_scan_lines_interleaved
mem_open
gs_setdevice_no_erase
```


Summary: Use-of-uninitialized-value in bn_trim

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53911

```
Crash type: Use-of-uninitialized-value
Crash state:
bn_trim
bn_div_dig
bn_size_str
```


Summary: Heap-buffer-overflow in dv_copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53919

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
dv_copy
bn_lsh
cryptofuzz::module::relic_bignum::LShift1::Run
```


Summary: Stack-buffer-overflow in sc_pkcs15init_rmdir

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53927

```
Crash type: Stack-buffer-overflow WRITE 1
Crash state:
sc_pkcs15init_rmdir
sc_pkcs15init_erase_card_recursively
cardos_erase
```


Summary: Heap-use-after-free in gf_odf_vvc_cfg_read_bs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53971

```
Crash type: Heap-use-after-free READ 1
Crash state:
gf_odf_vvc_cfg_read_bs
vvcc_box_read
gf_isom_box_read
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53939

```
Crash type: Heap-buffer-overflow READ 16
Crash state:
_rrparse
message_parse
fuzz_mdns_message.cc
```

Summary: Heap-buffer-overflow in _rrparse


Summary: Heap-buffer-overflow in ZSTD_createDDict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54015

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
ZSTD_createDDict
blosc_run_decompression_with_context
blosc2_decompress_ctx
```


Summary: Heap-buffer-overflow in AffixMgr::cpdpat_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54030

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
AffixMgr::cpdpat_check
AffixMgr::compound_check
AffixMgr::compound_check
```


Summary: Object-size in wabt::BinaryReaderIR::OnCodeMetadataCount

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54092

```
Crash type: Object-size
Crash state:
wabt::BinaryReaderIR::OnCodeMetadataCount
wabt::BinaryReader::ReadCodeMetadataSection
wabt::BinaryReader::ReadCustomSection
```


Summary: Invalid-free in NIOHTTP2.NIOHTTP2Handler.

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44431

```
Crash type: Invalid-free
Crash state:
NIOHTTP2.NIOHTTP2Handler.
NIOHTTP2.NIOHTTP2Handler.channelRead
NIOCore.ChannelHandlerContext.
```


Summary: Heap-buffer-overflow in bit_read_B

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54162

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
bit_read_B
dwg_decode_header_variables
decode_R13_RNUMBER
```


Summary: Heap-buffer-overflow in bit_read_BB

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54163

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
bit_read_BB
bit_read_BD
dwg_decode_header_variables
```


Summary: Heap-buffer-overflow in Assimp::ObjFileImporter::createVertexArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54187

```
Crash type: Heap-buffer-overflow WRITE 12
Crash state:
Assimp::ObjFileImporter::createVertexArray
Assimp::ObjFileImporter::createTopology
Assimp::ObjFileImporter::createNodes
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54228

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
dwg_decode_INSERT_private
dwg_decode_INSERT
dwg_decode_add_object
```

Summary: Heap-buffer-overflow in dwg_decode_INSERT_private


Summary: Heap-buffer-overflow in md_analyze_inlines

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44446

Crash type: Heap-buffer-overflow READ 1
Crash state:
md_analyze_inlines
md_process_normal_block_contents
md_process_table_cell


Summary: Heap-buffer-overflow in AffixMgr::cpdcase_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54244

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
AffixMgr::cpdcase_check
AffixMgr::compound_check
HunspellImpl::checkword
```


Summary: UNKNOWN WRITE in void std::__1::allocator_traits<std::__1::allocator<wabt::interp::HandlerDesc> >

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54245

```
Crash type: UNKNOWN WRITE
Crash state:
void std::__1::allocator_traits<std::__1::allocator<wabt::interp::HandlerDesc> >
void std::__1::vector<wabt::interp::HandlerDesc, std::__1::allocator<wabt::inter
std::__1::vector<wabt::interp::HandlerDesc, std::__1::allocator<wabt::interp::Ha
```


Summary: Heap-use-after-free in HEIFHandler::ensureDecoder

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54246

```
Crash type: Heap-use-after-free READ 3
Crash state:
HEIFHandler::ensureDecoder
HEIFHandler::read
kimgio_fuzzer.cc
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54424

```
Crash type: Null-dereference READ
Crash state:
NULL```

Summary: Null-dereference READ


Summary: Heap-buffer-overflow in BITLK_read_sb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54548

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
BITLK_read_sb
_crypt_load_bitlk
crypt_load
```


Summary: Heap-use-after-free in UA_ServerConfig_clean

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44434

```
Crash type: Heap-use-after-free READ 8
Crash state:
UA_ServerConfig_clean
fuzz_binary_message.cc
UA_memoryManager_free
```


Summary: Security exception in java.desktop/java.awt.image.DataBufferInt.<init>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59354

```
Crash type: Security exception
Crash state:
java.desktop/java.awt.image.DataBufferInt.<init>
java.desktop/java.awt.image.Raster.createPackedRaster
java.desktop/java.awt.image.DirectColorModel.createCompatibleWritableRaster
```


Summary: Stack-buffer-overflow in ntlm_phase_3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59818

```
Crash type: Stack-buffer-overflow WRITE 1
Crash state:
ntlm_phase_3
establish_http_proxy_passthru
fuzz_proxy.c
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60089

```
Crash type: Heap-use-after-free WRITE 8
Crash state:
mk_event_timeout_destroy
flb_sched_destroy
flb_config_exit
```

Summary: Heap-use-after-free in mk_event_timeout_destroy


Summary: Stack-buffer-overflow in decompress_rNUMBER

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44432

Crash type: Stack-buffer-overflow WRITE 1
Crash state:
decompress_rNUMBER
read_rNUMBER_meta_data
dwg_decode


Summary: Heap-buffer-overflow in Canvas5Structure::NIBDecoder::decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61081

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Canvas5Structure::NIBDecoder::decode
Canvas5Structure::decodeZone5
Canvas5Parser::decode
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376787368

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
bool SmilesParseOps::parser::parse_atom_props<std::__1::__wrap_iter<char const*>
bool SmilesParseOps::parser::parse_it<std::__1::__wrap_iter<char const*> >
SmilesParseOps::parseCXExtensions
```

Summary: Stack-buffer-overflow in bool SmilesParseOps::parser::parse_atom_props<std::__1::__wrap_iter<char const*>


Summary: Heap-buffer-overflow in dwg_free_HATCH_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44481

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
dwg_free_HATCH_private
dwg_free_HATCH
dwg_free_object
```


Summary: Heap-buffer-overflow in LibRaw::phase_one_correct

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=394920636

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
LibRaw::phase_one_correct
LibRaw::raw2image_ex
LibRaw::dcraw_process
```


Summary: Heap-use-after-free in read_data_compressed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43324

```
Crash type: Heap-use-after-free READ 4
Crash state:
read_data_compressed
archive_read_format_rar_read_data
_archive_read_data_block
```


Summary: Heap-buffer-overflow in coap_split_uri_sub

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44503

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
coap_split_uri_sub
coap_get_uri_path
```


Summary: Heap-use-after-free in RDKit::Chirality::cleanupStereoGroups

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44520

Crash type: Heap-use-after-free READ 1
Crash state:
RDKit::Chirality::cleanupStereoGroups
RDKit::MolOps::assignStereochemistry
RDKit::SmilesToMol


Summary: Heap-buffer-overflow in cli_js_parse_done

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44490

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
cli_js_parse_done
cli_html_normalise
html_normalise_map
```


Summary: Stack-buffer-overflow in LoadVoice

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44527

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
LoadVoice
LoadVoiceVariant
SpeakNextClause
```


Summary: Heap-use-after-free in nghttp2_http_record_request_method

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44516

```
Crash type: Heap-use-after-free READ 4
Crash state:
nghttp2_http_record_request_method
nghttp2_session_mem_send_internal
nghttp2_session_send
```


Summary: Heap-use-after-free in nghttp2_hd_deflate_hd_bufs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44517

```
Crash type: Heap-use-after-free READ 3
Crash state:
nghttp2_hd_deflate_hd_bufs
nghttp2_frame_pack_headers
nghttp2_session_mem_send_internal
```


Summary: Heap-use-after-free in archive_read_format_rar_read_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44547

```
Crash type: Heap-use-after-free READ 4
Crash state:
archive_read_format_rar_read_data
archive_read_data
libarchive_fuzzer.cc
```


Summary: Segv on unknown address in onig_free_body

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44603

Crash type: Segv on unknown address
Crash state:
onig_free_body
onig_new
flb_regex_create


Summary: Heap-buffer-overflow in print_mac

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44581

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
print_mac
log_packet
dhcp_reply
```


Summary: Heap-buffer-overflow in parse_primitive

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44574

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
parse_primitive
plist_from_json
jplist_fuzzer.cc
```


Summary: Heap-buffer-overflow in read_xref_stream_entries

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44610

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
read_xref_stream_entries
pdfi_process_xref_stream
pdfi_read_xref_stream_dict
```


Summary: Global-buffer-overflow in ZSTD_compressBlock_opt0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43365

```
Crash type: Global-buffer-overflow READ 1
Crash state:
ZSTD_compressBlock_opt0
ZSTD_compressBlock_btopt
ZSTD_buildSeqStore
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44611

Crash type: Heap-buffer-overflow READ 1
Crash state:
coap_split_uri_sub
coap_get_uri_path


Summary: Heap-buffer-overflow in extensionObjectOrder

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44623

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
extensionObjectOrder
extensionObjectOrder
extensionObjectOrder
```


Summary: Heap-buffer-overflow in parse_primitive

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44695

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
parse_primitive
plist_from_json
jplist_fuzzer.cc
```


Summary: UNKNOWN READ in MqttProps_Free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43370

```
Crash type: UNKNOWN READ
Crash state:
MqttProps_Free
MqttClient_DecodePacket
MqttClient_WaitType
```


Summary: Stack-buffer-overflow in fmt::v8::basic_memory_buffer<unsigned int, 32ul, std::__1::allocator<unsigned in

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44763

```
Crash type: Stack-buffer-overflow READ 4
Crash state:
fmt::v8::basic_memory_buffer<unsigned int, 32ul, std::__1::allocator<unsigned in
fmt::v8::detail::bigint::square
fmt::v8::detail::bigint::assign_pow10
```


Summary: Heap-buffer-overflow in fmt::v8::detail::big_decimal_fp fmt::v8::detail::write_padded<

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44791

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
fmt::v8::detail::big_decimal_fp fmt::v8::detail::write_padded<
std::__1::back_insert_iterator<fmt::v8::basic_memory_buffer<char, 500ul, std::__
std::__1::back_insert_iterator<fmt::v8::basic_memory_buffer<char, 500ul, std::__
```


Summary: Heap-buffer-overflow in ucasemap_internalUTF8ToTitle_70

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44779

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ucasemap_internalUTF8ToTitle_70
ucasemap_mapUTF8
ucasemap_utf8ToTitle_70
```


Summary: Heap-buffer-overflow in ap_is_chunked

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43371

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ap_is_chunked
fuzz_utils.c
```


Summary: UNKNOWN READ in gx_dc_default_fill_masked

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44855

```
Crash type: UNKNOWN READ
Crash state:
gx_dc_default_fill_masked
copy_portrait
image_render_simple
```


Summary: Heap-buffer-overflow in row_mt_worker_hook

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44856

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
row_mt_worker_hook
execute
av1_decode_tg_tiles_and_wrapup
```


Summary: UNKNOWN READ in gx_restrict_Pattern

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43354

```
Crash type: UNKNOWN READ
Crash state:
gx_restrict_Pattern
gs_setcolor
pdfi_gs_setrgbcolor
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44862

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
row_mt_worker_hook
thread_loop
```


Summary: Heap-use-after-free in zval_call_destructor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44885

```
Crash type: Heap-use-after-free READ 4
Crash state:
zval_call_destructor
zend_hash_reverse_apply
shutdown_destructors
```


Summary: Heap-buffer-overflow in evax_bfd_print_dst

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44864

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
evax_bfd_print_dst
evax_bfd_print_image
vms_bfd_print_private_bfd_data
```


Summary: Incorrect-function-pointer-type in cv::split

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44937

```
Crash type: Incorrect-function-pointer-type
Crash state:
cv::split
cv::split
TestSplitAndMerge
```


Summary: Heap-buffer-overflow in ndpi_handle_ipv6_extension_headers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44942

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_handle_ipv6_extension_headers
ndpi_workflow_process_packet
fuzz_ndpi_reader.c
```


Summary: UNKNOWN READ in GC_generic_malloc_many

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44961

Crash type: UNKNOWN READ
Crash state:
GC_generic_malloc_many
GC_malloc_kind
Strnew_size


Summary: Heap-buffer-overflow in SuperFastHash

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44964

Crash type: Heap-buffer-overflow READ 1
Crash state:
SuperFastHash
Assimp::SceneCombiner::AddNodePrefixesChecked
Assimp::SceneCombiner::AddNodePrefixesChecked