Summary: UNKNOWN READ in wmem_tree_lookup32_array_le

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58832

```
Crash type: UNKNOWN READ
Crash state:
wmem_tree_lookup32_array_le
dissect_btl2cap
call_dissector_work
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58892

```
Crash type: Negative-size-param
Crash state:
H5MM_memcpy
H5O__link_decode
H5O__msg_iterate_real
```

Summary: Negative-size-param in H5MM_memcpy


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58932

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
sc_path_print
sc_select_file
cflex_delete_file
```

Summary: Stack-buffer-overflow in sc_path_print


Summary: Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58938

```
Crash type: Security exception
Crash state:
org.springframework.expression.spel.ast.OpPlus.getValueInternal
java.base/java.util.Arrays.hashCode
java.base/sun.reflect.generics.reflectiveObjects.ParameterizedTypeImpl.hashCode
```


Summary: Heap-buffer-overflow in json_write_TF

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58915

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
json_write_TF
json_preR13_header_write_private
dwg_write_json
```


Summary: Heap-use-after-free in get_got_entry

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58949

```
Crash type: Heap-use-after-free READ 8
Crash state:
get_got_entry
get_import_addr
Elf64__r_bin_elf_load_symbols_and_imports
```


Summary: Heap-use-after-free in Assimp::FBXExporter::WriteObjects

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59036

```
Crash type: Heap-use-after-free READ 4
Crash state:
Assimp::FBXExporter::WriteObjects
Assimp::FBXExporter::ExportBinary
Assimp::ExportSceneFBX
```


Summary: Invalid-free in Assimp::FBX::Scope::Scope

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59056

```
Crash type: Invalid-free
Crash state:
Assimp::FBX::Scope::Scope
Assimp::FBX::Element::Element
Assimp::FBX::Scope::Scope
```


Summary: Heap-buffer-overflow in _lou_stringHash

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59057

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
_lou_stringHash
_lou_translate
lou_translateString
```


Summary: Stack-buffer-overflow in DwaCompressor_readChannelRules

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59070

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
DwaCompressor_readChannelRules
DwaCompressor_uncompress
internal_exr_undo_dwaa
```


Summary: Security exception in org.apache.lucene.util.ArrayUtil.growExact

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59071

```
Crash type: Security exception
Crash state:
org.apache.lucene.util.ArrayUtil.growExact
org.apache.lucene.util.ArrayUtil.grow
org.apache.lucene.util.BytesRefBuilder.grow
```


Summary: Heap-use-after-free in zval_call_destructor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59072

```
Crash type: Heap-use-after-free READ 4
Crash state:
zval_call_destructor
zend_hash_reverse_apply
shutdown_destructors
```


Summary: Heap-use-after-free in sk_num

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55556

```
Crash type: Heap-use-after-free READ 8
Crash state:
sk_num
ASN1_template_free
asn1_item_combine_free
```


Summary: UNKNOWN READ in dxf_fixup_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59089

```
Crash type: UNKNOWN READ
Crash state:
dxf_fixup_string
dxf_header_write
dwg_write_dxf
```


Summary: UNKNOWN READ in dxf_fixup_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59097

```
Crash type: UNKNOWN READ
Crash state:
dxf_fixup_string
dwg_dxf_LAYOUT_private
dwg_dxf_LAYOUT
```


Summary: UNKNOWN READ in dxf_fixup_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59118

```
Crash type: UNKNOWN READ
Crash state:
dxf_fixup_string
dwg_dxf_DIMENSION_ALIGNED_private
dwg_dxf_DIMENSION_ALIGNED
```


Summary: Heap-buffer-overflow in bfd_getl32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59148

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
bfd_getl32
_bfd_stab_section_find_nearest_line
coff_find_nearest_line_with_names
```


Summary: Heap-buffer-overflow in bit_read_BB

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55579

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
bit_read_BB
dwg_decode_MINSERT_private
dwg_decode_MINSERT
```


Summary: Heap-use-after-free in fragment_addresses_equal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59173

```
Crash type: Heap-use-after-free READ 6
Crash state:
fragment_addresses_equal
g_hash_table_lookup_extended
fragment_add_seq_single_work
```


Summary: Global-buffer-overflow in hf_adjustment

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59185

```
Crash type: Global-buffer-overflow READ 4
Crash state:
hf_adjustment
sbr_process_channel
sbrDecodeCoupleFrame
```


Summary: Heap-use-after-free in wmem_memdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59167

```
Crash type: Heap-use-after-free READ 6
Crash state:
wmem_memdup
copy_address
fragment_addresses_persistent_key
```


Summary: Heap-buffer-overflow in NetworkInterface::dissectPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59216

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
NetworkInterface::dissectPacket
fuzz_dissect_packet.cpp
```


Summary: Heap-buffer-overflow in ICMPinfo::dissectICMP

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59217

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ICMPinfo::dissectICMP
NetworkInterface::processPacket
NetworkInterface::dissectPacket
```


Summary: Heap-buffer-overflow in libdeflate_zlib_decompress_ex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59267

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
libdeflate_zlib_decompress_ex
exr_uncompress_buffer
DwaCompressor_uncompress
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59295

```
Crash type: Heap-buffer-overflow READ 5
Crash state:
H5MM_xstrdup
H5G__ent_to_link
H5G__stab_lookup_cb
```

Summary: Heap-buffer-overflow in H5MM_xstrdup


Summary: Heap-buffer-overflow in ndpi_check_punycode_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59393

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_check_punycode_string
ndpi_match_host_subprotocol
check_content_type_and_change_protocol
```


Summary: Heap-buffer-overflow in internal_huf_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59382

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
internal_huf_decompress
DwaCompressor_uncompress
internal_exr_undo_dwaa
```


Summary: Heap-double-free in dwg_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59428

```
Crash type: Heap-double-free
Crash state:
dwg_free_object
dwg_free
llvmfuzz.c
```


Summary: Use-after-poison in file_is_simh

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59438

```
Crash type: Use-after-poison READ 4
Crash state:
file_is_simh
file_buffer
magic_buffer
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59450

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
opj_jp2_apply_pclr
opj_jp2_decode
cv::detail::Jpeg2KOpjDecoderBase::readData
```

Summary: Heap-buffer-overflow in opj_jp2_apply_pclr


Summary: Heap-buffer-overflow in LossyDctDecoder_execute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59457

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
LossyDctDecoder_execute
DwaCompressor_uncompress
internal_exr_undo_dwaa
```


Summary: Heap-buffer-overflow in BundlePacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59498

```
Crash type: Heap-buffer-overflow WRITE 9
Crash state:
BundlePacket
SendChannelExit
wolfSSH_shutdown
```


Summary: Heap-buffer-overflow in json_write_TF

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59523

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
json_write_TF
dwg_json_LTYPE
json_objects_write
```


Summary: UNKNOWN READ in ih264e_cabac_put_byte

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59543

```
Crash type: UNKNOWN READ
Crash state:
ih264e_cabac_put_byte
ih264e_cabac_encode_bin
ih264e_write_pslice_mb_cabac
```


Summary: Heap-buffer-overflow in bit_TV_to_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59571

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
bit_TV_to_utf8
json_cquote
dwg_geojson_feature
```


Summary: Invalid-free in hb_free_impl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59592

```
Crash type: Invalid-free
Crash state:
hb_free_impl
OT::glyf::_free_compiled_subset_glyphs
OT::glyf::subset
```


Summary: Heap-buffer-overflow in json_cquote

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55607

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
json_cquote
json_preR13_header_write_private
dwg_write_json
```


Summary: Segv on unknown address in config__bridge_cleanup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59604

```
Crash type: Segv on unknown address
Crash state:
config__bridge_cleanup
config__cleanup
mosquitto_fuzz_main
```


Summary: Heap-buffer-overflow in IEC104Stats::processPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59625

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
IEC104Stats::processPacket
Flow::processIEC60870Packet
Flow::processPacket
```


Summary: Stack-buffer-overflow in SetPitchGradient

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59636

```
Crash type: Stack-buffer-overflow WRITE 1
Crash state:
SetPitchGradient
calc_pitches
CalcPitches
```


Summary: Heap-use-after-free in psi_device_ref_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59661

```
Crash type: Heap-use-after-free READ 8
Crash state:
psi_device_ref_finalize
gs_gc_reclaim
ireclaim
```


Summary: Heap-buffer-overflow in H5FS__sinfo_serialize_node_cb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59695

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
H5FS__sinfo_serialize_node_cb
H5SL_iterate
H5FS__cache_sinfo_serialize
```


Summary: Heap-buffer-overflow in TestFuzzCommonAssistanceParseFileBuffer.c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59682

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
TestFuzzCommonAssistanceParseFileBuffer.c
```


Summary: Global-buffer-overflow in xmlDictLookup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59701

```
Crash type: Global-buffer-overflow READ 1
Crash state:
xmlDictLookup
xmlParseNCName
xmlParseQName
```


Summary: Global-buffer-overflow in htmlParseHTMLAttribute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59718

```
Crash type: Global-buffer-overflow READ 1
Crash state:
htmlParseHTMLAttribute
htmlParseStartTag
htmlParseContentInternal
```


Summary: Global-buffer-overflow in isvce_write_coeff4x4_cavlc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55643

```
Crash type: Global-buffer-overflow READ 1
Crash state:
isvce_write_coeff4x4_cavlc
isvce_encode_residue
isvce_write_pslice_mb_cavlc
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59745

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
NetworkInterface::dissectPacket
fuzz_dissect_packet.cpp
```


Summary: Security exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59786

```
Crash type: Security exception
Crash state:
com.github.javaparser.CommentsInserter.insertComments
java.base/java.util.Objects.equals
com.github.javaparser.Position.equals
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55654

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
lex_scan
zendlex
zendparse
```

Summary: Heap-buffer-overflow in lex_scan


Summary: Heap-buffer-overflow in utf8ToUtf16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59884

```
Crash type: Heap-buffer-overflow WRITE 2
Crash state:
utf8ToUtf16
utf8ToUtf16WithBom
Lexer::getObj
```


Summary: Heap-use-after-free in obj_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59931

```
Crash type: Heap-use-after-free READ 4
Crash state:
obj_free
incremental_gc
mrb_incremental_gc
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42525448

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
stbiw__encode_png_line
stbi_write_png_to_mem
Ogre::STBIImageCodec::encode
```

Summary: Heap-buffer-overflow in stbiw__encode_png_line


Summary: UNKNOWN READ in _dwarf_exec_frame_instr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59950

```
Crash type: UNKNOWN READ
Crash state:
_dwarf_exec_frame_instr
_dwarf_get_fde_info_for_a_pc_row
dwarf_get_fde_info_for_all_regs3
```


Summary: Heap-buffer-overflow in ndpi_search_line

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60003

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_search_line
check_ndpi_detection_func
ndpi_check_flow_func
```


Summary: UNKNOWN WRITE in regcomp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60010

```
Crash type: UNKNOWN WRITE
Crash state:
regcomp
file_regcomp
load_1
```


Summary: Use-of-uninitialized-value in dev_io_capture

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60019

```
Crash type: Use-of-uninitialized-value
Crash state:
dev_io_capture
dev_io_run
audio_io_thread
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60037

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
IEC104Stats::processPacket
Flow::processIEC60870Packet
NetworkInterface::processPacket
```


Summary: Heap-buffer-overflow in AffixMgr::compound_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60034

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
AffixMgr::compound_check
AffixMgr::compound_check
AffixMgr::compound_check
```


Summary: Heap-buffer-overflow in ndpi_search_thrift_tcp_udp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60070

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
ndpi_search_thrift_tcp_udp
check_ndpi_detection_func
ndpi_check_flow_func
```


Summary: Heap-use-after-free in ZSTD_freeDDict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55673

```
Crash type: Heap-use-after-free READ {*}
Crash state:
ZSTD_freeDDict
blosc2_free_ctx
blosc2_schunk_free
```


Summary: Heap-buffer-overflow in uofs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60056

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
uofs
pdfi_find_cff_index
pdfi_read_cff_font
```


Summary: Security exception in com.code_intelligence.jazzer.sanitizers.XPathInjection.checkXpathExecute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60148

```
Crash type: Security exception
Crash state:
com.code_intelligence.jazzer.sanitizers.XPathInjection.checkXpathExecute
org.hamcrest.xml.HasXPath.compiledXPath
org.hamcrest.xml.HasXPath.<init>
```


Summary: Security exception in com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60179

```
Crash type: Security exception
Crash state:
com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf
com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrfSocket
java.base/java.net.Socket.connect
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60156

```
Crash type: Security exception
Crash state:
com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf
com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrfSocket
java.base/java.net.Socket.connect
```


Summary: Security exception in jaz.Zer.reportFinding

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60167

```
Crash type: Security exception
Crash state:
jaz.Zer.reportFinding
jaz.Zer.reportFindingIfEnabled
jaz.Zer.<init>
```


Summary: Heap-buffer-overflow in default_get_outline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60207

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
default_get_outline
pdfi_fapi_get_glyph
get_fapi_glyph_data
```


Summary: Memcpy-param-overlap in pdfi_copy_truetype_font

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60204

```
Crash type: Memcpy-param-overlap
Crash state:
pdfi_copy_truetype_font
pdfi_load_font
pdfi_load_dict_font
```


Summary: Heap-buffer-overflow in Assimp::MD5::MD5Parser::ParseHeader

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60274

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Assimp::MD5::MD5Parser::ParseHeader
Assimp::MD5::MD5Parser::MD5Parser
Assimp::MD5Importer::LoadMD5MeshFile
```


Summary: Heap-buffer-overflow in Gfx::BooleanDecoder::initialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60262

```
Crash type: Heap-buffer-overflow READ 7
Crash state:
Gfx::BooleanDecoder::initialize
Video::VP9::FrameContext::create_range_decoder
Video::VP9::Parser::compressed_header
```


Summary: Security exception in net.jsign.appx.Zip64EndOfCentralDirectoryRecord.read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60308

```
Crash type: Security exception
Crash state:
net.jsign.appx.Zip64EndOfCentralDirectoryRecord.read
net.jsign.appx.CentralDirectory.read
net.jsign.appx.ZipFile.<init>
```


Summary: Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60355

```
Crash type: Security exception
Crash state:
com.github.javaparser.ast.validator.TreeVisitorValidator.accept
com.github.javaparser.ast.expr.FieldAccessExpr.getMetaModel
com.github.javaparser.ast.expr.FieldAccessExpr.getMetaModel
```


Summary: Invalid-free in jpeg_free_large

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60379

```
Crash type: Invalid-free
Crash state:
jpeg_free_large
jpeg_abort
jpeg_finish_decompress
```


Summary: UNKNOWN READ in r_str_ncpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60407

```
Crash type: UNKNOWN READ
Crash state:
r_str_ncpy
Elf32__r_bin_elf_load_symbols_and_imports
Elf32_load_symbols
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55722

```
Crash type: Index-out-of-bounds
Crash state:
LibRaw::apply_tiff
LibRaw::parse_jpeg
LibRaw::identify
```

Summary: Index-out-of-bounds in LibRaw::apply_tiff


Summary: Heap-buffer-overflow in OT::CmapSubtable::collect_unicodes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60467

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
OT::CmapSubtable::collect_unicodes
hb_face_collect_unicodes
test-ot-face.c
```


Summary: Heap-buffer-overflow in OT::CmapSubtable::get_glyph

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60475

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
OT::CmapSubtable::get_glyph
bool OT::cmap::accelerator_t::get_glyph_from<OT::CmapSubtable>
hb_ot_get_nominal_glyphs
```


Summary: Heap-buffer-overflow in Gfx::InputStreamer::read_u24

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60465

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Gfx::InputStreamer::read_u24
AK::Function<AK::ErrorOr<unsigned int, AK::Error>
Gfx::BMPImageDecoderPlugin::frame
```


Summary: Heap-buffer-overflow in xt_valid_enum_values

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60514

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
xt_valid_enum_values
xt_validate_impl
ddsi_xt_type_add_typeobj
```


Summary: Heap-buffer-overflow in git_oid_raw_cmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55724

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
git_oid_raw_cmp
commit_graph_parse_oid_lookup
git_commit_graph_file_parse
```


Summary: Stack-buffer-overflow in sc_pkcs15_get_lastupdate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60527

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
sc_pkcs15_get_lastupdate
generate_cache_filename
sc_pkcs15_read_cached_file
```


Summary: Heap-buffer-overflow in check_content_type_and_change_protocol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60557

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
check_content_type_and_change_protocol
process_response
ndpi_check_http_tcp
```


Summary: Negative-size-param in check_content_type_and_change_protocol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60605

```
Crash type: Negative-size-param
Crash state:
check_content_type_and_change_protocol
process_response
ndpi_check_http_tcp
```


Summary: Heap-double-free in sc_pkcs15_free_object_content

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60616

```
Crash type: Heap-double-free
Crash state:
sc_pkcs15_free_object_content
sc_pkcs15_free_object
fuzz_pkcs15_decode.c
```


Summary: Heap-buffer-overflow in cosm_new_file

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60650

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
cosm_new_file
cosm_create_key
sc_pkcs15init_generate_key
```


Summary: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60640

```
Crash type: Security exception
Crash state:
com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
java.base/java.lang.Exception.<init>
java.base/java.lang.RuntimeException.<init>
```


Summary: Heap-buffer-overflow in wwunpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60655

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
wwunpack
cli_scanpe
cli_magic_scan
```


Summary: Heap-buffer-overflow in setcos_create_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60672

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
setcos_create_key
sc_pkcs15init_generate_key
do_generate_key
```


Summary: Heap-use-after-free in zval_call_destructor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60734

```
Crash type: Heap-use-after-free READ 4
Crash state:
zval_call_destructor
zend_hash_reverse_apply
shutdown_destructors
```


Summary: Negative-size-param in passDoAction

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60723

```
Crash type: Negative-size-param
Crash state:
passDoAction
translateString
_lou_translate
```


Summary: Heap-buffer-overflow in parse_skip_ws

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55035

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
parse_skip_ws
node_from_openstep
parse_dict_data
```


Summary: Security exception in org.json.JSONTokener.nextValue

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55978

```
Crash type: Security exception
Crash state:
org.json.JSONTokener.nextValue
org.json.JSONTokener.readArray
org.json.JSONTokener.nextToInternal
```


Summary: Heap-use-after-free in Elf64_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60790

```
Crash type: Heap-use-after-free READ 8
Crash state:
Elf64_free
destroy
r_bin_file_free
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60778

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
ZSTD_decompressMultiFrame
ZSTD_decompress_usingDDict
zstd_wrap_decompress
```

Summary: Heap-buffer-overflow in ZSTD_decompressMultiFrame


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60769

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
sc_pkcs15_get_lastupdate
generate_cache_filename
sc_pkcs15_read_cached_file
```


Summary: Heap-buffer-overflow in xmlParseTryOrFinish

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55980

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
xmlParseTryOrFinish
xmlParseChunk
xml.c
```


Summary: Security exception in org.apache.lucene.util.automaton.RegExp.toAutomaton

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60782

```
Crash type: Security exception
Crash state:
org.apache.lucene.util.automaton.RegExp.toAutomaton
java.base/java.util.BitSet.ensureCapacity
java.base/java.util.BitSet.expandTo
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60844

```
Crash type: Security exception
Crash state:
com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
java.base/java.lang.Exception.<init>
java.base/java.lang.RuntimeException.<init>
```


Summary: Security exception in java.base/java.util.regex.Pattern$Loop.match

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60845

```
Crash type: Security exception
Crash state:
java.base/java.util.regex.Pattern$Loop.match
java.base/java.util.regex.Pattern$GroupTail.match
java.base/java.util.regex.Pattern$BranchConn.match
```


Summary: Security exception in java.base/java.util.regex.Pattern$GroupTail.match

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60846

```
Crash type: Security exception
Crash state:
java.base/java.util.regex.Pattern$GroupTail.match
java.base/java.io.BufferedWriter.ensureOpen
java.base/java.io.BufferedWriter.write
```


Summary: Heap-use-after-free in Elf32_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60863

```
Crash type: Heap-use-after-free READ 8
Crash state:
Elf32_free
destroy
r_bin_file_free
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60964

```
Crash type: Security exception
Crash state:
org.apache.lucene.util.automaton.RegExp.toAutomaton
java.base/java.util.BitSet.ensureCapacity
java.base/java.util.BitSet.expandTo
```


Summary: Heap-buffer-overflow in test_verify

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60971

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
test_verify
fuzz_pkcs11.c
```


Summary: Heap-buffer-overflow in bit_read_BB

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60993

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
bit_read_BB
bit_read_BS
dwg_decode_ATTDEF_private
```


Summary: Security exception in jflex.core.NFA.insertNFA

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61028

```
Crash type: Security exception
Crash state:
jflex.core.NFA.insertNFA
jflex.core.NFA.insertNFA
jflex.core.NFA.insertNFA
```


Summary: Stack-buffer-overflow in initialize_encryption_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61039

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
initialize_encryption_key
cli_ole2_extract
cli_scanole2
```


Summary: Segv on unknown address in decUnitCompare

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61050

```
Crash type: Segv on unknown address
Crash state:
decUnitCompare
decCompare
decCompareOp
```


Summary: Heap-buffer-overflow in mosquitto__strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56008

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
mosquitto__strdup
config__read_file_core
config__read_file
```


Summary: Security exception in org.apache.poi.hwpf.model.StyleSheet.createPap

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61252

```
Crash type: Security exception
Crash state:
org.apache.poi.hwpf.model.StyleSheet.createPap
org.apache.poi.util.BitField.getRawValue
org.apache.poi.util.BitField.getValue
```


Summary: Security exception in org.apache.commons.io.IOUtils.byteArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61254

```
Crash type: Security exception
Crash state:
org.apache.commons.io.IOUtils.byteArray
org.apache.commons.io.output.AbstractByteArrayOutputStream.needNewBuffer
org.apache.commons.io.output.UnsynchronizedByteArrayOutputStream.<init>
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61235

```
Crash type: Segv on unknown address
Crash state:
decUnitCompare
decCompare
decCompareOp
```


Summary: Security exception in org.apache.poi.hdgf.streams.PointerContainingStream.findChildren

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61256

```
Crash type: Security exception
Crash state:
org.apache.poi.hdgf.streams.PointerContainingStream.findChildren
org.apache.poi.util.IOUtils.checkLength
org.apache.poi.util.IOUtils.safelyAllocateCheck
```


Summary: Heap-use-after-free in config__cleanup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56009

```
Crash type: Heap-use-after-free READ 8
Crash state:
config__cleanup
mosquitto_fuzz_main
run_broker
```


Summary: Heap-buffer-overflow in match

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61268

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
match
pcre2_match_8
pcre2_fuzzsupport.c
```


Summary: Heap-buffer-overflow in get_grouplength

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61269

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
get_grouplength
get_branchlength
get_grouplength
```


Summary: Heap-use-after-free in parse_options

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61292

```
Crash type: Heap-use-after-free WRITE 4
Crash state:
parse_options
append_new_operation
parse_options
```


Summary: Heap-buffer-overflow in isvcd_residual_samp_mb_dyadic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56023

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
isvcd_residual_samp_mb_dyadic
isvcd_process_residual_resample_mb
isvcd_process_inter_mb_rsd_pred_target_lyr
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61372

```
Crash type: Security exception
Crash state:
org.apache.poi.hdgf.streams.PointerContainingStream.findChildren
```


Summary: Heap-use-after-free in __xmlRaiseError

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61337

```
Crash type: Heap-use-after-free READ 2
Crash state:
__xmlRaiseError
htmlParseErr
htmlCurrentChar
```


Summary: Invalid-free in reset_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61339

```
Crash type: Invalid-free
Crash state:
reset_context
cmt_decode_prometheus_create
cmetrics_decode_fuzz.c
```


Summary: Invalid-free in Flow::~Flow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61361

```
Crash type: Invalid-free
Crash state:
Flow::~Flow
Flow::~Flow
GenericHash::cleanup
```


Summary: Use-of-uninitialized-value

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61380

```
Crash type: Use-of-uninitialized-value
Crash state:
NULL```


Summary: Heap-use-after-free in zend_ast_evaluate_inner

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56021

```
Crash type: Heap-use-after-free READ 4
Crash state:
zend_ast_evaluate_inner
zend_ast_evaluate_ex
zval_update_constant_with_ctx
```


Summary: Invalid-free in reset_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61397

```
Crash type: Invalid-free
Crash state:
reset_context
finish_metric
cmt_decode_prometheus_parse
```


Summary: Security exception in org.json.JSONArray.writeTo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61399

```
Crash type: Security exception
Crash state:
org.json.JSONArray.writeTo
org.json.JSONStringer.value
org.json.JSONStringer.peek
```


Summary: Security exception in org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61423

```
Crash type: Security exception
Crash state:
org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone
org.apache.lucene.analysis.tokenattributes.PackedTokenAttributeImpl.clone
org.apache.lucene.analysis.tokenattributes.PackedTokenAttributeImpl.clone
```


Summary: Heap-buffer-overflow in IEC104Stats::processPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61443

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
IEC104Stats::processPacket
Flow::processIEC60870Packet
NetworkInterface::processPacket
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61493

```
Crash type: Security exception
Crash state:
org.apache.lucene.util.automaton.RegExp.toAutomaton
java.base/java.util.BitSet.ensureCapacity
java.base/java.util.BitSet.expandTo
```


Summary: Heap-buffer-overflow in QOIHandler::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61528

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
QOIHandler::read
kimgio_fuzzer.cc
```


Summary: Heap-buffer-overflow in Flow::dissectMDNS

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61538

```
Crash type: Heap-buffer-overflow READ 10
Crash state:
Flow::dissectMDNS
NetworkInterface::processPacket
NetworkInterface::dissectPacket
```


Summary: Security exception in org.apache.poi.ddf.EscherContainerRecord.fillFields

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61562

```
Crash type: Security exception
Crash state:
org.apache.poi.ddf.EscherContainerRecord.fillFields
java.base/java.util.HashMap.getNode
java.base/java.util.HashMap.get
```


Summary: Stack-use-after-scope in ulocimp_addLikelySubtags_74

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61582

```
Crash type: Stack-use-after-scope READ 3
Crash state:
ulocimp_addLikelySubtags_74
uloc_isRightToLeft_74
uloc_is_right_to_left_fuzzer.cpp
```


Summary: Heap-buffer-overflow in bit_TV_to_utf8_codepage

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61593

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
bit_TV_to_utf8_codepage
bit_TV_to_utf8
dwg_decode_LAYOUT_private
```


Summary: Security exception in org.apache.commons.jxpath.ri.compiler.CoreFunction.toString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61597

```
Crash type: Security exception
Crash state:
org.apache.commons.jxpath.ri.compiler.CoreFunction.toString
java.base/java.lang.String.valueOf
java.base/java.lang.StringBuilder.append
```


Summary: Heap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56057

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor
perfetto::trace_processor::TrackEventModule::ParseTracePacketData
perfetto::trace_processor::ProtoTraceParser::ParseTracePacket
```


Summary: Stack-buffer-overflow in crc24q_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61617

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
crc24q_check
packet_parse
FuzzPacket.c
```


Summary: Heap-buffer-overflow in H5MM_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61625

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
H5MM_memcpy
H5O__cache_chk_serialize
H5C__generate_image
```


Summary: Heap-buffer-overflow in H5MM_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61626

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
H5MM_memcpy
H5D__scatter_mem
H5D__scatgath_read
```


Summary: Heap-buffer-overflow in Flow::dissectNetBIOS

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61648

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Flow::dissectNetBIOS
NetworkInterface::processPacket
NetworkInterface::dissectPacket
```


Summary: Use-of-uninitialized-value in aesEncryptBlock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61670

```
Crash type: Use-of-uninitialized-value
Crash state:
aesEncryptBlock
EncryptStream::lookChar
BaseCryptStream::getChar
```


Summary: Container-overflow in libbrotlidec.so.1

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61675

```
Crash type: Container-overflow WRITE {*}
Crash state:
libbrotlidec.so.1
BrotliDecoderDecompressStream
Exiv2::BmffImage::brotliUncompress
```


Summary: Heap-buffer-overflow in HeifContext::interpret_heif_file

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61718

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
HeifContext::interpret_heif_file
HeifContext::read_from_memory
heif_context_read_from_memory
```


Summary: Use-of-uninitialized-value in _PyFunction_FromConstructor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61721

```
Crash type: Use-of-uninitialized-value
Crash state:
_PyFunction_FromConstructor
PyEval_EvalCode
exec_code_in_module
```


Summary: UNKNOWN READ in OT::glyph_variations_t::create_from_glyphs_var_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61724

```
Crash type: UNKNOWN READ
Crash state:
OT::glyph_variations_t::create_from_glyphs_var_data
OT::gvar::decompile_glyph_variations
OT::gvar::instantiate
```


Summary: Heap-buffer-overflow in Flow::dissectBittorrent

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61737

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Flow::dissectBittorrent
NetworkInterface::processPacket
NetworkInterface::dissectPacket
```


Summary: Out-of-memory in QueryParserFuzzer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61742

```
Crash type: Out-of-memory
Crash state:
QueryParserFuzzer
```


Summary: Stack-buffer-overflow in sc_color_fprintf_va

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61750

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
sc_color_fprintf_va
sc_do_log_va
sc_do_log
```


Summary: Heap-buffer-overflow in pcpp::SomeIpSdLayer::isDataValid

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61774

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
pcpp::SomeIpSdLayer::isDataValid
pcpp::SomeIpLayer::parseSomeIpLayer
pcpp::UdpLayer::parseNextLayer
```


Summary: Segv on unknown address in dwg_encode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61795

```
Crash type: Segv on unknown address
Crash state:
dwg_encode
llvmfuzz.c
```


Summary: Heap-buffer-overflow in isvcd_interlyr_motion_mode_pred_dyadic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56050

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
isvcd_interlyr_motion_mode_pred_dyadic
isvcd_mv_pred_ref_tfr_nby2_epmb
isvcd_parse_inter_slice_data_cabac_enh_lyr
```


Summary: Security exception in org.antlr.v4.runtime.atn.PredictionContext.fromRuleContext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61786

```
Crash type: Security exception
Crash state:
org.antlr.v4.runtime.atn.PredictionContext.fromRuleContext
java.base/jdk.internal.misc.Unsafe.weakCompareAndSetInt
java.base/jdk.internal.misc.Unsafe.getAndAddInt
```


Summary: Stack-buffer-overflow in iasecc_crt_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61797

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
iasecc_crt_parse
iasecc_se_parse
iasecc_se_get_info
```


Summary: Heap-buffer-overflow in H5O__chunk_protect

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61803

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
H5O__chunk_protect
H5O__chunk_delete
H5O__cont_delete
```


Summary: Heap-buffer-overflow in rawspeed::DngDecoder::decodeMetaDataInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61800

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
rawspeed::DngDecoder::decodeMetaDataInternal
rawspeed::RawDecoder::decodeMetaData
```


Summary: Heap-double-free in bit_TV_to_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61818

```
Crash type: Heap-double-free
Crash state:
bit_TV_to_utf8
json_cquote
json_header_write_private
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56033

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
H5SM_delete
H5O__msg_write_real
H5O_msg_write
```

Summary: Heap-buffer-overflow in H5SM_delete


Summary: Heap-buffer-overflow in ICMPinfo::dissectICMP

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61836

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ICMPinfo::dissectICMP
NetworkInterface::processPacket
NetworkInterface::dissectPacket
```


Summary: Heap-buffer-overflow in pim_pim_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61854

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
pim_pim_packet
pim_main.c
```


Summary: Index-out-of-bounds in derive_spatial_luma_vector_prediction

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61844

```
Crash type: Index-out-of-bounds
Crash state:
derive_spatial_luma_vector_prediction
fill_luma_motion_vector_predictors
motion_vectors_and_ref_indices
```


Summary: Heap-buffer-overflow in H5C__load_cache_image

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56075

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
H5C__load_cache_image
H5C_protect
H5AC_protect
```


Summary: Security exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61895

```
Crash type: Security exception
Crash state:
com.github.javaparser.CommentsInserter.insertComments
java.base/java.util.Objects.equals
com.github.javaparser.Position.equals
```


Summary: Heap-buffer-overflow in ndpi_domain_classify_contains

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61882

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
ndpi_domain_classify_contains
ndpi_get_custom_category_match
ndpi_match_host_subprotocol
```


Summary: Heap-buffer-overflow in dxf_fixup_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61901

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
dxf_fixup_string
dxf_header_write
dwg_write_dxf
```


Summary: Use-of-uninitialized-value in dev_io_capture

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61919

```
Crash type: Use-of-uninitialized-value
Crash state:
dev_io_capture
dev_io_run
audio_io_thread
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56054

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
ucl_object_dtor_unref_single
ucl_object_dtor_unref
ucl_hash_destroy
```

Summary: Heap-buffer-overflow in ucl_object_dtor_unref_single


Summary: Heap-buffer-overflow in H5O__fsinfo_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56076

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
H5O__fsinfo_decode
H5O__msg_iterate_real
H5O__msg_remove_real
```


Summary: Security exception in org.apache.lucene.util.BytesRefBuilder.<init>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62034

```
Crash type: Security exception
Crash state:
org.apache.lucene.util.BytesRefBuilder.<init>
org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone
org.apache.lucene.analysis.tokenattributes.PackedTokenAttributeImpl.clone
```


Summary: Security exception in org.apache.poi.hwpf.converter.AbstractWordConverter.processNoteAnchor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62068

```
Crash type: Security exception
Crash state:
org.apache.poi.hwpf.converter.AbstractWordConverter.processNoteAnchor
org.apache.poi.hwpf.converter.AbstractWordConverter.processCharacters
org.apache.poi.hwpf.converter.WordToTextConverter.processNote
```


Summary: Stack-buffer-overflow in QBuffer::readData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62075

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
QBuffer::readData
QIODevicePrivate::read
QDataStream::readRawData
```


Summary: Heap-buffer-overflow in set_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56037

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
set_data
ref_pkt
git_pkt_parse_line
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62098

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
XCFImageFormat::loadTileRLE
XCFImageFormat::loadLevel
XCFImageFormat::loadHierarchy
```

Summary: Heap-buffer-overflow in XCFImageFormat::loadTileRLE


Summary: Heap-buffer-overflow in H5F__accum_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62135

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
H5F__accum_free
H5MF_xfree
H5MF_free_aggrs
```


Summary: Invalid-free in bit_chain_alloc_size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62132

```
Crash type: Invalid-free
Crash state:
bit_chain_alloc_size
bit_write_RC
bit_H_to_dat
```


Summary: UNKNOWN READ in parse_priv_value

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62188

```
Crash type: UNKNOWN READ
Crash state:
parse_priv_value
parse_privacy
fuzz_parse_msg.c
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62167

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
ucl_object_dtor_unref_single
ucl_object_dtor_unref
ucl_hash_destroy
```


Summary: Heap-buffer-overflow in uint7_get_64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62270

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
uint7_get_64
cram_huffman_decode_init
cram_decoder_init
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62267

```
Crash type: Use-of-uninitialized-value
Crash state:
wabt::BinaryReaderIR::OnOpcode
wabt::BinaryReader::ReadInstructions
wabt::ReadBinary
```

Summary: Use-of-uninitialized-value in wabt::BinaryReaderIR::OnOpcode


Summary: Global-buffer-overflow in iusace_quantize_lines

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62261

```
Crash type: Global-buffer-overflow READ 4
Crash state:
iusace_quantize_lines
iusace_quantize_spec
iusace_fd_encode
```


Summary: Null-dereference READ in isvcd_parse_inter_slice_data_cavlc_enh_lyr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62290

```
Crash type: Null-dereference READ
Crash state:
isvcd_parse_inter_slice_data_cavlc_enh_lyr
isvcd_parse_epslice
isvcd_parse_decode_slice_ext_nal
```


Summary: Heap-buffer-overflow in Video::VP9::Decoder::create_video_frame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62307

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
Video::VP9::Decoder::create_video_frame
Video::VP9::Decoder::decode_frame
Video::VP9::Decoder::receive_sample
```


Summary: Stack-buffer-overflow in ulocimp_toLanguageTag_74

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62348

```
Crash type: Stack-buffer-overflow WRITE 1
Crash state:
ulocimp_toLanguageTag_74
icu_74::Locale::toLanguageTag
locale_morph_fuzzer.cpp
```


Summary: Heap-buffer-overflow in bit_TV_to_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62363

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
bit_TV_to_utf8
json_cquote
dwg_json_LAYOUT_private
```


Summary: Heap-double-free in dwg_free_common_entity_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62367

```
Crash type: Heap-double-free
Crash state:
dwg_free_common_entity_data
dwg_free_POINTCLOUD
dwg_free_variable_no_class
```


Summary: Segv on unknown address in FunctionCompiler::compileReturn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62375

```
Crash type: Segv on unknown address
Crash state:
FunctionCompiler::compileReturn
WasmEdge::AOT::Compiler::compile
WasmEdge::AOT::Compiler::compile
```


Summary: UNKNOWN READ in isvce_cabac_flush

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56137

```
Crash type: UNKNOWN READ
Crash state:
isvce_cabac_flush
isvce_cabac_encode_terminate
isvce_entropy
```


Summary: Heap-use-after-free in g_datalist_get_flags

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62381

```
Crash type: Heap-use-after-free READ 8
Crash state:
g_datalist_get_flags
g_object_unref
gst_object_unref
```


Summary: UNKNOWN in WasmEdge::Loader::SharedLibrary::load

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62387

```
Crash type: UNKNOWN
Crash state:
WasmEdge::Loader::SharedLibrary::load
WasmEdge::Loader::Loader::loadModule
WasmEdge::Loader::Loader::parseModule
```


Summary: Negative-size-param in http_cb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62389

```
Crash type: Negative-size-param
Crash state:
http_cb
fuzz.c
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62441

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Assimp::MD5::MD5MeshParser::MD5MeshParser
Assimp::MD5Importer::LoadMD5MeshFile
Assimp::MD5Importer::InternReadFile
```

Summary: Heap-buffer-overflow in Assimp::MD5::MD5MeshParser::MD5MeshParser


Summary: Heap-buffer-overflow in icu_74::SimpleDateFormat::subFormat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62432

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
icu_74::SimpleDateFormat::subFormat
icu_74::SimpleDateFormat::_format
icu_74::SimpleDateFormat::format
```


Summary: Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62457

```
Crash type: Security exception
Crash state:
org.springframework.expression.spel.ast.OpPlus.getValueInternal
org.springframework.util.ConcurrentReferenceHashMap$Segment.restructureIfNecessa
org.springframework.util.ConcurrentReferenceHashMap.purgeUnreferencedEntries
```


Summary: UNKNOWN WRITE in icu_74::Calendar::set

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62425

```
Crash type: UNKNOWN WRITE
Crash state:
icu_74::Calendar::set
calendar_fuzzer.cpp
```


Summary: Memcpy-param-overlap in bit_u_expand

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62461

```
Crash type: Memcpy-param-overlap
Crash state:
bit_u_expand
bit_TV_to_utf8
dwg_decode_header_variables
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62465

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
btf_ensure_modifiable
btf__add_var
bpf_object__collect_externs
```

Summary: Heap-buffer-overflow in btf_ensure_modifiable


Summary: Stack-buffer-overflow in pdfi_read_cff_dict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56156

```
Crash type: Stack-buffer-overflow WRITE 1
Crash state:
pdfi_read_cff_dict
pdfi_read_cff_dict
pdfi_read_cff_font
```


Summary: Heap-buffer-overflow in read_tmpl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62500

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
read_tmpl
mrb_pack_pack
mrb_vm_exec
```


Summary: Security exception in org.apache.lucene.util.ArrayUtil.copyOfSubArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62524

```
Crash type: Security exception
Crash state:
org.apache.lucene.util.ArrayUtil.copyOfSubArray
org.apache.lucene.util.BytesRef.deepCopyOf
org.apache.lucene.index.Term.<init>
```


Summary: UNKNOWN READ in bytes1_char_at

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62508

```
Crash type: UNKNOWN READ
Crash state:
bytes1_char_at
ascii_at_line_end
try_match
```


Summary: Heap-double-free in regcomp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62529

```
Crash type: Heap-double-free
Crash state:
regcomp
file_regcomp
load_1
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56143

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
H5O__mtime_new_encode
H5O_msg_flush
H5O__chunk_serialize
```

Summary: Heap-buffer-overflow in H5O__mtime_new_encode


Summary: Heap-use-after-free in dwarf_dealloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62547

```
Crash type: Heap-use-after-free READ 2
Crash state:
dwarf_dealloc
_dwarf_fde_destructor
tdestroy_free_node
```


Summary: Heap-double-free in dwg_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62561

```
Crash type: Heap-double-free
Crash state:
dwg_free_object
dwg_free
llvmfuzz.c
```


Summary: UNKNOWN READ in deliver_chunked_chunks

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62609

```
Crash type: UNKNOWN READ
Crash state:
deliver_chunked_chunks
http_cb
fuzz.c
```


Summary: Heap-buffer-overflow in cosm_create_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62613

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
cosm_create_key
sc_pkcs15init_generate_key
do_generate_key
```


Summary: Heap-buffer-overflow in LibRaw_buffer_datastream::scanf_one

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56160

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
LibRaw_buffer_datastream::scanf_one
LibRaw::parse_mos
LibRaw::parse_tiff_ifd
```


Summary: UNKNOWN READ in icu_74::RelativeDateTimeFormatter::formatRelativeImpl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62601

```
Crash type: UNKNOWN READ
Crash state:
icu_74::RelativeDateTimeFormatter::formatRelativeImpl
icu_74::FormattedRelativeDateTime icu_74::RelativeDateTimeFormatter::doFormatToV
icu_74::RelativeDateTimeFormatter::formatToValue
```


Summary: Heap-double-free in snmp_e2e_fuzzer.c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62604

```
Crash type: Heap-double-free
Crash state:
snmp_e2e_fuzzer.c
netsnmp_cleanup_session
snmp_e2e_fuzzer.c
```


Summary: Segv on unknown address in icu_74::UnicodeString::copyFrom

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62651

```
Crash type: Segv on unknown address
Crash state:
icu_74::UnicodeString::copyFrom
icu_74::UnicodeString::UnicodeString
icu_74::number::impl::SimpleModifier::SimpleModifier
```


Summary: Security exception in com.github.javaparser.GeneratedJavaParser.Expression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62731

```
Crash type: Security exception
Crash state:
com.github.javaparser.GeneratedJavaParser.Expression
java.base/sun.nio.cs.CESU_8$Encoder.to3Bytes
java.base/sun.nio.cs.CESU_8$Encoder.encodeArrayLoop
```


Summary: Heap-buffer-overflow in OT::cvar::decompile_tuple_variations

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62774

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
OT::cvar::decompile_tuple_variations
OT::cvar::subset
bool _try_subset<OT::cvar>
```


Summary: Heap-buffer-overflow in Gfx::decode_bmp_pixel_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62782

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Gfx::decode_bmp_pixel_data
Gfx::BMPImageDecoderPlugin::frame
Gfx::ICOImageDecoderPlugin::load_ico_bitmap
```


Summary: Heap-buffer-overflow in pack_unpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62822

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
pack_unpack
mrb_pack_unpack
mrb_vm_exec
```


Summary: Heap-buffer-overflow in _dwarf_memcpy_swap_bytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62842

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
_dwarf_memcpy_swap_bytes
fill_in_uni_arch_64
_dwarf_macho_setup
```


Summary: Global-buffer-overflow in isvce_write_coeff4x4_cavlc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62896

```
Crash type: Global-buffer-overflow READ 1
Crash state:
isvce_write_coeff4x4_cavlc
isvce_encode_residue
isvce_write_pslice_mb_cavlc
```


Summary: Use-of-uninitialized-value in isvcd_interpolate_residual_sse42

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56176

```
Crash type: Use-of-uninitialized-value
Crash state:
isvcd_interpolate_residual_sse42
isvcd_residual_samp_mb
isvcd_process_residual_resample_mb
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62875

```
Crash type: Heap-buffer-overflow READ 10
Crash state:
back_passDoAction
_lou_backTranslate
lou_backTranslateString
```

Summary: Heap-buffer-overflow in back_passDoAction


Summary: Heap-buffer-overflow in xmlDictLookupInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62911

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
xmlDictLookupInternal
xmlDictLookup
htmlParseNameComplex
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62924

```
Crash type: Security exception
Crash state:
org.apache.poi.ddf.EscherPropertyFactory$$Lambda$285/ADDRESS.apply
org.apache.poi.ddf.EscherPropertyFactory.createProperties
org.apache.poi.ddf.AbstractEscherOptRecord.fillFields
```

Summary: Security exception in org.apache.poi.ddf.EscherPropertyFactory$$Lambda$285/ADDRESS.apply


Summary: Heap-buffer-overflow in _dwarf_memcpy_noswap_bytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62943

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
_dwarf_memcpy_noswap_bytes
fill_in_uni_arch_64
_dwarf_macho_setup
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56208

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
load_buffer
r_bin_object_new
r_bin_file_new_from_buffer
```

Summary: Heap-buffer-overflow in load_buffer


Summary: Security exception in java.base/java.util.Arrays.copyOf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62959

```
Crash type: Security exception
Crash state:
java.base/java.util.Arrays.copyOf
java.base/java.lang.AbstractStringBuilder.ensureCapacityInternal
java.base/java.lang.AbstractStringBuilder.append
```


Summary: Security exception in java.base/java.util.regex.Pattern$GroupHead.match

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62976

```
Crash type: Security exception
Crash state:
java.base/java.util.regex.Pattern$GroupHead.match
java.base/java.util.regex.Pattern$Loop.match
java.base/java.util.regex.Pattern$GroupTail.match
```


Summary: Heap-buffer-overflow in bit_TV_to_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62973

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
bit_TV_to_utf8
json_cquote
dwg_json_TEXT_private
```


Summary: Heap-use-after-free in xmlStaticCopyNode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62996

```
Crash type: Heap-use-after-free READ 4
Crash state:
xmlStaticCopyNode
xmlDocCopyNode
xmlParseReference
```


Summary: Heap-buffer-overflow in isvcd_reflayer_construction_dyadic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56210

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
isvcd_reflayer_construction_dyadic
isvcd_intra_resamp_mb_dyadic
isvcd_process_ibl_mb
```


Summary: Heap-use-after-free in gx_device_forward_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63013

```
Crash type: Heap-use-after-free READ 8
Crash state:
gx_device_forward_finalize
gx_device_finalize
alloc_restore_step_in
```


Summary: Out-of-memory in IndexSearchFuzzer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63007

```
Crash type: Out-of-memory
Crash state:
IndexSearchFuzzer
```


Summary: UNKNOWN READ in r_str_ncpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63030

```
Crash type: UNKNOWN READ
Crash state:
r_str_ncpy
Elf64_load_symbols_from
Elf64_load_symbols
```


Summary: Heap-buffer-overflow in Flow::dissectMDNS

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63060

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
Flow::dissectMDNS
NetworkInterface::processPacket
NetworkInterface::dissectPacket
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63024

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
_dwarf_memcpy_noswap_bytes
fill_in_uni_arch_64
_dwarf_macho_setup
```


Summary: UNKNOWN READ in google::ParseTemplateArg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63034

```
Crash type: UNKNOWN READ
Crash state:
google::ParseTemplateArg
google::ParseTemplateArg
google::ParseEncoding
```


Summary: Heap-buffer-overflow in sc_hsm_write_ef

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56213

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
sc_hsm_write_ef
sc_hsm_update_binary
sc_update_binary
```


Summary: UNKNOWN READ in skip_chunk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63051

```
Crash type: UNKNOWN READ
Crash state:
skip_chunk
http_cb
fuzz.c
```


Summary: Stack-buffer-overflow in TranslateWord3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63064

```
Crash type: Stack-buffer-overflow READ 4
Crash state:
TranslateWord3
CombineFlag
TranslateWord2
```


Summary: Heap-buffer-overflow in xmlCopyCharMultiByte

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63086

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
xmlCopyCharMultiByte
xmlParseCommentComplex
xmlParseComment
```


Summary: Heap-buffer-overflow in load_sections_64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63074

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
load_sections_64
parse_classes_64
classes
```


Summary: Heap-use-after-free in __xmlRaiseError

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63092

```
Crash type: Heap-use-after-free READ 8
Crash state:
__xmlRaiseError
xmlFatalErr
xmlStringDecodeEntitiesInt
```


Summary: Stack-buffer-overflow in entersafe_reverse_buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63104

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
entersafe_reverse_buffer
entersafe_gen_key
entersafe_card_ctl_NUMBER
```


Summary: Heap-buffer-overflow in dxf_fixup_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63137

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
dxf_fixup_string
dwg_dxf_LAYOUT_private
dwg_dxf_LAYOUT
```


Summary: Heap-buffer-overflow in xmlParseCommentComplex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63127

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
xmlParseCommentComplex
xmlParseComment
xmlParseMisc
```


Summary: Heap-buffer-overflow in __string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65632

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
__string
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66778

```
Crash type: Heap-buffer-overflow WRITE 9
Crash state:
pcpp::Layer::shortenLayer
pcpp::TextBasedProtocolMessage::removeField
readParsedPacket
```

Summary: Heap-buffer-overflow in pcpp::Layer::shortenLayer


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69169

```
Crash type: UNKNOWN READ
Crash state:
H5SL_first
H5FS_sect_find
H5MF__find_sect
```

Summary: UNKNOWN READ in H5SL_first


Summary: Heap-buffer-overflow in mrb_memsearch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66423

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
mrb_memsearch
mrb_str_split_m
mrb_vm_exec
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69526

```
Crash type: Use-of-uninitialized-value
Crash state:
pcpp::SomeIpLayer::parseSomeIpLayer
pcpp::SomeIpLayer::parseNextLayer
pcpp::Packet::setRawPacket
```

Summary: Use-of-uninitialized-value in pcpp::SomeIpLayer::parseSomeIpLayer


Summary: Stack-buffer-overflow in gf_hevc_parse_nalu_bs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71146

```
Crash type: Stack-buffer-overflow WRITE 4
Crash state:
gf_hevc_parse_nalu_bs
gf_inspect_dump_nalu_internal
inspect_process
```


Summary: Heap-use-after-free in xmlRemoveID

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66679

```
Crash type: Heap-use-after-free READ 4
Crash state:
xmlRemoveID
xmlFreeProp
xmlFreeNode
```


Summary: Heap-buffer-overflow in simdutf::haswell::implementation::convert_utf8_to_utf16be

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71218

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
simdutf::haswell::implementation::convert_utf8_to_utf16be
Conversion<
Conversion<
```


Summary: UNKNOWN READ in chunk_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71250

```
Crash type: UNKNOWN READ
Crash state:
chunk_free_object
file_close_file
sclose
```


Summary: Heap-buffer-overflow in mrb_memsearch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66689

```
Crash type: Heap-buffer-overflow READ 3
Crash state:
mrb_memsearch
str_convert_range
mrb_str_aref
```


Summary: UNKNOWN READ in chunk_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71296

```
Crash type: UNKNOWN READ
Crash state:
chunk_free_object
sfclose
pdfi_close_file
```


Summary: UNKNOWN READ in chunk_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538085

```
Crash type: UNKNOWN READ
Crash state:
chunk_free_object
stream_dct_finalize
chunk_free_object
```


Summary: Heap-buffer-overflow in simdutf::haswell::implementation::convert_utf8_to_latin1

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71307

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
simdutf::haswell::implementation::convert_utf8_to_latin1
Conversion<
Conversion<
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538113

```
Crash type: UNKNOWN READ
Crash state:
H5FL_reg_malloc
H5FL_reg_calloc
H5O__cache_chk_deserialize
```

Summary: UNKNOWN READ in H5FL_reg_malloc


Summary: UNKNOWN READ in glslang::TInfoSinkBase::location

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71345

```
Crash type: UNKNOWN READ
Crash state:
glslang::TInfoSinkBase::location
glslang::TParseContextBase::outputMessage
glslang::TParseContextBase::error
```


Summary: Heap-buffer-overflow in gguf_get_tensor_offset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538148

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
gguf_get_tensor_offset
llama_model_loader::llama_tensor_weight::llama_tensor_weight
void std::__1::vector<llama_model_loader::llama_tensor_weight, std::__1::allocat
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538150

```
Crash type: Bad-cast
Crash state:
Bad-cast to Assimp::LogStream from invalid vptr
CallbackToLogRedirector
Assimp::DefaultLogger::WriteToStreams
```


Summary: UNKNOWN WRITE in bfd_elf_get_str_section

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538161

```
Crash type: UNKNOWN WRITE
Crash state:
bfd_elf_get_str_section
bfd_elf_string_from_elf_section
bfd_elf_sym_name
```


Summary: UNKNOWN READ in chunk_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538184

```
Crash type: UNKNOWN READ
Crash state:
chunk_free_object
file_close_file
sclose
```


Summary: UNKNOWN WRITE in std::__1::recursive_mutex::lock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538230

```
Crash type: UNKNOWN WRITE
Crash state:
std::__1::recursive_mutex::lock
Catalog::getForm
Page::getAnnots
```


Summary: Heap-buffer-overflow in StrLen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71496

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
StrLen
MangleFileName
ToolChainHarnessLib.c
```


Summary: Use-of-uninitialized-value in Poco::Dynamic::Var::~Var

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538385

```
Crash type: Use-of-uninitialized-value
Crash state:
Poco::Dynamic::Var::~Var
void Poco::JSON::Object::doStringify<std::__1::map<std::__1::basic_string<char,
Poco::JWT::Serializer::serialize
```


Summary: Heap-buffer-overflow in readBytes48

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538426

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
readBytes48
SystemZ_LLVM_getInstruction
SystemZ_getInstruction
```


Summary: UNKNOWN READ in ggml_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538517

```
Crash type: UNKNOWN READ
Crash state:
ggml_free
llama_model::~llama_model
llama_load_model_from_file
```


Summary: Security exception in java.xml/com.sun.org.apache.xalan.internal.xsltc.trax.DOM2TO.parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538549

```
Crash type: Security exception
Crash state:
java.xml/com.sun.org.apache.xalan.internal.xsltc.trax.DOM2TO.parse
java.xml/com.sun.org.apache.xerces.internal.dom.ElementNSImpl.<init>
java.xml/com.sun.org.apache.xerces.internal.dom.CoreDocumentImpl.createElementNS
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66719

```
Crash type: Stack-overflow
Crash state:
boost::read_graphviz_detail::parser::parse_subgraph
boost::read_graphviz_detail::parser::parse_endpoint_rest
boost::read_graphviz_detail::parser::parse_stmt
```

Summary: Stack-overflow in boost::read_graphviz_detail::parser::parse_subgraph


Summary: Heap-buffer-overflow in ih264d_read_coeff4x4_cabac

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538616

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ih264d_read_coeff4x4_cabac
ih264d_cabac_parse_8x8block
ih264d_parse_residual4x4_cabac
```


Summary: Segv on unknown address in udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=368076871

```
Crash type: Segv on unknown address
Crash state:
udiv
mrb_bint_mod
mrb_vm_exec
```


Summary: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=368657262

```
Crash type: Security exception
Crash state:
com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
java.base/java.lang.Exception.<init>
java.base/java.lang.RuntimeException.<init>
```


Summary: Segv on unknown address in lj_BC_RET1

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66384

```
Crash type: Segv on unknown address
Crash state:
lj_BC_RET1
lua_pcall
luaL_loadbuffer_fuzzer.cc
```


Summary: Security exception in graphql.schema.GraphQLTypeUtil.simplePrint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=368729570

```
Crash type: Security exception
Crash state:
graphql.schema.GraphQLTypeUtil.simplePrint
graphql.schema.GraphQLTypeUtil.simplePrint
graphql.schema.GraphQLTypeUtil.simplePrint
```


Summary: Heap-buffer-overflow in ultrahdr::getYuv444Pixel

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538160

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ultrahdr::getYuv444Pixel
std::__1::__function::__func<ultrahdr::JpegR::applyGainMap
ultrahdr::JpegR::applyGainMap
```


Summary: Use-of-uninitialized-value in ultrahdr::uhdr_gainmap_metadata_frac::encodeGainmapMetadata

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=369652657

```
Crash type: Use-of-uninitialized-value
Crash state:
ultrahdr::uhdr_gainmap_metadata_frac::encodeGainmapMetadata
ultrahdr::JpegR::appendGainMap
ultrahdr::JpegR::encodeJPEGR
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=369236552

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
extract_mr_data
parse_mr_string
readstat_parse_sav
```

Summary: Heap-buffer-overflow in extract_mr_data


Summary: Use-of-uninitialized-value in format_message

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=370032374

```
Crash type: Use-of-uninitialized-value
Crash state:
format_message
ultrahdr::JpegDecoderHelper::decode
ultrahdr::JpegDecoderHelper::decompressImage
```


Summary: Use-of-uninitialized-value in decompress_yuv.cc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=369974248

```
Crash type: Use-of-uninitialized-value
Crash state:
decompress_yuv.cc
```


Summary: Security exception in java.base/java.util.Arrays.copyOfRange

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=370272563

```
Crash type: Security exception
Crash state:
java.base/java.util.Arrays.copyOfRange
java.base/java.lang.StringUTF16.newString
java.base/java.lang.String.substring
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=369652826

```
Crash type: Use-of-uninitialized-value
Crash state:
format_message
ultrahdr::JpegEncoderHelper::encode
ultrahdr::JpegEncoderHelper::compressImage
```


Summary: Security exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66745

```
Crash type: Security exception
Crash state:
com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer
java.base/java.nio.charset.CharsetEncoder.<init>
java.base/sun.nio.cs.CESU_8$Encoder.<init>
```


Summary: Use-of-uninitialized-value in mark_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=370775021

```
Crash type: Use-of-uninitialized-value
Crash state:
mark_context
incremental_gc
mrb_incremental_gc
```


Summary: UNKNOWN READ in __dynamic_cast

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=371239171

```
Crash type: UNKNOWN READ
Crash state:
__dynamic_cast
HandleDynamicTypeCacheMiss
CallbackToLogRedirector
```


Summary: Heap-buffer-overflow in sav_process_row

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66805

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
sav_process_row
sav_read_data
readstat_parse_sav
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=371233781

```
Crash type: Security exception
Crash state:
com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
java.base/java.lang.Exception.<init>
java.base/java.lang.RuntimeException.<init>
```


Summary: UNKNOWN READ in cfl_sds_len

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=371659893

```
Crash type: UNKNOWN READ
Crash state:
cfl_sds_len
unpack_meta_opts
cmt_mpack_unpack_map
```


Summary: Security exception in org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=371931330

```
Crash type: Security exception
Crash state:
org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII
org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII
org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.incrementToken
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66743

```
Crash type: Security exception
Crash state:
com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer
java.base/java.lang.StringCoding.encode
java.base/java.lang.String.getBytes
```


Summary: UNKNOWN READ in eat_line

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372515100

```
Crash type: UNKNOWN READ
Crash state:
eat_line
extract_field
parse_sdp_session
```


Summary: Heap-buffer-overflow in polygonToCellsExperimental

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372515086

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
polygonToCellsExperimental
fuzzerPolygonToCellsExperimental.c
```


Summary: Global-buffer-overflow in AnnouncePunctuation

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372298920

```
Crash type: Global-buffer-overflow WRITE {*}
Crash state:
AnnouncePunctuation
ReadClause
TranslateClause
```


Summary: Memcpy-param-overlap in repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372515088

```
Crash type: Memcpy-param-overlap
Crash state:
repeat
repeat
p_ere
```


Summary: Heap-buffer-overflow in extract_sendrecv_mode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372515090

```
Crash type: Heap-buffer-overflow READ 6
Crash state:
extract_sendrecv_mode
parse_sdp_session
parse_mixed_content
```


Summary: Heap-use-after-free in xmlValidateOneElement

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372547409

```
Crash type: Heap-use-after-free READ 4
Crash state:
xmlValidateOneElement
xmlValidateElement
api.c
```


Summary: Heap-buffer-overflow in parse_mixed_content

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372510377

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
parse_mixed_content
parse_sdp
fuzz_parse_msg.c
```


Summary: Heap-buffer-overflow in cram_encode_container

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372547397

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
cram_encode_container
cram_flush_container_mt
cram_put_bam_seq
```


Summary: Use-of-uninitialized-value in Poco::Net::NTLMCredentials::parseChallengeMessage

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372764172

```
Crash type: Use-of-uninitialized-value
Crash state:
Poco::Net::NTLMCredentials::parseChallengeMessage
Poco::Net::HTTPNTLMCredentials::createNTLMMessage
Poco::Net::HTTPNTLMCredentials::authenticate
```


Summary: UNKNOWN READ in Poco::UTF16Encoding::queryConvert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372765426

```
Crash type: UNKNOWN READ
Crash state:
Poco::UTF16Encoding::queryConvert
Poco::TextConverter::convert
Poco::Net::NTLMCredentials::parseChallengeMessage
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372765427

```
Crash type: UNKNOWN READ
Crash state:
Assimp::NDOImporter::InternReadFile
Assimp::BaseImporter::ReadFile
Assimp::Importer::ReadFile
```

Summary: UNKNOWN READ in Assimp::NDOImporter::InternReadFile


Summary: Heap-use-after-free in dxf_tables_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66835

```
Crash type: Heap-use-after-free READ 8
Crash state:
dxf_tables_read
dwg_read_dxf
llvmfuzz.c
```


Summary: Heap-buffer-overflow in extract_rtpmap

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=373736682

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
extract_rtpmap
parse_sdp_session
parse_sdp
```


Summary: Segv on unknown address in cranelift_filetests::function_runner::Trampoline::call::hb2e77cf3a13ebaf4

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=373522467

```
Crash type: Segv on unknown address
Crash state:
cranelift_filetests::function_runner::Trampoline::call::hb2e77cf3a13ebaf4
cranelift_fuzzgen::_::run::hdb2f75e19950661f
```


Summary: Use-of-uninitialized-value in jit_compile

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=374218978

```
Crash type: Use-of-uninitialized-value
Crash state:
jit_compile
pcre2_jit_compile_8
pcre2_fuzzsupport.c
```


Summary: Heap-buffer-overflow in convsamp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=371659888

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
convsamp
forward_DCT
compress_data
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=375220555

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
polygonToCellsExperimental
fuzzerPolygonToCellsExperimentalNoHoles.c
```


Summary: Heap-buffer-overflow in extract_fmtp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=375237153

```
Crash type: Heap-buffer-overflow READ 6
Crash state:
extract_fmtp
parse_sdp_session
parse_mixed_content
```


Summary: Heap-buffer-overflow in extract_ice_option

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376100377

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
extract_ice_option
parse_sdp_session
parse_sdp
```


Summary: UNKNOWN WRITE in s_DCTD_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376394519

```
Crash type: UNKNOWN WRITE
Crash state:
s_DCTD_process
sreadbuf
spgetcc
```


Summary: Segv on unknown address in llama_output_reserve

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376331508

```
Crash type: Segv on unknown address
Crash state:
llama_output_reserve
llama_decode
fuzz_tokenizer.cpp
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376504918

```
Crash type: Security exception
Crash state:
org.apache.lucene.util.ArrayUtil.growExact
org.apache.lucene.util.ArrayUtil.grow
org.apache.lucene.util.BytesRefBuilder.grow
```

Summary: Security exception in org.apache.lucene.util.ArrayUtil.growExact


Summary: Stack-buffer-overflow in _pcre2_compile_class_not_nested_16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376515526

```
Crash type: Stack-buffer-overflow WRITE 2
Crash state:
_pcre2_compile_class_not_nested_16
compile_class_operand
_pcre2_compile_class_nested_16
```


Summary: UNKNOWN READ in llama_output_reserve

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376770771

```
Crash type: UNKNOWN READ
Crash state:
llama_output_reserve
llama_decode
fuzz_tokenizer.cpp
```


Summary: Segv on unknown address in std::__1::ios_base::~ios_base

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=371292576

```
Crash type: Segv on unknown address
Crash state:
std::__1::ios_base::~ios_base
Poco::Net::MultipartReader::nextPart
Poco::Net::MailMessage::readMultipart
```


Summary: Segv on unknown address in yara_yyparse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376515523

```
Crash type: Segv on unknown address
Crash state:
yara_yyparse
yr_lex_parse_rules_file
cli_loadyara
```


Summary: Heap-buffer-overflow in opj_j2k_read_tile_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538309

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
opj_j2k_read_tile_header
opj_j2k_decode_tiles
opj_j2k_decode
```


Summary: Segv on unknown address in udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=368729572

```
Crash type: Segv on unknown address
Crash state:
udiv
mpz_mdiv
mrb_bint_div
```


Summary: Use-of-uninitialized-value in k5_hashtab_add

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=377530685

```
Crash type: Use-of-uninitialized-value
Crash state:
k5_hashtab_add
insert_entry
fuzz_kdc.c
```


Summary: Heap-buffer-overflow in rijndaelSetupEncrypt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=377977949

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
rijndaelSetupEncrypt
rijndaelSetupDecrypt
AES_PDF_native::AES_PDF_native
```


Summary: Use-of-uninitialized-value in decompress_yuv.cc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=378750938

```
Crash type: Use-of-uninitialized-value
Crash state:
decompress_yuv.cc
```


Summary: Heap-buffer-overflow in jv_string_vfmt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=378836890

```
Crash type: Heap-buffer-overflow READ 13
Crash state:
jv_string_vfmt
jv_string_fmt
jv_parse_sized_custom_flags
```


Summary: Heap-buffer-overflow in process_page_

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379254072

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
process_page_
FLAC__ogg_decoder_aspect_skip_link
FLAC__stream_decoder_seek_absolute
```


Summary: Security exception in com.alibaba.fastjson2.JSONReader.readObject

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379180973

```
Crash type: Security exception
Crash state:
com.alibaba.fastjson2.JSONReader.readObject
java.base/java.nio.charset.CharsetEncoder.replaceWith
java.base/java.nio.charset.CharsetEncoder.<init>
```


Summary: Heap-buffer-overflow in Assimp::FBXExporter::WriteObjects

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379418968

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
Assimp::FBXExporter::WriteObjects
Assimp::FBXExporter::ExportBinary
Assimp::ExportSceneFBX
```


Summary: Heap-buffer-overflow in ndpi_search_mikrotik

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379180960

```
Crash type: Heap-buffer-overflow READ 16
Crash state:
ndpi_search_mikrotik
check_ndpi_detection_func
ndpi_detection_process_packet
```


Summary: Heap-buffer-overflow in zoom_search_again

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379072455

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
zoom_search_again
ndpi_detection_process_packet
ndpi_workflow_process_packet
```


Summary: Negative-size-param in extract_mr_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379768247

```
Crash type: Negative-size-param
Crash state:
extract_mr_data
parse_mr_string
readstat_parse_sav
```


Summary: Security exception in org.checkerframework.checker.formatter.util.FormatUtil.formatParameterCategories

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=380409697

```
Crash type: Security exception
Crash state:
org.checkerframework.checker.formatter.util.FormatUtil.formatParameterCategories
UtilCheckerFuzzer.fuzzChecker
UtilCheckerFuzzer.fuzzerTestOneInput
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=380569852

```
Crash type: Container-overflow READ 8
Crash state:
glslang::HlslParseContext::decomposeIntrinsic
glslang::HlslParseContext::handleFunctionCall
glslang::HlslGrammar::acceptFunctionCall
```

Summary: Container-overflow in glslang::HlslParseContext::decomposeIntrinsic


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=382547706

```
Crash type: UNKNOWN READ
Crash state:
glslang::HlslTokenStream::advanceToken
glslang::HlslGrammar::acceptLiteral
glslang::HlslGrammar::acceptPostfixExpression
```

Summary: UNKNOWN READ in glslang::HlslTokenStream::advanceToken


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=382721848

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
glslang::HlslGrammar::acceptDeclaration
glslang::HlslGrammar::acceptCompilationUnit
glslang::HlslParseContext::parseShaderStrings
```

Summary: Heap-buffer-overflow in glslang::HlslGrammar::acceptDeclaration


Summary: Heap-buffer-overflow in BS_ReadByte

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66949

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
BS_ReadByte
gf_bs_read_u8
dump_sei
```


Summary: Use-of-uninitialized-value in Archive::UnexpEndArcMsg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=382526743

```
Crash type: Use-of-uninitialized-value
Crash state:
Archive::UnexpEndArcMsg
Archive::ReadHeader50
Archive::ReadHeader
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=382922237

```
Crash type: UNKNOWN READ
Crash state:
glslang::TInfoSinkBase::location
glslang::TParseContextBase::outputMessage
glslang::TParseContextBase::error
```

Summary: UNKNOWN READ in glslang::TInfoSinkBase::location


Summary: Heap-buffer-overflow in ChunkAssignData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=382816119

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ChunkAssignData
WebPMuxCreateInternal
MuxDemuxApiTest
```


Summary: Global-buffer-overflow in igraph_dl_yylex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66992

```
Crash type: Global-buffer-overflow READ 2
Crash state:
igraph_dl_yylex
igraph_dl_yyparse
igraph_read_graph_dl
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=383595860

```
Crash type: Bad-cast
Crash state:
Bad-cast to Assimp::LogStream from Assimp::OptimizeMeshesProcess
CallbackToLogRedirector
Assimp::DefaultLogger::WriteToStreams
```


Summary: Index-out-of-bounds in dwg_decode_eed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=383814052

```
Crash type: Index-out-of-bounds
Crash state:
dwg_decode_eed
dwg_decode_entity
dwg_decode_RAY_private
```


Summary: Security exception in com.github.javaparser.GeneratedJavaParser.Expression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67005

```
Crash type: Security exception
Crash state:
com.github.javaparser.GeneratedJavaParser.Expression
java.base/java.util.concurrent.ConcurrentHashMap.putVal
java.base/java.util.concurrent.ConcurrentHashMap.putIfAbsent
```


Summary: Index-out-of-bounds in ndpi_search_dns

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=383911300

```
Crash type: Index-out-of-bounds
Crash state:
ndpi_search_dns
search_dns_again
ndpi_detection_process_packet
```


Summary: Security exception in com.google.gson.internal.bind.TypeAdapters$28.write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=384541935

```
Crash type: Security exception
Crash state:
com.google.gson.internal.bind.TypeAdapters$28.write
com.google.gson.JsonElement.isJsonPrimitive
com.google.gson.JsonElement.getAsJsonPrimitive
```


Summary: Heap-buffer-overflow in gsicc_create_getv2buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=384972943

```
Crash type: Heap-buffer-overflow READ 12
Crash state:
gsicc_create_getv2buffer
pdf_iccbased_color_space
pdf_color_space_named
```


Summary: Container-overflow in WasmEdge::LLVM::Compiler::compile

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67006

```
Crash type: Container-overflow READ 8
Crash state:
WasmEdge::LLVM::Compiler::compile
WasmEdge::LLVM::Compiler::compile
WasmEdge::Driver::FuzzTool
```


Summary: UNKNOWN READ in _TIFFVSetField

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=385406655

```
Crash type: UNKNOWN READ
Crash state:
_TIFFVSetField
TIFFSetField
TIFFFetchNormalTag
```


Summary: Use-of-uninitialized-value in mark_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=386128938

```
Crash type: Use-of-uninitialized-value
Crash state:
mark_context
incremental_gc
mrb_incremental_gc
```


Summary: Heap-buffer-overflow in cv::PngDecoder::read_from_io

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=386688710

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
cv::PngDecoder::read_from_io
cv::PngDecoder::read_chunk
cv::PngDecoder::readHeader
```


Summary: Heap-buffer-overflow in gf_gz_decompress_payload_ex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67043

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
gf_gz_decompress_payload_ex
gf_isom_box_parse_ex
gf_isom_box_array_read
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=391709145

```
Crash type: Security exception
Crash state:
java.base/java.util.Arrays.copyOfRange
org.apache.poi.util.IOUtils.safelyClone
org.apache.poi.ddf.EscherBlipRecord.setPictureData
```

Summary: Security exception in java.base/java.util.Arrays.copyOfRange


Summary: Heap-buffer-overflow in extract_candidate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=391689728

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
extract_candidate
parse_sdp_session
parse_mixed_content
```


Summary: Heap-buffer-overflow in extract_mediaip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=391975654

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
extract_mediaip
parse_sdp_session
parse_mixed_content
```


Summary: UNKNOWN READ in spvtools::val::ValidateAccessChain

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66956

```
Crash type: UNKNOWN READ
Crash state:
spvtools::val::ValidateAccessChain
spvtools::val::MemoryPass
spvtools::val::ValidateBinaryUsingContextAndValidationState
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=422517700

```
Crash type: Segv on unknown address
Crash state:
glslang::TIntermediate::addSymbol
glslang::HlslParseContext::handleFunctionCall
glslang::HlslParseContext::transformEntryPoint
```

Summary: Segv on unknown address in glslang::TIntermediate::addSymbol


Summary: Heap-use-after-free in get_ls_tile_buffers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67055

```
Crash type: Heap-use-after-free READ 1
Crash state:
get_ls_tile_buffers
av1_decode_tg_tiles_and_wrapup
aom_decode_frame_from_obus
```


Summary: Heap-buffer-overflow in od_ec_dec_normalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67216

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
od_ec_dec_normalize
av1_decode_palette_tokens
av1_visit_palette
```


Summary: Heap-buffer-overflow in od_ec_dec_init

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67184

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
od_ec_dec_init
aom_reader_init
tile_worker_hook_init
```


Summary: Stack-buffer-overflow in rtpin_satip_get_server_ip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67263

```
Crash type: Stack-buffer-overflow WRITE 1
Crash state:
rtpin_satip_get_server_ip
rtpin_initialize
gf_filter_new_finalize
```


Summary: Heap-buffer-overflow in gf_strmemstr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67261

```
Crash type: Heap-buffer-overflow READ 13
Crash state:
gf_strmemstr
txtin_probe_data
gf_filter_pid_raw_new
```


Summary: Heap-buffer-overflow in pcre2_fuzzsupport.c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67297

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
pcre2_fuzzsupport.c
```


Summary: Stack-buffer-overflow in H5S_get_simple_extent_dims

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66627

```
Crash type: Stack-buffer-overflow WRITE 8
Crash state:
H5S_get_simple_extent_dims
H5Sget_simple_extent_dims
Mat_H5ReadFieldNames
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65974

```
Crash type: Security exception
Crash state:
com.github.javaparser.GeneratedJavaParser.Expression
java.base/java.lang.String.startsWith
java.base/java.net.URL.isBuiltinStreamHandler
```


Summary: Heap-use-after-free in iasecc_delete_file

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65684

```
Crash type: Heap-use-after-free READ 4
Crash state:
iasecc_delete_file
sc_delete_file
iasecc_pkcs15_delete_file
```


Summary: Use-of-uninitialized-value in pcpp::Packet::createFirstLayer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66333

```
Crash type: Use-of-uninitialized-value
Crash state:
pcpp::Packet::createFirstLayer
pcpp::Packet::setRawPacket
FuzzTarget.cpp
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67357

```
Crash type: Security exception
Crash state:
org.threeten.bp.format.DateTimeFormatterBuilder$CompositePrinterParser.parse
java.base/sun.util.calendar.ZoneInfo.getLastRawOffset
java.base/sun.util.calendar.ZoneInfo.getOffsets
```

Summary: Security exception in org.threeten.bp.format.DateTimeFormatterBuilder$CompositePrinterParser.parse


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67381

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
pcre2_fuzzsupport.c
```


Summary: Heap-buffer-overflow in p11_rpc_buffer_get_date_value

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67383

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
p11_rpc_buffer_get_date_value
p11_rpc_message_get_date_value
p11_rpc_message_get_attribute
```


Summary: Global-buffer-overflow in dissect_dns_answer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67265

```
Crash type: Global-buffer-overflow WRITE 4
Crash state:
dissect_dns_answer
dissect_dns_common
dissect_dns
```


Summary: UNKNOWN READ in gs_font_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67377

```
Crash type: UNKNOWN READ
Crash state:
gs_font_finalize
chunk_free_object
pdfi_free_font_type1
```


Summary: Heap-use-after-free in QPDF::read_xref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65777

```
Crash type: Heap-use-after-free READ 8
Crash state:
QPDF::read_xref
QPDF::reconstruct_xref
QPDF::parse
```


Summary: Heap-buffer-overflow in ixheaace_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67273

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ixheaace_process
xaac_enc_fuzzer.cpp
```


Summary: Security exception in org.antlr.v4.runtime.atn.PredictionContext.fromRuleContext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67461

```
Crash type: Security exception
Crash state:
org.antlr.v4.runtime.atn.PredictionContext.fromRuleContext
org.antlr.v4.runtime.misc.MurmurHash.update
org.antlr.v4.runtime.misc.MurmurHash.update
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67475

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
pcre2_fuzzsupport.c
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67437

```
Crash type: Security exception
Crash state:
org.threeten.bp.format.DateTimeFormatterBuilder$CompositePrinterParser.parse
java.base/sun.util.locale.provider.LocaleProviderAdapter.getAdapter
java.base/java.text.DateFormatSymbols.getProviderInstance
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67542

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
pcre2_fuzzsupport.c
```