Summary: Container-overflow in std::__1::__function::__func<uWS::TemplatedApp<true>&& uWS::TemplatedApp<true>::

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39355

```
Crash type: Container-overflow READ 1
Crash state:
std::__1::__function::__func<uWS::TemplatedApp<true>&& uWS::TemplatedApp<true>::
uWS::TopicTree<uWS::TopicTreeMessage>::publish
uWS::TemplatedApp<true>::publish
```


Summary: Container-overflow in std::__1::__function::__func<LLVMFuzzerTestOneInput::$_0, std::__1::allocator<LL

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39335

```
Crash type: Container-overflow READ 1
Crash state:
std::__1::__function::__func<LLVMFuzzerTestOneInput::$_0, std::__1::allocator<LL
uWS::TopicTree<std::__1::basic_string<char, std::__1::char_traits<char>, std::__
std::__1::__function::__func<LLVMFuzzerTestOneInput::$_1, std::__1::allocator<LL
```


Summary: Negative-size-param in Imf_3_1::memstream_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39329

```
Crash type: Negative-size-param
Crash state:
Imf_3_1::memstream_read
dispatch_read
exr_read_scanline_chunk_info
```


Summary: Container-overflow in std::__1::__function::__func<uWS::TemplatedApp<false>&& uWS::TemplatedApp<false>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39348

```
Crash type: Container-overflow READ 1
Crash state:
std::__1::__function::__func<uWS::TemplatedApp<false>&& uWS::TemplatedApp<false>
uWS::WebSocket<false, true, test
uWS::WebSocket<false, true, test
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39354

```
Crash type: Container-overflow READ 1
Crash state:
std::__1::__function::__func<uWS::TemplatedApp<false>&& uWS::TemplatedApp<false>
uWS::TopicTree<uWS::TopicTreeMessage>::publish
ofats::any_detail::handler_traits<void, uWS::WebSocket<false, true, test
```


Summary: Use-after-poison in JS::Reference::put_value

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39379

```
Crash type: Use-after-poison READ 8
Crash state:
JS::Reference::put_value
JS::AssignmentExpression::execute
JS::ExpressionStatement::execute
```


Summary: Heap-buffer-overflow in Op_YCbCr_to_RGB<unsigned char>::convert_colorspace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39373

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
Op_YCbCr_to_RGB<unsigned char>::convert_colorspace
heif::ColorConversionPipeline::convert_image
heif::convert_colorspace
```


Summary: Heap-buffer-overflow in unpack_16bit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39472

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
unpack_16bit
exr_decoding_run
Imf_3_1::checkCoreFile
```


Summary: Heap-buffer-overflow in Imf_3_1::memstream_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39542

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
Imf_3_1::memstream_read
dispatch_read
read_uncompressed_direct
```


Summary: Heap-buffer-overflow in unpack_16bit_4chan_planar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39532

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
unpack_16bit_4chan_planar
exr_decoding_run
Imf_3_1::checkCoreFile
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39538

```
Crash type: Heap-buffer-overflow WRITE 2
Crash state:
unpack_16bit_4chan_planar
exr_decoding_run
Imf_3_1::checkCoreFile
```


Summary: Use-of-uninitialized-value in H5G__traverse_real

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29546

```
Crash type: Use-of-uninitialized-value
Crash state:
H5G__traverse_real
H5G_traverse
H5G_loc_info
```


Summary: Heap-buffer-overflow in generic_unpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39571

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
generic_unpack
exr_decoding_run
Imf_3_1::checkCoreFile
```


Summary: UNKNOWN READ in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39559

```
Crash type: UNKNOWN READ
Crash state:
helper_uc_tracecode
```


Summary: Heap-buffer-overflow in internal_huf_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39601

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
internal_huf_decompress
internal_exr_undo_piz
default_decompress_chunk
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39616

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
Imf_3_1::memstream_read
dispatch_read
exr_read_scanline_chunk_info
```


Summary: Heap-buffer-overflow in openhtj2k::T1OpenHTJ2K::decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39632

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
openhtj2k::T1OpenHTJ2K::decompress
std::__1::__packaged_task_func<std::__1::__bind<grk::T1DecompressScheduler::deco
std::__1::packaged_task<int
```


Summary: Heap-buffer-overflow in spvTextEncodeOperand

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39637

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
spvTextEncodeOperand
spvTextEncodeOperand
spvTextEncodeOpcode
```


Summary: Heap-buffer-overflow in unpack_16bit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39623

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
unpack_16bit
exr_decoding_run
Imf_3_1::checkCoreFile
```


Summary: Heap-buffer-overflow in fr_dns_label_uncompressed_length

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39657

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
fr_dns_label_uncompressed_length
decode_value_trampoline
fr_struct_from_network
```


Summary: Heap-buffer-overflow in fr_struct_from_network

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39660

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
fr_struct_from_network
fr_struct_from_network
decode_record
```


Summary: Heap-buffer-overflow in fr_dns_label_to_value_box

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39689

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
fr_dns_label_to_value_box
decode_value_trampoline
fr_struct_from_network
```


Summary: Global-buffer-overflow in fr_base16_decode_nstd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39699

```
Crash type: Global-buffer-overflow READ 1
Crash state:
fr_base16_decode_nstd
fr_value_box_from_str
fr_pair_value_from_str
```


Summary: Heap-buffer-overflow in unpack_16bit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39737

```
Crash type: Heap-buffer-overflow WRITE 2
Crash state:
unpack_16bit
exr_decoding_run
Imf_3_1::checkCoreFile
```


Summary: Heap-buffer-overflow in diagnosticInfoOrder

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39741

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
diagnosticInfoOrder
structureOrder
UA_order
```


Summary: Heap-buffer-overflow in unpack_32bit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39799

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
unpack_32bit
exr_decoding_run
Imf_3_1::checkCoreFile
```


Summary: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7171

```
Crash type: Use-of-uninitialized-value
Crash state:
rawspeed::RawImageData::checkMemIsInitialized
Cr2Decompressor.cpp
rawspeed::alignedMalloc
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39836

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
internal_huf_decompress
internal_exr_undo_piz
default_decompress_chunk
```


Summary: Heap-use-after-free in find_es_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39842

```
Crash type: Heap-use-after-free READ 4
Crash state:
find_es_header
analyze_chunk
probe_stream
```


Summary: UNKNOWN READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39900

```
Crash type: UNKNOWN READ
Crash state:
NULL```


Summary: Heap-buffer-overflow in mrb_vm_exec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39947

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
mrb_vm_exec
mrb_vm_run
mrb_top_run
```


Summary: UNKNOWN WRITE in void QtPrivate::QPodArrayOps<QPainterPath::Element>::emplace<QPainterPath::Eleme

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39957

```
Crash type: UNKNOWN WRITE
Crash state:
void QtPrivate::QPodArrayOps<QPainterPath::Element>::emplace<QPainterPath::Eleme
QPainterPath::lineTo
QOutlineMapper::clipElements
```


Summary: Heap-buffer-overflow in H5O_dtype_decode_helper

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29536

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
H5O_dtype_decode_helper
H5O_dtype_decode
H5O_dtype_shared_decode
```


Summary: UNKNOWN READ in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39944

```
Crash type: UNKNOWN READ
Crash state:
helper_uc_tracecode
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39936

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
Imf_3_1::memstream_read
dispatch_read
read_uncompressed_direct
```


Summary: Heap-buffer-overflow in mrb_funcall_with_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39937

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
mrb_funcall_with_block
mrb_instance_new
mrb_funcall_with_block
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39931

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
mrb_funcall_with_block
mrb_funcall_id
mrb_equal
```


Summary: Uncaught exception in org.jsoup.parser.HtmlTreeBuilder.process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39939

```
Crash type: Uncaught exception
Crash state:
org.jsoup.parser.HtmlTreeBuilder.process
org.jsoup.parser.HtmlTreeBuilderState$9.process
org.jsoup.parser.HtmlTreeBuilder.process
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39940

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
mrb_funcall_with_block
mrb_funcall_argv
const_get
```


Summary: Heap-buffer-overflow in generic_unpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39996

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
generic_unpack
exr_decoding_run
Imf_3_1::checkCoreFile
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39986

```
Crash type: Global-buffer-overflow READ 1
Crash state:
fr_base16_decode_nstd
fr_value_box_from_str
util_decode_proto
```


Summary: UNKNOWN READ in helper_be_stw_mmu_armeb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40073

```
Crash type: UNKNOWN READ
Crash state:
helper_be_stw_mmu_armeb
```


Summary: Use-of-uninitialized-value in gnutls_ocsp_resp_get_status

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1492

```
Crash type: Use-of-uninitialized-value
Crash state:
gnutls_ocsp_resp_get_status
gnutls_ocsp_resp_import
_start
```


Summary: Heap-buffer-overflow in hufDecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40091

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
hufDecode
internal_huf_decompress
internal_exr_undo_piz
```


Summary: UNKNOWN WRITE in h3NeighborRotations

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40106

```
Crash type: UNKNOWN WRITE
Crash state:
h3NeighborRotations
h3_fuzzer.c
```


Summary: Global-buffer-overflow in fr_unix_time_from_tm

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40118

```
Crash type: Global-buffer-overflow READ 2
Crash state:
fr_unix_time_from_tm
fr_unix_time_from_str
fr_value_box_from_str
```


Summary: Heap-buffer-overflow in derive_spatial_luma_vector_prediction

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40107

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
derive_spatial_luma_vector_prediction
fill_luma_motion_vector_predictors
motion_vectors_and_ref_indices
```


Summary: Heap-buffer-overflow in processClientServerHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40160

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
processClientServerHello
processTLSBlock
ndpi_search_tls_udp
```


Summary: UNKNOWN WRITE in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40161

```
Crash type: UNKNOWN WRITE
Crash state:
QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend
QPainterPath::addPath
QPathClipper::intersect
```


Summary: Heap-buffer-overflow in hufDecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40231

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
hufDecode
internal_huf_decompress
internal_exr_undo_piz
```


Summary: Heap-buffer-overflow in generic_unpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40234

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
generic_unpack
exr_decoding_run
Imf_3_1::checkCoreFile
```


Summary: UNKNOWN READ in __bpf_object__open

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40317

```
Crash type: UNKNOWN READ
Crash state:
__bpf_object__open
bpf_object__open_mem
bpf-object-fuzzer.c
```


Summary: Heap-buffer-overflow in jxl::JxlBoxContentDecoder::Process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40396

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
jxl::JxlBoxContentDecoder::Process
JxlDecoderProcessInput
djxl_fuzzer.cc
```


Summary: Heap-buffer-overflow in parse_microsoft_mangled_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40342

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
parse_microsoft_mangled_name
microsoft_demangle
r_bin_demangle_msvc
```


Summary: Heap-buffer-overflow in asn_realloc_rbuild_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40431

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
asn_realloc_rbuild_string
snmpv3_scopedPDU_header_realloc_rbuild
snmpv3_packet_realloc_rbuild
```


Summary: Heap-buffer-overflow in asn_build_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40429

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
asn_build_string
snmpv3_packet_build
snmp_build
```


Summary: Heap-buffer-overflow in handle_gets

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40452

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
handle_gets
uudecodeFile
cli_uuencode
```


Summary: Heap-buffer-overflow in handle_gets

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40455

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
handle_gets
cli_mbox
cli_scanmail
```


Summary: Heap-buffer-overflow in WriteRingBuffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40449

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
WriteRingBuffer
BrotliDecoderDecompressStream
jxl::JxlBoxContentDecoder::Process
```


Summary: Container-overflow in m3d_load

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40535

```
Crash type: Container-overflow READ 1
Crash state:
m3d_load
Assimp::M3DWrapper::M3DWrapper
Assimp::M3DImporter::InternReadFile
```


Summary: UNKNOWN READ in bool OT::OffsetTo<OT::ClipBox, OT::IntType<unsigned int, 3u>, true>::serialize_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40540

```
Crash type: UNKNOWN READ
Crash state:
bool OT::OffsetTo<OT::ClipBox, OT::IntType<unsigned int, 3u>, true>::serialize_c
OT::ClipList::serialize_clip_records
OT::ClipList::subset
```


Summary: Stack-buffer-overflow in ot::NetworkData::ServerTlv::GetServer16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5878

```
Crash type: Stack-buffer-overflow READ 2
Crash state:
ot::NetworkData::ServerTlv::GetServer16
ot::NetworkData::Leader::RlocLookup
ot::NetworkData::Leader::RegisterNetworkData
```


Summary: Heap-buffer-overflow in exif_data_load_data_content

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40617

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
exif_data_load_data_content
exif_data_load_data
exif_loader_get_data
```


Summary: Heap-buffer-overflow in Canvas5Structure::NIBDecoder::decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40619

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Canvas5Structure::NIBDecoder::decode
Canvas5Structure::decodeZone5
Canvas5Parser::decode
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40600

```
Crash type: Global-buffer-overflow READ 2
Crash state:
fr_unix_time_from_tm
fr_unix_time_from_str
fr_value_box_from_substr
```


Summary: UNKNOWN READ in exif_mnote_data_canon_load

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40623

```
Crash type: UNKNOWN READ
Crash state:
exif_mnote_data_canon_load
exif_mnote_data_load
interpret_maker_note
```


Summary: Heap-buffer-overflow in consume_list

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40723

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
consume_list
pn_amqp_decode_DqEoQBIoIe
pn_message_decode
```


Summary: Heap-buffer-overflow in pn_buffer_append

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40748

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
pn_buffer_append
pni_data_intern_node
pni_decoder_decode_value
```


Summary: Uncaught exception in com.google.gson.internal.bind.TypeAdapters$27.read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40830

```
Crash type: Uncaught exception
Crash state:
com.google.gson.internal.bind.TypeAdapters$27.read
java.base/java.lang.StringUTF16.compress
java.base/java.lang.String.<init>
```


Summary: UNKNOWN READ in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40797

```
Crash type: UNKNOWN READ
Crash state:
helper_uc_tracecode
```


Summary: Heap-buffer-overflow in ih264d_mark_err_slice_skip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40851

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
ih264d_mark_err_slice_skip
ih264d_video_decode
ih264d_api_function
```


Summary: Heap-buffer-overflow in __bpf_object__open

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40868

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
__bpf_object__open
bpf_object__open_mem
bpf-object-fuzzer.c
```


Summary: Memcpy-param-overlap in parquet::DeltaByteArrayDecoder::GetInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40902

```
Crash type: Memcpy-param-overlap
Crash state:
parquet::DeltaByteArrayDecoder::GetInternal
parquet::DeltaByteArrayDecoder::DecodeArrow
parquet::internal::ByteArrayChunkedRecordReader::ReadValuesSpaced
```


Summary: Heap-use-after-free in MqttDecode_Props

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40904

```
Crash type: Heap-use-after-free READ 1
Crash state:
MqttDecode_Props
MqttDecode_Disconnect
MqttClient_DecodePacket
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40957

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
__bpf_object__open
bpf_object__open_mem
bpf-object-fuzzer.c
```


Summary: Heap-buffer-overflow in apreq_header_attribute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40985

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
apreq_header_attribute
create_multipart_context
apreq_parse_multipart
```


Summary: Heap-buffer-overflow in H5G__node_found

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41011

```
Crash type: Heap-buffer-overflow READ 15
Crash state:
H5G__node_found
H5B_find
H5G__stab_lookup
```


Summary: Heap-buffer-overflow in _parse_to

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41073

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
_parse_to
parse_to
get_hdr_field
```


Summary: Heap-buffer-overflow in inflate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41111

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
inflate
uncompress2
uncompress
```


Summary: UNKNOWN READ in htp_connp_RES_FINALIZE

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29551

```
Crash type: UNKNOWN READ
Crash state:
htp_connp_RES_FINALIZE
htp_connp_res_data
fuzz_htp.c
```


Summary: Heap-buffer-overflow in arrow::internal::ValidateArrayImpl::Visit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41143

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
arrow::internal::ValidateArrayImpl::Visit
arrow::internal::ValidateArrayImpl::ValidateWithType
arrow::internal::ValidateArrayImpl::Validate
```


Summary: UNKNOWN WRITE in sprint_realloc_hinted_integer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41205

```
Crash type: UNKNOWN WRITE
Crash state:
sprint_realloc_hinted_integer
sprint_realloc_integer
snprint_integer
```


Summary: UNKNOWN READ in void jxl::CopyImageTo<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41217

```
Crash type: UNKNOWN READ
Crash state:
void jxl::CopyImageTo<int>
jxl::ModularFrameDecoder::DecodeGroup
jxl::FrameDecoder::ProcessACGroup
```


Summary: Stack-buffer-overflow in JS::Heap::gather_conservative_roots

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29266

```
Crash type: Stack-buffer-overflow READ 8
Crash state:
JS::Heap::gather_conservative_roots
JS::Heap::gather_roots
JS::Heap::collect_garbage
```


Summary: Heap-buffer-overflow in parquet::DeltaByteArrayDecoder::GetInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41221

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
parquet::DeltaByteArrayDecoder::GetInternal
parquet::DeltaByteArrayDecoder::DecodeArrow
parquet::internal::ByteArrayChunkedRecordReader::ReadValuesSpaced
```


Summary: Heap-buffer-overflow in jxl::N_AVX2::SingleFromSingle

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41225

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
jxl::N_AVX2::SingleFromSingle
jxl::ThreadPool::SequentialRunnerStatic
jxl::ModularFrameDecoder::ModularImageToDecodedRect
```


Summary: Heap-use-after-free in perfetto::trace_processor::SliceTracker::GetStackHash

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41226

```
Crash type: Heap-use-after-free READ 8
Crash state:
perfetto::trace_processor::SliceTracker::GetStackHash
perfetto::trace_processor::SliceTracker::StartSlice
perfetto::trace_processor::SliceTracker::Scoped
```


Summary: Segv on unknown address in jxl::N_AVX2::SingleFromSingle

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41233

```
Crash type: Segv on unknown address
Crash state:
jxl::N_AVX2::SingleFromSingle
jxl::ThreadPool::SequentialRunnerStatic
jxl::ModularFrameDecoder::ModularImageToDecodedRect
```


Summary: Container-overflow in void jxl::CopyImageTo<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41235

```
Crash type: Container-overflow READ 4
Crash state:
void jxl::CopyImageTo<int>
jxl::ModularFrameDecoder::DecodeGroup
jxl::FrameDecoder::ProcessACGroup
```


Summary: Heap-buffer-overflow in MqttDecode_Props

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41291

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
MqttDecode_Props
MqttDecode_Disconnect
MqttClient_DecodePacket
```


Summary: Heap-buffer-overflow in jxl::ModularFrameDecoder::DecodeGroup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41283

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
jxl::ModularFrameDecoder::DecodeGroup
jxl::FrameDecoder::ProcessACGroup
jxl::ThreadPool::RunCallState<jxl::FrameDecoder::ProcessSections
```


Summary: Segv on unknown address in Mat_H5ReadNextReferenceData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29540

```
Crash type: Segv on unknown address
Crash state:
Mat_H5ReadNextReferenceData
Mat_VarRead73
ReadData
```


Summary: Heap-buffer-overflow in junkscan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41390

```
Crash type: Heap-buffer-overflow READ 16
Crash state:
junkscan
seturl
parseurl
```


Summary: Heap-buffer-overflow in Imf_3_1::LineCompositeTask::execute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41416

```
Crash type: Heap-buffer-overflow WRITE 2
Crash state:
Imf_3_1::LineCompositeTask::execute
IlmThread_3_1::NullThreadPoolProvider::addTask
IlmThread_3_1::ThreadPool::addGlobalTask
```


Summary: Stack-buffer-overflow in sprint_realloc_hinted_integer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41372

```
Crash type: Stack-buffer-overflow WRITE 1
Crash state:
sprint_realloc_hinted_integer
sprint_realloc_integer
snprint_integer
```


Summary: Heap-buffer-overflow in Curl_sasl_decode_mech

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41403

```
Crash type: Heap-buffer-overflow READ 10
Crash state:
Curl_sasl_decode_mech
Curl_sasl_parse_url_auth_option
smtp_parse_url_options
```


Summary: Stack-buffer-overflow in TranslateNumber

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41437

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
TranslateNumber
TranslateWord3
TranslateWord
```


Summary: Heap-buffer-overflow in mk_string_copy_substr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41448

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
mk_string_copy_substr
mk_rconf_read
mk_rconf_open
```


Summary: Dynamic-stack-buffer-overflow in OutputJsonDNP3SetItem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41487

```
Crash type: Dynamic-stack-buffer-overflow READ 4
Crash state:
OutputJsonDNP3SetItem
JsonDNP3LogObjects
JsonDNP3LogResponse
```


Summary: Stack-buffer-overflow in MatchRule

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41504

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
MatchRule
TranslateRules
TranslateWord3
```


Summary: Global-buffer-overflow in draco::MeshEdgebreakerDecoderImpl<draco::MeshEdgebreakerTraversalValenceDecoder>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41545

```
Crash type: Global-buffer-overflow READ 4
Crash state:
draco::MeshEdgebreakerDecoderImpl<draco::MeshEdgebreakerTraversalValenceDecoder>
draco::MeshEdgebreakerDecoderImpl<draco::MeshEdgebreakerTraversalValenceDecoder>
draco::MeshDecoder::DecodeGeometryData
```


Summary: Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41582

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
void Assimp::Logger::warn<char const
Assimp::NDOImporter::InternReadFile
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41608

```
Crash type: Container-overflow READ 4
Crash state:
void jxl::CopyImageTo<int>
jxl::ModularFrameDecoder::DecodeGroup
jxl::FrameDecoder::ProcessACGroup
```


Summary: UNKNOWN READ in ndlz4_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41636

```
Crash type: UNKNOWN READ
Crash state:
ndlz4_decompress
blosc_d
do_job
```


Summary: Heap-buffer-overflow in uncompress_b44_impl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41625

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
uncompress_b44_impl
default_decompress_chunk
exr_decoding_run
```


Summary: Heap-buffer-overflow in PCIDSK::CPCIDSKFile::ReadFromFile

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41993

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
PCIDSK::CPCIDSKFile::ReadFromFile
PCIDSK::CPCIDSKSegment::ReadFromFile
PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment
```


Summary: Heap-buffer-overflow in ndlz4_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42131

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
ndlz4_decompress
blosc_d
do_job
```


Summary: Dynamic-stack-buffer-overflow in zend_calc_live_ranges

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42156

```
Crash type: Dynamic-stack-buffer-overflow READ 4
Crash state:
zend_calc_live_ranges
pass_two
zend_compile_func_decl
```


Summary: UNKNOWN READ in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42196

```
Crash type: UNKNOWN READ
Crash state:
helper_uc_tracecode
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42210

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
blosc_d
do_job
blosc_run_decompression_with_context
```

Summary: Heap-buffer-overflow in blosc_d


Summary: Heap-buffer-overflow in find_sdp_line_delimiter

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42238

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
find_sdp_line_delimiter
parse_mixed_content
parse_sdp
```


Summary: UNKNOWN READ in ndlz8_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42262

```
Crash type: UNKNOWN READ
Crash state:
ndlz8_decompress
blosc_d
do_job
```


Summary: Heap-buffer-overflow in flatbuffers::EscapeString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42244

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
flatbuffers::EscapeString
flexbuffers::Reference::ToString
void flexbuffers::AppendToString<flexbuffers::Vector>
```


Summary: Heap-buffer-overflow in ap_is_chunked

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42226

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ap_is_chunked
fuzz_utils.c
```


Summary: Global-buffer-overflow in InStringSymbol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42227

```
Crash type: Global-buffer-overflow WRITE {*}
Crash state:
InStringSymbol
InSymbol
ParseIT8
```


Summary: Segv on unknown address in pdfi_dereference

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42283

```
Crash type: Segv on unknown address
Crash state:
pdfi_dereference
pdfi_get_child
pdfi_get_page_dict
```


Summary: Heap-buffer-overflow in pdfi_repair_file

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42325

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
pdfi_repair_file
pdfi_read_xref_stream_dict
pdfi_read_xref
```


Summary: Memcpy-param-overlap in pdfi_set_input_stream

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42268

```
Crash type: Memcpy-param-overlap
Crash state:
pdfi_set_input_stream
zPDFstream
gs_interpret
```


Summary: UNKNOWN READ in pdfi_open_memory_stream_from_filtered_stream

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42285

```
Crash type: UNKNOWN READ
Crash state:
pdfi_open_memory_stream_from_filtered_stream
pdfi_create_iccbased
pdfi_create_colorspace_by_array
```


Summary: Heap-buffer-overflow in pdfi_dereference

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42327

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
pdfi_dereference
pdfi_deref_loop_detect
pdfi_dict_get
```


Summary: Segv on unknown address in chunk_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42312

```
Crash type: Segv on unknown address
Crash state:
chunk_free_object
file_close_file
sclose
```


Summary: Segv on unknown address in cs_adjust_counts_icc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42290

```
Crash type: Segv on unknown address
Crash state:
cs_adjust_counts_icc
gstate_clone_core
gs_gsave
```


Summary: Stack-buffer-overflow in pdfi_annot_draw

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42329

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
pdfi_annot_draw
pdfi_do_annotations
pdfi_page_render
```


Summary: Stack-buffer-underflow in read_xref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42294

```
Crash type: Stack-buffer-underflow WRITE 1
Crash state:
read_xref
pdfi_read_xref
pdfi_set_input_stream
```


Summary: Heap-buffer-overflow in H5O__cont_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29549

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
H5O__cont_decode
H5O__chunk_deserialize
H5O__cache_deserialize
```


Summary: Global-buffer-overflow in search_table_1

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42266

```
Crash type: Global-buffer-overflow READ 1
Crash state:
search_table_1
split_bogus_operator
pdfi_interpret_stream_operator
```


Summary: Heap-use-after-free in chunk_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42324

```
Crash type: Heap-use-after-free READ 8
Crash state:
chunk_free_object
pdfi_open_memory_stream_from_filtered_stream
pdfi_build_mesh_shading
```


Summary: Global-buffer-overflow in pdfi_fapi_get_glyph

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42310

```
Crash type: Global-buffer-overflow READ {*}
Crash state:
pdfi_fapi_get_glyph
get_fapi_glyph_data
cff_slot_load
```


Summary: Stack-buffer-overflow in pdfi_read_cff_dict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42298

```
Crash type: Stack-buffer-overflow WRITE 4
Crash state:
pdfi_read_cff_dict
pdfi_read_cff_dict
pdfi_read_cff_dict
```


Summary: Heap-buffer-overflow in flexbuffers::Verifier::VerifyRef

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42373

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
flexbuffers::Verifier::VerifyRef
flexbuffers::Verifier::VerifyVector
flexbuffers::Verifier::VerifyRef
```


Summary: Heap-use-after-free in stell

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42280

```
Crash type: Heap-use-after-free READ 1
Crash state:
stell
pdfi_unread_tell
pdfi_dereference
```


Summary: Heap-buffer-overflow in chunk_obj_alloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42356

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
chunk_obj_alloc
chunk_alloc_bytes
pdfi_object_alloc
```


Summary: UNKNOWN in pdfi_fapi_get_gsubr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42485

```
Crash type: UNKNOWN
Crash state:
pdfi_fapi_get_gsubr
gs_fapi_serialize_type2_font
gs_fapi_ft_get_scaled_font
```


Summary: Stack-buffer-overflow in pdfi_create_iccbased

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42460

```
Crash type: Stack-buffer-overflow WRITE 4
Crash state:
pdfi_create_iccbased
pdfi_create_colorspace_by_array
pdfi_setcolorspace
```


Summary: Segv on unknown address in gx_adjust_color_Pattern

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42453

```
Crash type: Segv on unknown address
Crash state:
gx_adjust_color_Pattern
gs_setcolor
pdfi_setfillcolor
```


Summary: Negative-size-param in general_endcidrange_func

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42479

```
Crash type: Negative-size-param
Crash state:
general_endcidrange_func
cmap_endcidrange_func
pdfi_pscript_interpret
```


Summary: UNKNOWN READ in chunk_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42491

```
Crash type: UNKNOWN READ
Crash state:
chunk_free_object
pdfi_close_file
pdfi_dereference
```


Summary: Stack-buffer-overflow in pdfi_do_image

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42454

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
pdfi_do_image
pdfi_do_image_or_form
pdfi_Do
```


Summary: Heap-buffer-overflow in ndlz4_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42472

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
ndlz4_decompress
ndlz_decompress
blosc_d
```


Summary: Heap-buffer-overflow in cmap_endcodespacerange_func

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42541

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
cmap_endcodespacerange_func
pdfi_pscript_interpret
pdfi_read_cmap
```


Summary: Heap-buffer-overflow in ndlz8_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42537

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
ndlz8_decompress
blosc_d
do_job
```


Summary: Segv on unknown address in sreadbuf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42489

```
Crash type: Segv on unknown address
Crash state:
sreadbuf
spgetcc
sgets
```


Summary: UNKNOWN READ in pdfi_read_cff_font

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42559

```
Crash type: UNKNOWN READ
Crash state:
pdfi_read_cff_font
pdfi_load_font
pdfi_load_dict_font
```


Summary: Heap-buffer-overflow in insert_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42560

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
insert_free
chunk_obj_alloc
chunk_alloc_bytes
```


Summary: Global-buffer-overflow in ps_font_def_func

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42613

```
Crash type: Global-buffer-overflow READ {*}
Crash state:
ps_font_def_func
pdfi_pscript_interpret
pdfi_read_ps_font
```


Summary: Segv on unknown address in chunk_obj_alloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42633

```
Crash type: Segv on unknown address
Crash state:
chunk_obj_alloc
chunk_alloc_bytes
pdfi_pscript_interpret
```


Summary: UNKNOWN READ in pdfi_dereference

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42616

```
Crash type: UNKNOWN READ
Crash state:
pdfi_dereference
pdfi_deref_loop_detect
pdfi_dict_get
```


Summary: UNKNOWN WRITE in void uWS::WebSocketProtocol<true, Impl>::UnrolledXor<4>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42672

```
Crash type: UNKNOWN WRITE
Crash state:
void uWS::WebSocketProtocol<true, Impl>::UnrolledXor<4>
void uWS::WebSocketProtocol<true, Impl>::UnrolledXor<10>
void uWS::WebSocketProtocol<true, Impl>::UnrolledXor<14>
```


Summary: UNKNOWN READ in pdfi_dict_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42687

```
Crash type: UNKNOWN READ
Crash state:
pdfi_dict_get
pdfi_dict_get_int
pdfi_read_bare_object
```


Summary: Heap-buffer-overflow in seturl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42708

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
seturl
parseurl
curl_url_set
```


Summary: Memcpy-param-overlap in gs_fapi_do_char

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42656

```
Crash type: Memcpy-param-overlap
Crash state:
gs_fapi_do_char
pdfi_fapi_build_char
show_proceed
```


Summary: UNKNOWN READ in mls_semantic_level_expand

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42729

```
Crash type: UNKNOWN READ
Crash state:
mls_semantic_level_expand
policydb_user_cache
hashtab_map
```


Summary: Segv on unknown address in symhash

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42741

```
Crash type: Segv on unknown address
Crash state:
symhash
hashtab_search
mls_semantic_level_expand
```


Summary: Heap-buffer-overflow in Curl_sasl_decode_mech

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42727

```
Crash type: Heap-buffer-overflow READ 10
Crash state:
Curl_sasl_decode_mech
Curl_sasl_parse_url_auth_option
pop3_parse_url_options
```


Summary: Stack-buffer-overflow in pdfi_annot_draw_LE_one

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42783

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
pdfi_annot_draw_LE_one
pdfi_annot_draw_LE
pdfi_annot_draw_Line
```


Summary: Stack-buffer-overflow in line_join_points

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42796

```
Crash type: Stack-buffer-overflow WRITE 4
Crash state:
line_join_points
stroke_add_compat
gx_stroke_path_only
```


Summary: Stack-buffer-overflow in strncat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42736

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
strncat
pdf_cmap_open_file
pdfi_read_cmap
```


Summary: Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42862

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
bool SmilesParseOps::parser::parse_data_sgroup<std::__1::__wrap_iter<char const*
bool SmilesParseOps::parser::parse_it<std::__1::__wrap_iter<char const*> >
```


Summary: Heap-buffer-overflow in seturl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42808

```
Crash type: Heap-buffer-overflow READ 16
Crash state:
seturl
parseurl
curl_url_set
```


Summary: Heap-buffer-overflow in jxl::N_AVX2::FloatToRGBA8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42839

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
jxl::N_AVX2::FloatToRGBA8
jxl::FinalizeImageRect
jxl::ThreadPool::RunCallState<jxl::FinalizeFrameDecoding
```


Summary: Heap-buffer-overflow in H5MM_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29545

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
H5MM_memcpy
H5D__scatter_mem
H5D__scatgath_read
```


Summary: Heap-buffer-overflow in s_hex_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42896

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
s_hex_process
s_exD_process
sreadbuf
```


Summary: UNKNOWN READ in names_string_ref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42907

```
Crash type: UNKNOWN READ
Crash state:
names_string_ref
zfont_glyph_name
pdfi_fapi_get_glyphname_or_cid
```


Summary: UNKNOWN READ in insert_free_size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42917

```
Crash type: UNKNOWN READ
Crash state:
insert_free_size
chunk_free_object
pdfi_pscript_stack_finit
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42924

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
ndlz4_decompress
ndlz_decompress
blosc_d
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42901

```
Crash type: Heap-buffer-overflow READ 10
Crash state:
Curl_sasl_decode_mech
Curl_sasl_parse_url_auth_option
pop3_parse_url_options
```


Summary: Heap-buffer-overflow in seturl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42892

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
seturl
parseurl
curl_url_set
```


Summary: Heap-use-after-free in zend_hash_reverse_apply

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42894

```
Crash type: Heap-use-after-free READ 4
Crash state:
zend_hash_reverse_apply
shutdown_destructors
zend_call_destructors
```


Summary: Heap-buffer-overflow in grk::GrkImage::sycc420_to_rgb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42931

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
grk::GrkImage::sycc420_to_rgb
grk::GrkImage::color_sycc_to_rgb
grk::GrkImage::colorConvert
```


Summary: Heap-buffer-overflow in TTF::be_u16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42934

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
TTF::be_u16
TTF::Cmap::subtable
TTF::Font::try_load_from_offset
```


Summary: Stack-buffer-overflow in pdfi_oc_is_ocg_visible

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42908

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
pdfi_oc_is_ocg_visible
pdfi_op_BDC
pdfi_interpret_stream_operator
```


Summary: UNKNOWN READ in read_xref_stream_entries

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42927

```
Crash type: UNKNOWN READ
Crash state:
read_xref_stream_entries
pdfi_process_xref_stream
pdfi_read_xref_stream_dict
```


Summary: Global-buffer-overflow in pdfi_dict_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42957

```
Crash type: Global-buffer-overflow READ 8
Crash state:
pdfi_dict_get
pdfi_dict_get_int
pdfi_read_bare_object
```


Summary: Heap-buffer-overflow in grk::GrkImage::color_esycc_to_rgb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42958

```
Crash type: Heap-buffer-overflow READ 16
Crash state:
grk::GrkImage::color_esycc_to_rgb
grk::GrkImage::colorConvert
grk_decompress_fuzzer.cpp
```


Summary: UNKNOWN READ in pdfi_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42980

```
Crash type: UNKNOWN READ
Crash state:
pdfi_free_object
pdfi_clear_context
pdfi_free_context
```


Summary: Stack-buffer-overflow in fn_ElIn_evaluate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43012

```
Crash type: Stack-buffer-overflow WRITE 4
Crash state:
fn_ElIn_evaluate
pdfi_tf_using_function
gs_begin_transparency_mask
```


Summary: UNKNOWN READ in chunk_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42998

```
Crash type: UNKNOWN READ
Crash state:
chunk_free_object
gs_font_dir_finalize
chunk_free_object
```


Summary: UNKNOWN READ in pdfi_array_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43004

```
Crash type: UNKNOWN READ
Crash state:
pdfi_array_get
pdfi_array_get_type
pdfi_create_colorspace_by_array
```


Summary: Heap-buffer-overflow in hfs_dir_open_meta_cb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43040

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
hfs_dir_open_meta_cb
hfs_cat_traverse
hfs_dir_open_meta
```


Summary: Stack-buffer-underflow in InterpretPhoneme

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43037

```
Crash type: Stack-buffer-underflow READ 8
Crash state:
InterpretPhoneme
InterpretPhoneme2
CalcLengths
```


Summary: Heap-use-after-free in zend_jit_fetch_dim_r_helper

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43055

```
Crash type: Heap-use-after-free READ 4
Crash state:
zend_jit_fetch_dim_r_helper
zero
zend_execute
```


Summary: Heap-buffer-overflow in read_xref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43045

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
read_xref
pdfi_read_xref
pdfi_set_input_stream
```


Summary: Segv on unknown address in r_buf_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43092

```
Crash type: Segv on unknown address
Crash state:
r_buf_free
destroy
r_bin_file_free
```


Summary: Global-buffer-overflow in stbi__jpeg_decode_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43113

```
Crash type: Global-buffer-overflow READ 4
Crash state:
stbi__jpeg_decode_block
stbi__decode_jpeg_image
stbi__jpeg_load
```


Summary: UNKNOWN READ in pdfi_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43094

```
Crash type: UNKNOWN READ
Crash state:
pdfi_free_object
pdfi_create_colorspace_by_array
pdfi_create_DeviceN
```


Summary: Heap-buffer-overflow in ZSTD_createDDict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43110

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
ZSTD_createDDict
blosc_run_decompression_with_context
blosc2_decompress_ctx
```


Summary: Heap-buffer-overflow in seturl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43160

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
seturl
parseurl
curl_url_set
```


Summary: Negative-size-param in general_endcidrange_func

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43156

```
Crash type: Negative-size-param
Crash state:
general_endcidrange_func
cmap_endcidrange_func
pdfi_pscript_interpret
```


Summary: Heap-buffer-overflow in Curl_sasl_decode_mech

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43186

```
Crash type: Heap-buffer-overflow READ 10
Crash state:
Curl_sasl_decode_mech
Curl_sasl_parse_url_auth_option
pop3_parse_url_options
```


Summary: Heap-buffer-overflow in grk::GrkImage::cieLabToRGB

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43161

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
grk::GrkImage::cieLabToRGB
grk::GrkImage::applyColourManagement
grk::CodeStreamDecompress::postProcess
```


Summary: UNKNOWN READ in pdfi_count_cff_index

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43599

```
Crash type: UNKNOWN READ
Crash state:
pdfi_count_cff_index
pdfi_read_cff_font
pdfi_load_font
```


Summary: UNKNOWN READ in chunk_obj_alloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43680

```
Crash type: UNKNOWN READ
Crash state:
chunk_obj_alloc
chunk_alloc_bytes
cmap_endfbrange_func
```


Summary: Heap-buffer-overflow in ndpi_workflow_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43921

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
ndpi_workflow_process_packet
fuzz_ndpi_reader.c
```


Summary: Heap-buffer-overflow in ndpi_search_kerberos

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43925

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_search_kerberos
check_ndpi_detection_func
ndpi_check_flow_func
```


Summary: Stack-buffer-overflow in pdfi_open_CIDFont_substitute_file

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44034

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
pdfi_open_CIDFont_substitute_file
pdfi_load_font
pdfi_read_type0_font
```


Summary: Heap-use-after-free in dhcp6_no_relay

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44573

```
Crash type: Heap-use-after-free WRITE 1
Crash state:
dhcp6_no_relay
dhcp6_maybe_relay
dhcp6_maybe_relay
```


Summary: Heap-buffer-overflow in ujson.cpython-38-x86_64-linux-gnu.so

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44973

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
ujson.cpython-38-x86_64-linux-gnu.so
ujson.cpython-38-x86_64-linux-gnu.so
ujson.cpython-38-x86_64-linux-gnu.so
```


Summary: Heap-buffer-overflow in r_str_utf8_codepoint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48098

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
r_str_utf8_codepoint
r_str_char_fullwidth
r_str_len_utf8_ansi
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29580

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
H5HL__fl_deserialize
H5HL__cache_datablock_deserialize
H5C_load_entry
```

Summary: Heap-buffer-overflow in H5HL__fl_deserialize


Summary: Heap-buffer-overflow in Imf_2_5::FastHufDecoder::decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29106

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
Imf_2_5::FastHufDecoder::decode
Imf_2_5::hufUncompress
Imf_2_5::PizCompressor::uncompress
```


Summary: Heap-buffer-overflow in WelsDec::NeedErrorCon

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29604

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
WelsDec::NeedErrorCon
WelsDec::CheckAndFinishLastPic
WelsDecodeBs
```


Summary: Heap-use-after-free in lua_closeslot

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29610

```
Crash type: Heap-use-after-free WRITE 1
Crash state:
lua_closeslot
luaL_traceback
msghandler
```


Summary: Heap-buffer-overflow in blosc_getitem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29613

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
blosc_getitem
get_coffset
frame_get_lazychunk
```


Summary: Segv on unknown address in frame_get_lazychunk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29295

```
Crash type: Segv on unknown address
Crash state:
frame_get_lazychunk
frame_decompress_chunk
blosc2_schunk_decompress_chunk
```


Summary: Heap-use-after-free in __libcpp_strpbrk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29698

```
Crash type: Heap-use-after-free READ 2
Crash state:
__libcpp_strpbrk
strpbrk
tesseract::Tesseract::one_ell_conflict
```


Summary: Heap-buffer-overflow in pdf_get_xref_entry

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29728

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
pdf_get_xref_entry
pdf_cache_object
pdf_resolve_indirect
```


Summary: Heap-use-after-free in ZSTD_freeDDict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29705

```
Crash type: Heap-use-after-free READ {*}
Crash state:
ZSTD_freeDDict
blosc2_free_ctx
blosc2_schunk_free
```


Summary: Heap-buffer-overflow in H5F_addr_decode_len

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29776

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
H5F_addr_decode_len
H5F_addr_decode
H5G_ent_decode
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29759

```
Crash type: UNKNOWN READ
Crash state:
H5HG__cache_heap_deserialize
H5C_load_entry
H5C_protect
```

Summary: UNKNOWN READ in H5HG__cache_heap_deserialize


Summary: UNKNOWN READ in frame_get_metalayers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29280

```
Crash type: UNKNOWN READ
Crash state:
frame_get_metalayers
blosc2_frame_to_schunk
blosc2_schunk_open_sframe
```


Summary: Heap-buffer-overflow in rans_uncompress_to_4x16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29795

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
rans_uncompress_to_4x16
rans_uncompress_4x16
cram_uncompress_block
```


Summary: Heap-buffer-overflow in blosc_d

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29816

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
blosc_d
_blosc_getitem
blosc_getitem
```


Summary: Heap-buffer-overflow in arith_uncompress_to

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29792

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
arith_uncompress_to
cram_uncompress_block
cram_read_SAM_hdr
```


Summary: Heap-buffer-overflow in fdilate_1_56

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29819

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
fdilate_1_56
fmorphopgen_low_1
pixFMorphopGen_1
```


Summary: Heap-buffer-overflow in safe_ltf8_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29837

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
safe_ltf8_get
cram_varint_decode_init
cram_decoder_init
```


Summary: Heap-buffer-overflow in cram_xpack_decode_init

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29827

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
cram_xpack_decode_init
cram_decoder_init
cram_decode_compression_header
```


Summary: UNKNOWN READ in blosc_getitem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29287

```
Crash type: UNKNOWN READ
Crash state:
blosc_getitem
get_coffset
frame_get_lazychunk
```


Summary: Heap-buffer-overflow in int32_get_blk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29855

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
int32_get_blk
cram_read_SAM_hdr
cram_dopen
```


Summary: Global-buffer-overflow in QSvgSwitch::draw

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29873

```
Crash type: Global-buffer-overflow READ 1
Crash state:
QSvgSwitch::draw
QSvgTinyDocument::draw
QSvgTinyDocument::draw
```


Summary: Heap-use-after-free in DatasetAdd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29886

```
Crash type: Heap-use-after-free READ 4
Crash state:
DatasetAdd
DetectDatasetBufferMatch
DetectEngineContentInspection
```


Summary: Heap-use-after-free in sampled_data_sample

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29903

```
Crash type: Heap-use-after-free WRITE 4
Crash state:
sampled_data_sample
sampled_data_continue
interp
```


Summary: Heap-buffer-overflow in safe_itf8_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29908

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
safe_itf8_get
cram_decode_compression_header
cram_first_slice
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29939

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
rans_uncompress_to_4x16
rans_decode
uncompress
```


Summary: UNKNOWN WRITE in WelsDecodeBs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29969

```
Crash type: UNKNOWN WRITE
Crash state:
WelsDecodeBs
WelsDec::CWelsDecoder::DecodeFrame2WithCtx
WelsDec::CWelsDecoder::DecodeFrame2
```


Summary: Memcpy-param-overlap in frame_get_usermeta

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29973

```
Crash type: Memcpy-param-overlap
Crash state:
frame_get_usermeta
blosc2_frame_to_schunk
blosc2_schunk_open_sframe
```


Summary: Heap-buffer-overflow in blosc_getitem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29976

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
blosc_getitem
get_coffset
frame_get_lazychunk
```


Summary: Heap-use-after-free in igraph_read_graph_gml

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29377

```
Crash type: Heap-use-after-free READ 8
Crash state:
igraph_read_graph_gml
read_gml_fuzzer.c
igraph_i_gml_destroy_attrs
```


Summary: Heap-buffer-overflow in safe_ltf8_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30012

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
safe_ltf8_get
cram_const_decode_init
cram_decoder_init
```


Summary: Stack-buffer-overflow in kdf_sshkdf_set_ctx_params

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30037

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
kdf_sshkdf_set_ctx_params
EVP_KDF_CTX_set_params
cryptofuzz::module::OpenSSL::OpKDF_SSH
```


Summary: Heap-buffer-overflow in unstripe

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30087

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
unstripe
arith_uncompress_to
arith_decode
```


Summary: Heap-buffer-overflow in flb_parser_json_do

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30090

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
flb_parser_json_do
flb_parser_do
parser_fuzzer.c
```


Summary: Stack-buffer-overflow in flb_sds_cat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30093

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
flb_sds_cat
ra_translate_keymap
flb_ra_translate
```


Summary: Heap-buffer-overflow in sc_pkcs15emu_oberthur_add_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30112

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
sc_pkcs15emu_oberthur_add_data
sc_oberthur_parse_privateinfo
sc_pkcs15emu_oberthur_init
```


Summary: Stack-use-after-return in sta_prop_equal_fn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30192

```
Crash type: Stack-use-after-return READ 6
Crash state:
sta_prop_equal_fn
wmem_map_insert
dissect_ieeeNUMBER_common
```


Summary: Heap-buffer-overflow in ZSTD_createDDict_advanced

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29369

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
ZSTD_createDDict_advanced
ZSTD_createDDict
blosc_run_decompression_with_context
```


Summary: Heap-use-after-free in cil_destroy_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30234

```
Crash type: Heap-use-after-free READ 4
Crash state:
cil_destroy_block
cil_destroy_data
cil_tree_node_destroy
```


Summary: Heap-buffer-overflow in blosc_run_decompression_with_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30193

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
blosc_run_decompression_with_context
blosc2_decompress
fuzz_decompress_chunk.c
```


Summary: Heap-use-after-free in sctp_sorecvmsg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30215

```
Crash type: Heap-use-after-free WRITE 4
Crash state:
sctp_sorecvmsg
usrsctp_recvv
handle_upcall
```


Summary: Memcpy-param-overlap in frame_get_metalayers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30253

```
Crash type: Memcpy-param-overlap
Crash state:
frame_get_metalayers
blosc2_frame_to_schunk
fuzz_decompress_frame.c
```


Summary: Global-buffer-overflow in mode_sense_page

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30219

```
Crash type: Global-buffer-overflow READ 4
Crash state:
mode_sense_page
scsi_disk_check_mode_select
mode_select_pages
```


Summary: Heap-buffer-overflow in H5MM_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30250

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
H5MM_memcpy
H5VM_memcpyvv
H5D__compact_readvv
```


Summary: Heap-buffer-overflow in flatbuffers::Table* flatbuffers::GetMutableRoot<flatbuffers::Table>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30289

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
flatbuffers::Table* flatbuffers::GetMutableRoot<flatbuffers::Table>
flatbuffers::Table const* flatbuffers::GetRoot<flatbuffers::Table>
flatbuffers::JsonPrinter::GenFieldOffset
```


Summary: Heap-buffer-overflow in LibRaw_buffer_datastream::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30324

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
LibRaw_buffer_datastream::read
LibRaw::uncompressed_fp_dng_load_raw
LibRaw::unpack
```


Summary: UNKNOWN READ in _fini

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30296

```
Crash type: UNKNOWN READ
Crash state:
_fini
```


Summary: UNKNOWN READ in wabt::ReadBinary

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30373

```
Crash type: UNKNOWN READ
Crash state:
wabt::ReadBinary
wabt::ReadBinaryIr
wasm2wat_fuzzer.cc
```


Summary: Global-buffer-overflow in vte_write_debug

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30351

```
Crash type: Global-buffer-overflow READ 1
Crash state:
vte_write_debug
do_action
parse_data
```


Summary: Heap-buffer-overflow in http_process_user_agent

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30389

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
http_process_user_agent
process_chlo
ndpi_search_quic
```


Summary: Stack-buffer-overflow in processClientServerHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30393

```
Crash type: Stack-buffer-overflow WRITE 6
Crash state:
processClientServerHello
processTLSBlock
ndpi_search_tls_tcp
```


Summary: Heap-buffer-overflow in rle_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30395

```
Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
rle_decode
rans_uncompress_to_4x16
rans_uncompress_4x16
```


Summary: UNKNOWN READ in cpu_arm_exec_armeb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30444

```
Crash type: UNKNOWN READ
Crash state:
cpu_arm_exec_armeb
resume_all_vcpus_armeb
vm_start_armeb
```


Summary: Heap-buffer-overflow in flatbuffers::JsonPrinter::GenFieldOffset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30468

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
flatbuffers::JsonPrinter::GenFieldOffset
flatbuffers::JsonPrinter::GenStruct
flatbuffers::GenerateText
```


Summary: Heap-buffer-overflow in TTF::be_u16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29338

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
TTF::be_u16
TTF::Font::load_from_offset
TTF::Font::load_from_memory
```


Summary: Heap-use-after-free in sampled_data_continue

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30487

```
Crash type: Heap-use-after-free WRITE 4
Crash state:
sampled_data_continue
gs_interpret
gs_main_run_string_with_length
```


Summary: Global-buffer-overflow in Gfx::decode_frame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30507

```
Crash type: Global-buffer-overflow READ 4
Crash state:
Gfx::decode_frame
Gfx::GIFImageDecoderPlugin::frame
Gfx::GIFImageDecoderPlugin::bitmap
```


Summary: Heap-use-after-free in igraph_vector_ptr_size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29408

```
Crash type: Heap-use-after-free READ 8
Crash state:
igraph_vector_ptr_size
igraph_gml_tree_destroy
igraph_i_gml_parsedata_destroy
```


Summary: Heap-buffer-overflow in bn_sqr_karat_imp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30537

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
bn_sqr_karat_imp
bn_sqr_karat
cryptofuzz::module::relic_bignum::Sqr::Run
```


Summary: Heap-buffer-overflow in int flatbuffers::ReadScalar<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30699

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
int flatbuffers::ReadScalar<int>
flatbuffers::Table::GetVTable
flatbuffers::Table::GetOptionalFieldOffset
```


Summary: Heap-use-after-free in sampled_data_sample

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30715

```
Crash type: Heap-use-after-free WRITE 4
Crash state:
sampled_data_sample
sampled_data_continue
interp
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30571

```
Crash type: Heap-use-after-free READ 8
Crash state:
sctp_sorecvmsg
usrsctp_recvv
handle_upcall
```

Summary: Heap-use-after-free in sctp_sorecvmsg


Summary: UNKNOWN READ in cpu_arm_exec_arm

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30636

```
Crash type: UNKNOWN READ
Crash state:
cpu_arm_exec_arm
tcg_cpu_exec_arm
tcg_exec_all_arm
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30682

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
flatbuffers::Table* flatbuffers::GetMutableRoot<flatbuffers::Table>
flatbuffers::Table const* flatbuffers::GetRoot<flatbuffers::Table>
flatbuffers::JsonPrinter::GenFieldOffset
```


Summary: Heap-buffer-overflow in flatbuffers::vector_downward::fill

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30684

```
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
flatbuffers::vector_downward::fill
flatbuffers::FlatBufferBuilder::PreAlign
flatbuffers::FlatBufferBuilder::ForceVectorAlignment
```


Summary: Heap-use-after-free in DestroyPicBuff

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30770

```
Crash type: Heap-use-after-free WRITE 4
Crash state:
DestroyPicBuff
WelsRequestMem
SyncPictureResolutionExt
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30743

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
H5HG_read
H5VL__native_blob_get
H5VL__blob_get
```

Summary: Heap-buffer-overflow in H5HG_read


Summary: Global-buffer-overflow in llvm_ks::StringRef::find_last_not_of

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30790

```
Crash type: Global-buffer-overflow READ 1
Crash state:
llvm_ks::StringRef::find_last_not_of
llvm_ks::StringRef::rtrim
llvm_ks::StringRef::trim
```


Summary: Negative-size-param in frame_get_metalayers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30748

```
Crash type: Negative-size-param
Crash state:
frame_get_metalayers
frame_to_schunk
blosc2_schunk_from_buffer
```


Summary: Heap-buffer-overflow in H5MM_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30749

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
H5MM_memcpy
H5VM_memcpyvv
H5D__compact_readvv
```


Summary: Segv on unknown address in blosc_read_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30761

```
Crash type: Segv on unknown address
Crash state:
blosc_read_header
blosc2_getitem_ctx
blosc_getitem
```


Summary: Heap-buffer-overflow in WelsDec::CopyRectBlock4Cols

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29431

```
Crash type: Heap-buffer-overflow READ 16
Crash state:
WelsDec::CopyRectBlock4Cols
WelsDec::GetColocatedMb
WelsDec::PredMvBDirectSpatial
```


Summary: Heap-buffer-overflow in frame_get_lazychunk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30772

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
frame_get_lazychunk
frame_decompress_chunk
blosc2_schunk_decompress_chunk
```


Summary: Global-buffer-overflow in wabt::GetRelocTypeName

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30792

```
Crash type: Global-buffer-overflow READ 8
Crash state:
wabt::GetRelocTypeName
wabt::BinaryReader::ReadRelocSection
wabt::BinaryReader::ReadCustomSection
```


Summary: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30817

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
OT::IntType<unsigned short, 2u>::operator unsigned int
OT::AnchorMatrix::subset
```


Summary: Heap-buffer-overflow in ih264d_fill_bs1_16x16mb_pslice

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30801

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
ih264d_fill_bs1_16x16mb_pslice
ih264d_compute_bs_non_mbaff_thread
ih264d_recon_deblk_slice
```


Summary: Heap-buffer-overflow in frame_get_vlmetalayers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30868

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
frame_get_vlmetalayers
frame_to_schunk
blosc2_schunk_from_buffer
```


Summary: Heap-buffer-overflow in des_ede3_wrap

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30847

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
des_ede3_wrap
tdes_wrap_cipher_internal
tdes_wrap_cipher
```


Summary: Stack-buffer-overflow in ot::Coap::Message::AppendUintOption

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30831

```
Crash type: Stack-buffer-overflow READ 1
Crash state:
ot::Coap::Message::AppendUintOption
ot::Coap::Message::AppendBlockOption
otCoapMessageAppendBlock2Option
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30823

```
Crash type: Bad-cast
Crash state:
Bad-cast to tt_cmap_t' (aka 'struct _tt_cmap')_cairo_truetype_index_to_ucs4
_cairo_sub_font_glyph_lookup_unicode
_cairo_sub_font_map_glyph
```


Summary: Heap-buffer-overflow in dotnet_parse_tilde_2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29419

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
dotnet_parse_tilde_2
dotnet_parse_tilde
dotnet_parse_com
```


Summary: Heap-buffer-overflow in heredoc_remove_indent

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30886

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
heredoc_remove_indent
parse_string
parser_yylex
```


Summary: Heap-buffer-overflow in Crypto::der_decode_sequence

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30906

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Crypto::der_decode_sequence
Crypto::PK::RSA::parse_rsa_key
FuzzRSAKeyParsing.cpp
```


Summary: Heap-buffer-overflow in Crypto::der_decode_integer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30907

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Crypto::der_decode_integer
Crypto::der_decode_sequence
Crypto::der_decode_sequence_many<4ul>::operator bool
```


Summary: Heap-buffer-overflow in OT::OffsetTo<OT::Anchor, OT::IntType<unsigned short, 2u>, true>* hb_serialize_co

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30908

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
OT::OffsetTo<OT::Anchor, OT::IntType<unsigned short, 2u>, true>* hb_serialize_co
OT::OffsetTo<OT::Anchor, OT::IntType<unsigned short, 2u>, true>* hb_serialize_co
bool OT::AnchorMatrix::serialize<hb_filter_iter_t<hb_range_iter_t<unsigned int,
```


Summary: Heap-buffer-overflow in Crypto::UnsignedBigInteger::UnsignedBigInteger

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30920

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Crypto::UnsignedBigInteger::UnsignedBigInteger
Crypto::UnsignedBigInteger::import_data
Crypto::der_decode_integer
```


Summary: Segv on unknown address in llvm_ks::StringRef::operator

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30932

```
Crash type: Segv on unknown address
Crash state:
llvm_ks::StringRef::operator
llvm_ks::HashString
llvm_ks::StringMapImpl::LookupBucketFor
```


Summary: Heap-buffer-overflow in void AK::__format_value<unsigned char>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30914

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
void AK::__format_value<unsigned char>
AK::vformat_impl
AK::vformat_impl
```


Summary: Heap-buffer-overflow in rijndaelDecrypt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29454

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
rijndaelDecrypt
aes_256cbc_decrypt
check_user_password
```


Summary: Segv on unknown address in us_internal_dispatch_ready_poll

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30951

```
Crash type: Segv on unknown address
Crash state:
us_internal_dispatch_ready_poll
us_loop_run
test
```


Summary: Segv on unknown address in blosc_read_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30974

```
Crash type: Segv on unknown address
Crash state:
blosc_read_header
blosc2_getitem_ctx
blosc_getitem
```


Summary: Heap-buffer-overflow in BaseMemStream<char const>::getChar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29460

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
BaseMemStream<char const>::getChar
Object::streamGetChar
Lexer::getChar
```


Summary: UNKNOWN READ in ot::Cli::Interpreter::OutputFormatV

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31002

```
Crash type: UNKNOWN READ
Crash state:
ot::Cli::Interpreter::OutputFormatV
ot::Cli::Interpreter::OutputLine
ot::Cli::SrpServer::ProcessDomain
```


Summary: UNKNOWN WRITE in sudo_user_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31042

```
Crash type: UNKNOWN WRITE
Crash state:
sudo_user_free
sudoers_policy_close
fuzz_policy.c
```


Summary: Heap-use-after-free in us_socket_close

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31047

```
Crash type: Heap-use-after-free READ 8
Crash state:
us_socket_close
__wrap_epoll_wait
us_loop_run
```


Summary: Heap-use-after-free in __cil_verify_classperms

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31065

```
Crash type: Heap-use-after-free READ 8
Crash state:
__cil_verify_classperms
__cil_verify_classpermission
__cil_pre_verify_helper
```


Summary: Heap-double-free in mfree

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31055

```
Crash type: Heap-double-free
Crash state:
mfree
parse_path_argument
systemctl_parse_argv
```


Summary: Heap-buffer-overflow in input_osc_parse_colour

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31106

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
input_osc_parse_colour
input_osc_11
input_exit_osc
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31124

```
Crash type: Heap-use-after-free READ 8
Crash state:
__cil_verify_classperms
__verify_map_perm_classperms
hashtab_map
```


Summary: Heap-use-after-free in frame_get_lazychunk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31120

```
Crash type: Heap-use-after-free READ 4
Crash state:
frame_get_lazychunk
frame_decompress_chunk
blosc2_schunk_decompress_chunk
```


Summary: Heap-buffer-overflow in dissect_vjc_uncomp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31121

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
dissect_vjc_uncomp
call_dissector_work
dissector_try_uint
```


Summary: Use-of-uninitialized-value in std::__1::__packaged_task_func<std::__1::__bind<grk::mct::decompress_irrev

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31180

```
Crash type: Use-of-uninitialized-value
Crash state:
std::__1::__packaged_task_func<std::__1::__bind<grk::mct::decompress_irrev
std::__1::packaged_task<int
ThreadPool::ThreadPool
```


Summary: Heap-buffer-overflow in LibRaw::kodak_c330_load_raw

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31181

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
LibRaw::kodak_c330_load_raw
LibRaw::unpack
libraw_fuzzer.cc
```


Summary: Heap-buffer-overflow in frame_get_lazychunk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31189

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
frame_get_lazychunk
frame_decompress_chunk
blosc2_schunk_decompress_chunk
```


Summary: Heap-buffer-overflow in blosc_d

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31170

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
blosc_d
_blosc_getitem
blosc2_getitem_ctx
```


Summary: Stack-buffer-overflow in tvb_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31198

```
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
tvb_memcpy
composite_memcpy
_tvb_get_nstringz
```


Summary: Stack-buffer-overflow in ot::Cli::Interpreter::OutputFormatV

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31232

```
Crash type: Stack-buffer-overflow READ {*}
Crash state:
ot::Cli::Interpreter::OutputFormatV
ot::Cli::Interpreter::OutputLine
ot::Cli::Interpreter::HandleDnsServiceResponse
```


Summary: Heap-use-after-free in ofats::any_detail::handler_traits<void>::handler_base<ofats::any_detail::handler

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31209

```
Crash type: Heap-use-after-free WRITE 8
Crash state:
ofats::any_detail::handler_traits<void>::handler_base<ofats::any_detail::handler
uWS::Loop::wakeupCb
us_internal_dispatch_ready_poll
```


Summary: UNKNOWN READ in blosc_d

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31241

```
Crash type: UNKNOWN READ
Crash state:
blosc_d
do_job
blosc_run_decompression_with_context
```


Summary: Heap-buffer-overflow in H5MM_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31265

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
H5MM_memcpy
H5MM_malloc
H5C_load_entry
```


Summary: UNKNOWN WRITE in sudoers_lookup_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31250

```
Crash type: UNKNOWN WRITE
Crash state:
sudoers_lookup_check
sudoers_lookup
fuzz_sudoers.c
```


Summary: Heap-buffer-overflow in fnv_32a_buf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31301

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
fnv_32a_buf
font_hash
ass_cache_get
```


Summary: Segv on unknown address in Imf_2_5::copyIntoFrameBuffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31293

```
Crash type: Segv on unknown address
Crash state:
Imf_2_5::copyIntoFrameBuffer
Imf_2_5::LineBufferTask::execute
IlmThread_::NullThreadPoolProvider::addTask
```


Summary: Global-buffer-overflow in AK::StringView::operator==

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31338

```
Crash type: Global-buffer-overflow READ 1
Crash state:
AK::StringView::operator==
=
Markdown::Table::parse
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31351

```
Crash type: Global-buffer-overflow READ 1
Crash state:
AK::StringView::operator==
Markdown::CodeBlock::parse
bool Markdown::helper<Markdown::CodeBlock>
```


Summary: Heap-buffer-overflow in luaG_runerror

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31331

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
luaG_runerror
luaD_pretailcall
luaV_execute
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31365

```
Crash type: Use-of-uninitialized-value
Crash state:
std::__1::__packaged_task_func<std::__1::__bind<grk::mct::decompress_irrev
std::__1::packaged_task<int
ThreadPool::ThreadPool
```


Summary: UNKNOWN READ in std::pair<absl::lts_NUMBER_02_25::container_internal::raw_hash_set<absl::lts_NUM

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31393

```
Crash type: UNKNOWN READ
Crash state:
std::pair<absl::lts_NUMBER_02_25::container_internal::raw_hash_set<absl::lts_NUM
tensorflow::SparseCount<long, long>::Compute
tensorflow::KernelAndDeviceOp::Run
```


Summary: Global-buffer-overflow in coap_pdu_parse_opt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31479

```
Crash type: Global-buffer-overflow WRITE 1
Crash state:
coap_pdu_parse_opt
coap_pdu_parse
```


Summary: Heap-buffer-overflow in void apply_sao_internal<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31485

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
void apply_sao_internal<unsigned short>
void apply_sao<unsigned char>
thread_task_sao::work
```


Summary: UNKNOWN WRITE in std::__1::pair<unsigned int, void*> uWS::HttpParser::fenceAndConsumePostPadded<0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31457

```
Crash type: UNKNOWN WRITE
Crash state:
std::__1::pair<unsigned int, void*> uWS::HttpParser::fenceAndConsumePostPadded<0
uWS::HttpParser::consumePostPadded
std::__1::__function::__func<LLVMFuzzerTestOneInput::$_0, std::__1::allocator<LL
```


Summary: Heap-buffer-overflow in irc_parse_message_tags

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31443

```
Crash type: Heap-buffer-overflow READ 8
Crash state:
irc_parse_message_tags
irc_server_event_tags
signal_emit_real
```


Summary: Heap-use-after-free in zend_hash_iterator_pos_ex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31423

```
Crash type: Heap-use-after-free READ 1
Crash state:
zend_hash_iterator_pos_ex
ZEND_FE_FETCH_RW_SPEC_VAR_HANDLER
fuzzer_execute_ex
```


Summary: Heap-buffer-overflow in grk::Quantizer::read_SQcd_SQcc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31460

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
grk::Quantizer::read_SQcd_SQcc
grk::CodeStreamDecompress::read_qcd
grk::CodeStreamDecompress::process_marker
```


Summary: Heap-buffer-overflow in unescape_tag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31491

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
unescape_tag
irc_parse_message_tags
irc_server_event_tags
```


Summary: Heap-buffer-overflow in put_epel_8_fallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31501

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
put_epel_8_fallback
acceleration_functions::put_hevc_epel
void mc_chroma<unsigned short>
```


Summary: Segv on unknown address in slice_segment_header::operator=

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31492

```
Crash type: Segv on unknown address
Crash state:
slice_segment_header::operator=
slice_segment_header::read
decoder_context::read_slice_NAL
```


Summary: Heap-buffer-overflow in Op_to_sdr_planes::convert_colorspace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31495

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
Op_to_sdr_planes::convert_colorspace
heif::ColorConversionPipeline::convert_image
heif::convert_colorspace
```


Summary: Heap-buffer-overflow in ProcessReply

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31527

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
ProcessReply
wolfSSL_connect
client.c
```


Summary: Heap-buffer-overflow in blosc_read_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31535

```
Crash type: Heap-buffer-overflow READ 16
Crash state:
blosc_read_header
blosc2_cbuffer_sizes
frame_get_lazychunk
```


Summary: Heap-buffer-overflow in void mc_chroma<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31518

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
void mc_chroma<unsigned short>
generate_inter_prediction_samples
decode_prediction_unit
```


Summary: Heap-buffer-overflow in sc_pkcs15emu_oberthur_add_cert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31540

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
sc_pkcs15emu_oberthur_add_cert
sc_oberthur_parse_publicinfo
sc_pkcs15emu_oberthur_init
```


Summary: Heap-buffer-overflow in blosc_d

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31556

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
blosc_d
do_job
blosc_run_decompression_with_context
```


Summary: Heap-buffer-overflow in ZSTD_createDDict_advanced

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31586

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
ZSTD_createDDict_advanced
ZSTD_createDDict
blosc_run_decompression_with_context
```


Summary: Heap-buffer-overflow in draco::MeshPredictionSchemeTexCoordsDecoder<int, draco::PredictionSchemeWrapDeco

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31587

```
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
draco::MeshPredictionSchemeTexCoordsDecoder<int, draco::PredictionSchemeWrapDeco
draco::MeshPredictionSchemeTexCoordsDecoder<int, draco::PredictionSchemeWrapDeco
draco::SequentialIntegerAttributeDecoder::DecodeIntegerValues
```


Summary: Heap-buffer-overflow in blosc_run_decompression_with_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31585

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
blosc_run_decompression_with_context
blosc2_decompress_ctx
frame_decompress_chunk
```


Summary: UNKNOWN READ in blosc_run_decompression_with_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31611

```
Crash type: UNKNOWN READ
Crash state:
blosc_run_decompression_with_context
blosc2_decompress_ctx
frame_decompress_chunk
```


Summary: Heap-buffer-overflow in encode_3dsolid

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31657

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
encode_3dsolid
dwg_encode_REGION_private
dwg_encode_REGION
```


Summary: Heap-buffer-overflow in AK::ByteBuffer::overwrite

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31698

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
AK::ByteBuffer::overwrite
Crypto::PK::RSA::parse_rsa_key
FuzzRSAKeyParsing.cpp
```


Summary: Heap-double-free in bit_chain_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31724

```
Crash type: Heap-double-free
Crash state:
bit_chain_free
dwg_encode_MTEXT
dwg_encode_add_object
```


Summary: Heap-buffer-overflow in blosc_d

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31710

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
blosc_d
do_job
blosc_run_decompression_with_context
```


Summary: Invalid-free in frame_get_lazychunk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31705

```
Crash type: Invalid-free
Crash state:
frame_get_lazychunk
frame_decompress_chunk
blosc2_schunk_decompress_chunk
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31738

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
put_epel_8_fallback
acceleration_functions::put_hevc_epel
void mc_chroma<unsigned short>
```


Summary: Use-after-poison in std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::Expression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31765

```
Crash type: Use-after-poison READ 8
Crash state:
std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::Expression
SkSL::DefinitionMap::getKnownDefinition
SkSL::VariableReference::constantPropagate
```


Summary: Heap-buffer-overflow in ih264d_mark_err_slice_skip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31757

```
Crash type: Heap-buffer-overflow WRITE 8
Crash state:
ih264d_mark_err_slice_skip
ih264d_video_decode
ih264d_api_function
```


Summary: Segv on unknown address in Sass::CompoundSelector::resolve_parent_refs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31832

```
Crash type: Segv on unknown address
Crash state:
Sass::CompoundSelector::resolve_parent_refs
Sass::ComplexSelector::resolve_parent_refs
Sass::SelectorList::resolve_parent_refs
```


Summary: Heap-buffer-overflow in _estrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31922

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
_estrdup
exif_process_user_comment
exif_process_IFD_TAG_impl
```


Summary: Heap-use-after-free in grk_object_unref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31874

```
Crash type: Heap-use-after-free READ 8
Crash state:
grk_object_unref
grk::GrkObjectImpl<grk::GrkImage>::release
grk::GrkObject::unref
```


Summary: Heap-buffer-overflow in luaG_getfuncline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31892

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
luaG_getfuncline
luaG_runerror
luaD_growstack
```


Summary: UNKNOWN READ in _fini

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31953

```
Crash type: UNKNOWN READ
Crash state:
_fini
```


Summary: Stack-buffer-overflow in ot::KeyManager::SetMasterKey

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7766

```
Crash type: Stack-buffer-overflow READ 16
Crash state:
ot::KeyManager::SetMasterKey
ot::MeshCoP::Dataset::ApplyConfiguration
ot::MeshCoP::DatasetManager::Set
```


Summary: Heap-buffer-overflow in flatbuffers::EscapeString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32008

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
flatbuffers::EscapeString
flexbuffers::Reference::ToString
void flexbuffers::AppendToString<flexbuffers::Vector>
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32059

```
Crash type: Use-of-uninitialized-value
Crash state:
void edge_filtering_chroma_internal<unsigned char>
edge_filtering_chroma
thread_task_deblock_CTBRow::work
```

Summary: Use-of-uninitialized-value in void edge_filtering_chroma_internal<unsigned char>


Summary: Heap-use-after-free in ZSTD_freeDDict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32076

```
Crash type: Heap-use-after-free READ {*}
Crash state:
ZSTD_freeDDict
blosc2_free_ctx
blosc2_schunk_free
```


Summary: UNKNOWN WRITE in g_array_append_vals

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32131

```
Crash type: UNKNOWN WRITE
Crash state:
g_array_append_vals
g_byte_array_append
fu_efi_firmware_filesystem_write
```


Summary: UNKNOWN READ in address_space_lookup_region

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32125

```
Crash type: UNKNOWN READ
Crash state:
address_space_lookup_region
address_space_translate_internal
flatview_do_translate
```


Summary: Container-overflow in tesseract::ExtractResults16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32142

```
Crash type: Container-overflow WRITE {*}
Crash state:
tesseract::ExtractResults16
tesseract::PartialMatrixDotVector16
tesseract::matrixDotVector
```


Summary: Heap-buffer-overflow in encode_3dsolid

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32165

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
encode_3dsolid
dwg_encode_BODY_private
dwg_encode_BODY
```


Summary: Heap-use-after-free in cil_reset_classpermission

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32177

```
Crash type: Heap-use-after-free READ 8
Crash state:
cil_reset_classpermission
cil_reset_classperms_set
cil_reset_classperms_list
```


Summary: Heap-buffer-overflow in sc_pkcs15emu_oberthur_add_pubkey

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32149

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
sc_pkcs15emu_oberthur_add_pubkey
sc_oberthur_parse_publicinfo
sc_pkcs15emu_oberthur_init
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32202

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
sc_pkcs15emu_oberthur_add_pubkey
sc_oberthur_parse_publicinfo
sc_pkcs15emu_oberthur_init
```


Summary: Heap-buffer-overflow in g_array_append_vals

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32249

```
Crash type: Heap-buffer-overflow READ {*}
Crash state:
g_array_append_vals
g_byte_array_append
fu_efi_firmware_volume_write
```


Summary: Heap-buffer-overflow in flatbuffers::Table* flatbuffers::GetMutableRoot<flatbuffers::Table>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32254

```
Crash type: Heap-buffer-overflow READ 4
Crash state:
flatbuffers::Table* flatbuffers::GetMutableRoot<flatbuffers::Table>
flatbuffers::Table const* flatbuffers::GetRoot<flatbuffers::Table>
flatbuffers::JsonPrinter::GenFieldOffset
```


OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32279

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
luaG_getfuncline
luaG_runerror
luaD_growstack
```


Summary: Heap-use-after-free in dxf_objects_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32275

```
Crash type: Heap-use-after-free READ 2
Crash state:
dxf_objects_read
dwg_read_dxf
llvmfuzz.c
```


Summary: Uncaught exception in java.base/java.lang.ClassLoader.defineClass0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32407

```
Crash type: Uncaught exception
Crash state:
java.base/java.lang.ClassLoader.defineClass0
java.base/java.lang.System$2.defineClass
java.base/java.lang.invoke.MethodHandles$Lookup$ClassDefiner.defineClass
```


Summary: Heap-buffer-overflow in read_color_line

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32421

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
read_color_line
read_paint
tt_face_get_paint
```


Summary: Uncaught exception in java.base/java.util.concurrent.ConcurrentHashMap.putVal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32395

```
Crash type: Uncaught exception
Crash state:
java.base/java.util.concurrent.ConcurrentHashMap.putVal
java.base/java.util.concurrent.ConcurrentHashMap.put
com.fasterxml.jackson.core.util.InternCache.intern
```


Summary: Uncaught exception in java.base/java.util.Arrays.copyOf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32423

```
Crash type: Uncaught exception
Crash state:
java.base/java.util.Arrays.copyOf
com.fasterxml.jackson.core.util.TextBuffer.expandCurrentSegment
com.fasterxml.jackson.core.json.UTF8StreamJsonParser.addName
```


Summary: Heap-use-after-free in copy_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32375

```
Crash type: Heap-use-after-free READ 1
Crash state:
copy_string
do_uncompress_block
process_block
```


Summary: Uncaught exception in java.base/java.nio.Buffer.<init>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32399

```
Crash type: Uncaught exception
Crash state:
java.base/java.nio.Buffer.<init>
java.base/java.nio.CharBuffer.<init>
java.base/java.nio.HeapCharBuffer.<init>
```


Summary: Uncaught exception in java.base/java.nio.CharBuffer.wrap

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32405

```
Crash type: Uncaught exception
Crash state:
java.base/java.nio.CharBuffer.wrap
java.base/sun.nio.cs.StreamDecoder.implRead
java.base/sun.nio.cs.StreamDecoder.read
```


Summary: UNKNOWN WRITE in wuffs_base__pixel_swizzler__bgr__bgra_premul__src

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32451

```
Crash type: UNKNOWN WRITE
Crash state:
wuffs_base__pixel_swizzler__bgr__bgra_premul__src
wuffs_base__pixel_swizzler__swizzle_interleaved_from_slice
fuzz
```


Summary: Segv on unknown address in GC_generic_malloc_many

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32453

```
Crash type: Segv on unknown address
Crash state:
GC_generic_malloc_many
GC_malloc_atomic
Strnew_size
```


Summary: Heap-use-after-free in AK::NonnullOwnPtr<JS::IndexedPropertyStorage>::operator->

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32459

```
Crash type: Heap-use-after-free READ 8
Crash state:
AK::NonnullOwnPtr<JS::IndexedPropertyStorage>::operator->
JS::IndexedProperties::array_like_size
JS::IndexedProperties::append
```


Summary: Uncaught exception in com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32514

```
Crash type: Uncaught exception
Crash state:
com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeArray
java.base/java.lang.Module.isStaticallyExportedOrOpen
java.base/java.lang.Module.implIsExportedOrOpen
```


Summary: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32555

```
Crash type: Heap-buffer-overflow READ 2
Crash state:
BEInt<unsigned short, 2>::operator unsigned short
OT::IntType<unsigned short, 2u>::operator unsigned int
OT::RangeRecord::intersects
```