New issue
Advanced search Search tips
ListGrid
Loading...
  ID ▼ Type ▼ Component ▼ Status ▼ Proj ▼ Reported ▼ Owner ▼ Summary + Labels ▼ ...
  310 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-buffer-overflow in BitmapReadAccess::GetColor ClusterFuzz Reproducible  
  313 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-buffer-overflow in EnhWMFReader::ReadEnhWMF ClusterFuzz Reproducible  
  318 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Crash in ImplCreateDIB ClusterFuzz Reproducible  
  358 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Global-buffer-overflow in ImplDBCSToUnicode ClusterFuzz Reproducible  
  372 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-buffer-overflow in tools::Polygon::Insert ClusterFuzz Reproducible  
  394 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-buffer-overflow in XBMReader::ParseDefine ClusterFuzz Reproducible  
  411 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-buffer-overflow in XPMReader::ImplGetColKey ClusterFuzz Reproducible  
  424 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-buffer-overflow in MetaTextArrayAction::MetaTextArrayAction ClusterFuzz Reproducible  
  439 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Crash in WinMtfOutput::DrawText ClusterFuzz Reproducible  
  488 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-buffer-overflow in ImplGetLen ClusterFuzz Reproducible  
  489 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-buffer-overflow in MakePreview ClusterFuzz Reproducible  
  502 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-use-after-free in OutputDevice::ImplPrepareLayoutArgs ClusterFuzz Reproducible  
  574 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-buffer-overflow in BitmapColor::GetBlue ClusterFuzz Reproducible  
  721 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Container-overflow in LwpIndexManager::ReadObjIndexData ClusterFuzz Reproducible  
  727 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Crash in HStream::readBytes ClusterFuzz Reproducible  
  728 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Crash in CCIDecompressor::DecompressScanline ClusterFuzz Reproducible  
  769 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Stack-buffer-overflow in SVMConverter::ImplConvertFromSVM1 ClusterFuzz Reproducible  
  770 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Global-buffer-overflow in ImplUnicodeToDBCS ClusterFuzz Reproducible  
  817 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-buffer-overflow in SVMConverter::ImplConvertFromSVM1 ClusterFuzz Reproducible  
  829 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Container-overflow in BitmapColor::GetBlue ClusterFuzz Reproducible  
  860 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Container-overflow in inflate ClusterFuzz Reproducible  
  875 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-use-after-free in PPTParagraphObj::GetAttrib ClusterFuzz Reproducible  
  876 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Stack-buffer-overflow in CreateTableRows ClusterFuzz Reproducible  
  877 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-use-after-free in PPTParagraphObj::GetAttrib ClusterFuzz Reproducible  
  888 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-use-after-free in SvxMSDffManager::SolveSolver ClusterFuzz Reproducible  
  889 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-buffer-overflow in null_convert ClusterFuzz Reproducible  
  893 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-buffer-overflow in PPTParagraphObj::UpdateBulletRelSize ClusterFuzz Reproducible  
  956 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Container-overflow in sdr::table::TableLayouter::SetBorder ClusterFuzz Reproducible  
  974 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Container-overflow in sdr::table::TableLayouter::SetBorder ClusterFuzz Reproducible  
  1062 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-use-after-free in HWPFile::compareCharShape ClusterFuzz Reproducible  
  1193 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-use-after-free in HWPFile::AddBox ClusterFuzz Reproducible  
  1220 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Global-buffer-overflow in SwWW8ImplReader::ReadCaptionBox ClusterFuzz Reproducible  
  1284 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-use-after-free in Bundle::GetIndex ClusterFuzz Reproducible  
  1542 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-buffer-overflow in ImplSearchEntry ClusterFuzz Reproducible  
  1605 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-buffer-overflow in BitmapReadAccess::SetPixelForN1BitLsbPal ClusterFuzz Reproducible  
  2085 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-buffer-overflow in ImplSearchEntry ClusterFuzz Reproducible  
  2287 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-buffer-overflow in BitmapReadAccess::SetPixelForN1BitLsbPal ClusterFuzz Reproducible  
  2332 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-use-after-free in SvxMSDffManager::SolveSolver ClusterFuzz Reproducible  
  2392 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-buffer-overflow in SVBT16ToShort ClusterFuzz Reproducible  
  2452 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-use-after-free in HWPFile::compareParaShape ClusterFuzz Reproducible  
  2766 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-buffer-overflow in BitmapWriteAccess::SetPaletteColor ClusterFuzz Reproducible  
  2852 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Global-buffer-overflow in ImplUnicodeToDBCS ClusterFuzz Reproducible  
  2877 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Crash in SVBT16ToShort ClusterFuzz Reproducible  
  2897 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Container-overflow in HMemIODev::read1b ClusterFuzz Reproducible  
  2899 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Container-overflow in HMemIODev::read1b ClusterFuzz Reproducible  
  3110 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-buffer-overflow in SVBT16ToShort ClusterFuzz Reproducible  
  3121 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-buffer-overflow in CGM::ImplDoClass4 ClusterFuzz Reproducible  
  3154 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-buffer-overflow in SVBT16ToShort ClusterFuzz Reproducible  
  3156 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Container-overflow in HMemIODev::read1b ClusterFuzz Reproducible  
  3186 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Global-buffer-overflow in ImplUnicodeToDBCS ClusterFuzz Reproducible  
  3301 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-use-after-free in SwPaM::Start ClusterFuzz Reproducible  
  3362 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-buffer-overflow in ScColumnsRange::Iterator::operator* ClusterFuzz Reproducible  
  3412 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-buffer-overflow in ScColumnsRange::Iterator::operator* ClusterFuzz Reproducible  
  3418 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Crash in FT_Glyph_Get_CBox ClusterFuzz Reproducible  
  3425 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Crash in FT_Done_Glyph ClusterFuzz Reproducible  
  3457 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Crash in wwSprmParser::GetSprmId ClusterFuzz Reproducible  
  3527 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-use-after-free in rtl::OUString::OUString ClusterFuzz Reproducible  
  3532 Bug-Security ---- Verified libreoffice ---- ---- libreoffice: Heap-use-after-free in SwNumRule::GetNumFormat ClusterFuzz Reproducible  
  3663 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/ww6fuzzer: Heap-use-after-free in SwClient::GetRegisteredInNonConst ClusterFuzz Reproducible  
  3745 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/lwpfuzzer: Bad-cast to OpenStormBento::CBenObject from OpenStormBento::CUtListElmt;OpenStormBento::CBenTOCReader::ReadTOC;OpenStormBento::CBenTOCReader::ReadLabelAndTOC ClusterFuzz Reproducible  
  3759 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/dxffuzzer: Index-out-of-bounds in DXFLType::Read ClusterFuzz Reproducible  
  3767 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/ww8fuzzer: Bad-cast to SwRangeRedlinesw::DocumentRedlineManager::AppendRedline;sw::util::SetInDocAndDelete::operator;sw::util::RedlineStack::~RedlineStack ClusterFuzz Reproducible  
  3785 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/ww8fuzzer: Bad-cast to SwRangeRedline from invalid vptr;sw::DocumentRedlineManager::AppendRedline;sw::util::SetInDocAndDelete::operator ClusterFuzz Reproducible  
  3800 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/pptfuzzer: Bad-cast to const XLineStartItem from XLineEndItem;EnhancedCustomShape2d::SwapStartAndEndArrow;CorrectCalloutArrows ClusterFuzz Reproducible  
  3807 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/ww6fuzzer: Bad-cast to const SwFormatDropSwWW8ImplReader::ReadText;SwWW8ImplReader::CoreLoad;SwWW8ImplReader::LoadThroughDecryption ClusterFuzz Reproducible  
  3808 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/ww6fuzzer: Bad-cast to const SwFormatDrop from invalid vptr;SwWW8ImplReader::ReadText;SwWW8ImplReader::CoreLoad ClusterFuzz Reproducible  
  3927 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/ww8fuzzer: Bad-cast to SwRangeRedlinesw::DocumentRedlineManager::AppendRedline;sw::util::SetInDocAndDelete::operator;sw::util::RedlineStack::~RedlineStack ClusterFuzz Reproducible  
  4066 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/ww8fuzzer: Bad-cast to SwRangeRedline from invalid vptr in sw::DocumentRedlineManager::AppendRedline ClusterFuzz Reproducible  
  4076 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/pngfuzzer: Container-overflow in BitmapColor::GetBlue ClusterFuzz Reproducible  
  4122 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/scrtffuzzer: Bad-cast to cppuhelper::detail::XExceptionThrower from cppuhelper::detail::XExceptionThrower in cppu::throwException ClusterFuzz Reproducible  
  4149 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/scrtffuzzer: Index-out-of-bounds in ScCompiler::IsReference ClusterFuzz Reproducible  
  4204 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/cgmfuzzer: Heap-buffer-overflow in CGM::ImplDoClass7 ClusterFuzz Reproducible  
  4207 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/scrtffuzzer: Heap-buffer-overflow in ScCompiler::NextSymbol ClusterFuzz Reproducible  
  4247 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/scrtffuzzer: Index-out-of-bounds in ScCompiler::IsReference ClusterFuzz Reproducible  
  4335 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/ww6fuzzer: Heap-buffer-overflow in SVBT16ToShort ClusterFuzz Reproducible  
  4358 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/pngfuzzer: Heap-buffer-overflow in vcl::PNGReaderImpl::ImplDrawScanline ClusterFuzz Reproducible  
  4406 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/xlsfuzzer: Heap-buffer-overflow in ScCompressedArray<short, unsigned short>::Iterator::operator++ ClusterFuzz Reproducible  
  4414 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/ww8fuzzer: Heap-buffer-overflow in WW8_BRCVer9::brcType ClusterFuzz Reproducible  
  4435 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/pptfuzzer: Bad-cast to SdrObjGroup from SdrEdgeObj in SvxMSDffManager::ImportGroup ClusterFuzz Reproducible  
  4471 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/ww8fuzzer: Heap-buffer-overflow in SetWW8_BRC ClusterFuzz Reproducible  
  4480 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/docxfuzzer: Bad-cast to cppuhelper::detail::XExceptionThrower from cppuhelper::detail::XExceptionThrower in cppu::throwException ClusterFuzz Reproducible  
  4481 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/docxfuzzer: Heap-use-after-free in oox::drawingml::Path2DContext::~Path2DContext ClusterFuzz Reproducible  
  4484 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/scrtffuzzer: Index-out-of-bounds in ScCompiler::IsReference ClusterFuzz Reproducible  
  4491 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/docxfuzzer: Heap-buffer-overflow in cppu::OWeakObject::release ClusterFuzz Reproducible  
  4500 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/xlsxfuzzer: Bad-cast to ZipPackageFolder from ZipPackageStream in ZipPackageEntry::doSetParent ClusterFuzz Reproducible  
  4510 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/docxfuzzer: Heap-buffer-overflow in ZipPackage::getZipFileContents ClusterFuzz Reproducible  
  4515 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/xlsxfuzzer: Bad-cast to ZipPackageFolder from ZipPackageStream in ZipPackage::getZipFileContents ClusterFuzz Reproducible  
  4516 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/xlsxfuzzer: Bad-cast to com::sun::star::uno::XInterface from cppuhelper::detail::XExceptionThrower in com::sun::star::uno::Reference<cppuhelper::detail::XExceptionThrower>::~Reference ClusterFuzz Reproducible  
  4518 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/ww8fuzzer: Heap-use-after-free in SwRangeRedline::CopyToSection ClusterFuzz Reproducible  
  4531 Bug-Security ---- Verified libreoffice ---- ---- libreoffice/mmlfuzzer: Bad-cast to SmStructureNode from SmMathSymbolNode in SmXMLTableContext_Impl::EndElement ClusterFuzz Reproducible