# Vulnerabilities published in 2020


- [OSV-2020-1489](https://insights.sbomify.com/OSV-2020-1489/): Segv on unknown address in H5O_chunk_deserialize (not scored)
- [OSV-2020-148](https://insights.sbomify.com/OSV-2020-148/): Use-of-uninitialized-value in AES_encrypt (not scored)
- [OSV-2020-1478](https://insights.sbomify.com/OSV-2020-1478/): Heap-buffer-overflow in load_jpeg_image (not scored)
- [OSV-2020-1472](https://insights.sbomify.com/OSV-2020-1472/): Heap-buffer-overflow in stbi__YCbCr_to_RGB_simd (not scored)
- [OSV-2020-147](https://insights.sbomify.com/OSV-2020-147/): Heap-buffer-overflow in BEInt<short, 2>::operator short (not scored)
- [OSV-2020-146](https://insights.sbomify.com/OSV-2020-146/): Heap-buffer-overflow in Json::OurReader::parse (not scored)
- [OSV-2020-1453](https://insights.sbomify.com/OSV-2020-1453/): UNKNOWN READ in RDKit::labelRecursivePatterns (not scored)
- [OSV-2020-1448](https://insights.sbomify.com/OSV-2020-1448/): Global-buffer-overflow in vte_write_debug (not scored)
- [OSV-2020-144](https://insights.sbomify.com/OSV-2020-144/): Heap-use-after-free in int arrow::BitUtil::BitReader::GetBatch<short> (not scored)
- [OSV-2020-143](https://insights.sbomify.com/OSV-2020-143/): Heap-buffer-overflow in QSpecialInteger<QBigEndianStorageType<unsigned int> >::operator unsigned int (not scored)
- [OSV-2020-1423](https://insights.sbomify.com/OSV-2020-1423/): Use-of-uninitialized-value in txt2sd (not scored)
- [OSV-2020-1420](https://insights.sbomify.com/OSV-2020-1420/): Bad-cast to Sass::PreValue from Sass::Unary_Expression (not scored)
- [OSV-2020-142](https://insights.sbomify.com/OSV-2020-142/): Heap-use-after-free in ndpi_strncasestr (not scored)
- [OSV-2020-1417](https://insights.sbomify.com/OSV-2020-1417/): Index-out-of-bounds in DHT::get_hv_rbg (not scored)
- [OSV-2020-1414](https://insights.sbomify.com/OSV-2020-1414/): Heap-buffer-overflow in format_generic_odp_key (not scored)
- [OSV-2020-1410](https://insights.sbomify.com/OSV-2020-1410/): Use-of-uninitialized-value in float64_squash_input_denormal_aarch64eb (not scored)
- [OSV-2020-141](https://insights.sbomify.com/OSV-2020-141/): Heap-use-after-free in pixcmapDestroy (not scored)
- [OSV-2020-1409](https://insights.sbomify.com/OSV-2020-1409/): UNKNOWN READ in cpu_arm_exec_armeb (not scored)
- [OSV-2020-1407](https://insights.sbomify.com/OSV-2020-1407/): Use-of-uninitialized-value in QPDFWriter::unparseObject (not scored)
- [OSV-2020-14](https://insights.sbomify.com/OSV-2020-14/): Stack-buffer-overflow in fmt_setup (not scored)
- [OSV-2020-1386](https://insights.sbomify.com/OSV-2020-1386/): Heap-buffer-overflow in parse_relocation_info (not scored)
- [OSV-2020-1382](https://insights.sbomify.com/OSV-2020-1382/): Use-of-uninitialized-value in nl_attr_is_valid (not scored)
- [OSV-2020-1380](https://insights.sbomify.com/OSV-2020-1380/): Use-of-uninitialized-value in stbi__jpeg_decode_block_prog_ac (not scored)
- [OSV-2020-138](https://insights.sbomify.com/OSV-2020-138/): Heap-buffer-overflow in org::apache::arrow::flatbuf::Message::Verify (not scored)
- [OSV-2020-1379](https://insights.sbomify.com/OSV-2020-1379/): Heap-buffer-overflow in dotnet_parse_com (not scored)
- [OSV-2020-1373](https://insights.sbomify.com/OSV-2020-1373/): Segv on unknown address in helper_uc_tracecode (not scored)
- [OSV-2020-1372](https://insights.sbomify.com/OSV-2020-1372/): Index-out-of-bounds in stbi__build_huffman (not scored)
- [OSV-2020-1371](https://insights.sbomify.com/OSV-2020-1371/): Bad-cast to pcpp::IDnsResource from invalid vptr (not scored)
- [OSV-2020-137](https://insights.sbomify.com/OSV-2020-137/): UNKNOWN READ in dav1d_resize_ssse3 (not scored)
- [OSV-2020-1366](https://insights.sbomify.com/OSV-2020-1366/): Heap-use-after-free in RDKit::SubstanceGroup::addParentAtomWithBookmark (not scored)
- [OSV-2020-1365](https://insights.sbomify.com/OSV-2020-1365/): UNKNOWN READ in cli_vba_readdir_new (not scored)
- [OSV-2020-1362](https://insights.sbomify.com/OSV-2020-1362/): Use-of-uninitialized-value in LibRaw::init_fuji_block (not scored)
- [OSV-2020-136](https://insights.sbomify.com/OSV-2020-136/): Heap-buffer-overflow in ndpi_netbios_name_interpret (not scored)
- [OSV-2020-1356](https://insights.sbomify.com/OSV-2020-1356/): Segv on unknown address in vips_XYZ2Lab_line (not scored)
- [OSV-2020-1352](https://insights.sbomify.com/OSV-2020-1352/): Heap-buffer-overflow in arrow::Status arrow::internal::ValidateArrayVisitor::ValidateListArray<arrow::Li (not scored)
- [OSV-2020-1351](https://insights.sbomify.com/OSV-2020-1351/): Heap-use-after-free in sc_pkcs15_free_object (not scored)
- [OSV-2020-1349](https://insights.sbomify.com/OSV-2020-1349/): Heap-buffer-overflow in mu::ParserBase::ParseCmdCodeBulk (not scored)
- [OSV-2020-1347](https://insights.sbomify.com/OSV-2020-1347/): Negative-size-param in fuzz_tlv_to_string (not scored)
- [OSV-2020-1346](https://insights.sbomify.com/OSV-2020-1346/): UNKNOWN WRITE in StatsIncr (not scored)
- [OSV-2020-1340](https://insights.sbomify.com/OSV-2020-1340/): Use-of-uninitialized-value in Gfx::fillPatch (not scored)
- [OSV-2020-134](https://insights.sbomify.com/OSV-2020-134/): Heap-buffer-overflow in pixFewColorsOctcubeQuantMixed (not scored)
- [OSV-2020-1332](https://insights.sbomify.com/OSV-2020-1332/): Index-out-of-bounds in xsltSetAttrVTsegment (not scored)
- [OSV-2020-1331](https://insights.sbomify.com/OSV-2020-1331/): Heap-buffer-overflow in pcpp::GtpV1Layer::GtpExtension::getNextExtensionHeaderType (not scored)
- [OSV-2020-1330](https://insights.sbomify.com/OSV-2020-1330/): Heap-buffer-overflow in mu::ParserBase::ParseCmdCodeBulk (not scored)
- [OSV-2020-133](https://insights.sbomify.com/OSV-2020-133/): Heap-use-after-free in r_bin_object_rebuild_classes_ht (not scored)
- [OSV-2020-1328](https://insights.sbomify.com/OSV-2020-1328/): UNKNOWN READ in std::__1::__tree<std::__1::__value_type<std::__1::basic_string<char, std::__1::c (not scored)
- [OSV-2020-1327](https://insights.sbomify.com/OSV-2020-1327/): UNKNOWN READ in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor> (not scored)
- [OSV-2020-1326](https://insights.sbomify.com/OSV-2020-1326/): Heap-buffer-overflow in ihevcd_parse_slice_data (not scored)
- [OSV-2020-1325](https://insights.sbomify.com/OSV-2020-1325/): Global-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short (not scored)
- [OSV-2020-1321](https://insights.sbomify.com/OSV-2020-1321/): UNKNOWN READ in FlowGetHash (not scored)
- [OSV-2020-132](https://insights.sbomify.com/OSV-2020-132/): Heap-buffer-overflow in asn1_parse_oid (not scored)
- [OSV-2020-1315](https://insights.sbomify.com/OSV-2020-1315/): Heap-buffer-overflow in pcpp::IPv4Layer::getFragmentFlags (not scored)
- [OSV-2020-1314](https://insights.sbomify.com/OSV-2020-1314/): Use-of-uninitialized-value in ndpi_strdup (not scored)
- [OSV-2020-1312](https://insights.sbomify.com/OSV-2020-1312/): Use-of-uninitialized-value in FilterInput8bitWithStride_c (not scored)
- [OSV-2020-1310](https://insights.sbomify.com/OSV-2020-1310/): Use-of-uninitialized-value in pcpp::SSLCertificateRequestMessage::SSLCertificateRequestMessage (not scored)
- [OSV-2020-131](https://insights.sbomify.com/OSV-2020-131/): Heap-buffer-overflow in pixGetRGBComponentCmap (not scored)
- [OSV-2020-1307](https://insights.sbomify.com/OSV-2020-1307/): Heap-buffer-overflow in pcpp::IPv6Extension::getExtensionLen (not scored)
- [OSV-2020-1306](https://insights.sbomify.com/OSV-2020-1306/): Use-of-uninitialized-value in TIFFYCbCrtoRGB (not scored)
- [OSV-2020-1301](https://insights.sbomify.com/OSV-2020-1301/): Heap-buffer-overflow in hts_md5_update (not scored)
- [OSV-2020-1300](https://insights.sbomify.com/OSV-2020-1300/): Heap-buffer-overflow in ihevcd_parse_slice_data (not scored)
- [OSV-2020-130](https://insights.sbomify.com/OSV-2020-130/): Use-of-uninitialized-value in OT::TupleVarHeader::calculate_scalar (not scored)
- [OSV-2020-1299](https://insights.sbomify.com/OSV-2020-1299/): UNKNOWN WRITE in ideint_weave_blk (not scored)
- [OSV-2020-1297](https://insights.sbomify.com/OSV-2020-1297/): Heap-buffer-overflow in pcpp::DnsResource::getDataLength (not scored)
- [OSV-2020-1296](https://insights.sbomify.com/OSV-2020-1296/): Heap-use-after-free in WelsDec::WelsReorderRefList (not scored)
- [OSV-2020-1294](https://insights.sbomify.com/OSV-2020-1294/): Heap-buffer-overflow in SHA1Update (not scored)
- [OSV-2020-1292](https://insights.sbomify.com/OSV-2020-1292/): Stack-buffer-overflow in ot::ExtendedTlv::GetLength (not scored)
- [OSV-2020-1291](https://insights.sbomify.com/OSV-2020-1291/): UNKNOWN READ in std::__1::_MetaBase<__can_be_converted_to_string_view<char, std::__1::char_trait (not scored)
- [OSV-2020-1290](https://insights.sbomify.com/OSV-2020-1290/): Bad-free in aes_gcm_cleanup (not scored)
- [OSV-2020-129](https://insights.sbomify.com/OSV-2020-129/): UNKNOWN READ in pcpp::Packet::setRawPacket (not scored)
- [OSV-2020-1289](https://insights.sbomify.com/OSV-2020-1289/): Heap-use-after-free in WelsDec::MapColToList0 (not scored)
- [OSV-2020-1288](https://insights.sbomify.com/OSV-2020-1288/): Heap-buffer-overflow in asn1_decode_entry (not scored)
- [OSV-2020-1285](https://insights.sbomify.com/OSV-2020-1285/): Use-of-uninitialized-value in ihevc_deblk_luma_vert_ssse3 (not scored)
- [OSV-2020-1280](https://insights.sbomify.com/OSV-2020-1280/): Heap-buffer-overflow in cdf_read_property_info (not scored)
- [OSV-2020-1278](https://insights.sbomify.com/OSV-2020-1278/): Use-of-uninitialized-value in SampledFunction::SampledFunction (not scored)
- [OSV-2020-1274](https://insights.sbomify.com/OSV-2020-1274/): Heap-buffer-overflow in exif_entry_get_value (not scored)
- [OSV-2020-1273](https://insights.sbomify.com/OSV-2020-1273/): Use-of-uninitialized-value in psscan (not scored)
- [OSV-2020-1272](https://insights.sbomify.com/OSV-2020-1272/): Heap-buffer-overflow in ASN1_get_object (not scored)
- [OSV-2020-1266](https://insights.sbomify.com/OSV-2020-1266/): UNKNOWN READ in arrow::Array::IsNull (not scored)
- [OSV-2020-1264](https://insights.sbomify.com/OSV-2020-1264/): Use-of-uninitialized-value in AnnotAppearanceBuilder::drawText (not scored)
- [OSV-2020-1263](https://insights.sbomify.com/OSV-2020-1263/): Heap-buffer-overflow in getSSCertificateFingerprint (not scored)
- [OSV-2020-1260](https://insights.sbomify.com/OSV-2020-1260/): Negative-size-param in heif::HeifPixelImage::fill_RGB_16bit (not scored)
- [OSV-2020-1258](https://insights.sbomify.com/OSV-2020-1258/): Heap-use-after-free in WelsDec::MapColToList0 (not scored)
- [OSV-2020-1257](https://insights.sbomify.com/OSV-2020-1257/): Stack-buffer-overflow in readstat_convert (not scored)
- [OSV-2020-1256](https://insights.sbomify.com/OSV-2020-1256/): UNKNOWN WRITE in TIFFReadRGBATileExt (not scored)
- [OSV-2020-1253](https://insights.sbomify.com/OSV-2020-1253/): Heap-buffer-overflow in pixReadFromTiffStream (not scored)
- [OSV-2020-1252](https://insights.sbomify.com/OSV-2020-1252/): Heap-buffer-overflow in jpc_dec_process_sot (not scored)
- [OSV-2020-1250](https://insights.sbomify.com/OSV-2020-1250/): Heap-use-after-free in WelsDec::MapColToList0 (not scored)
- [OSV-2020-125](https://insights.sbomify.com/OSV-2020-125/): Negative-size-param in parquet::PlainByteArrayDecoder::DecodeArrowDense (not scored)
- [OSV-2020-1246](https://insights.sbomify.com/OSV-2020-1246/): Stack-buffer-overflow in void apply_sao_internal<unsigned short> (not scored)
- [OSV-2020-1245](https://insights.sbomify.com/OSV-2020-1245/): Heap-buffer-overflow in c2i_ASN1_INTEGER (not scored)
- [OSV-2020-1244](https://insights.sbomify.com/OSV-2020-1244/): Use-of-uninitialized-value in decimate_dsd_run (not scored)
- [OSV-2020-1242](https://insights.sbomify.com/OSV-2020-1242/): Heap-buffer-overflow in ih264d_cavlc_parse4x4coeff_n8 (not scored)
- [OSV-2020-1240](https://insights.sbomify.com/OSV-2020-1240/): Use-of-uninitialized-value in jbig2_decode_mmr_line (not scored)
- [OSV-2020-124](https://insights.sbomify.com/OSV-2020-124/): Dynamic-stack-buffer-overflow in RetrieveFPForSig (not scored)
- [OSV-2020-1238](https://insights.sbomify.com/OSV-2020-1238/): Use-of-uninitialized-value in pcpp::Packet::createFirstLayer (not scored)
- [OSV-2020-1237](https://insights.sbomify.com/OSV-2020-1237/): Use-of-uninitialized-value in pcpp::NullLoopbackLayer::getFamily (not scored)
- [OSV-2020-1235](https://insights.sbomify.com/OSV-2020-1235/): Heap-buffer-overflow in mbc_case_fold (not scored)
- [OSV-2020-1234](https://insights.sbomify.com/OSV-2020-1234/): Use-of-uninitialized-value in ihevc_recon_32x32 (not scored)
- [OSV-2020-1233](https://insights.sbomify.com/OSV-2020-1233/): Heap-buffer-overflow in getTLScertificate (not scored)
- [OSV-2020-1232](https://insights.sbomify.com/OSV-2020-1232/): Use-of-uninitialized-value in TIFFYCbCrtoRGB (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/10/