# Vulnerabilities published in 2020


- [OSV-2020-373](https://insights.sbomify.com/OSV-2020-373/): UNKNOWN READ in url_decode (not scored)
- [OSV-2020-372](https://insights.sbomify.com/OSV-2020-372/): Heap-buffer-overflow in circular_memcpy (not scored)
- [OSV-2020-370](https://insights.sbomify.com/OSV-2020-370/): Heap-use-after-free in ih264_inter_pred_luma_horz_hpel_vert_qpel_ssse3 (not scored)
- [OSV-2020-369](https://insights.sbomify.com/OSV-2020-369/): UNKNOWN READ in ot::TimerScheduler::Remove (not scored)
- [OSV-2020-366](https://insights.sbomify.com/OSV-2020-366/): UNKNOWN READ in bebytes2ushort (not scored)
- [OSV-2020-365](https://insights.sbomify.com/OSV-2020-365/): UNKNOWN READ in fuzzshark_ip_proto-udp (not scored)
- [OSV-2020-364](https://insights.sbomify.com/OSV-2020-364/): Stack-use-after-return in ihevcd_process_thread (not scored)
- [OSV-2020-360](https://insights.sbomify.com/OSV-2020-360/): Heap-use-after-free in read_chunks_after_idat (not scored)
- [OSV-2020-357](https://insights.sbomify.com/OSV-2020-357/): Heap-buffer-overflow in r_read_le32 (not scored)
- [OSV-2020-355](https://insights.sbomify.com/OSV-2020-355/): Use-of-uninitialized-value in LzmaDec_TryDummy (not scored)
- [OSV-2020-354](https://insights.sbomify.com/OSV-2020-354/): UNKNOWN READ in ot::Ip6::NetifUnicastAddress::GetNext (not scored)
- [OSV-2020-353](https://insights.sbomify.com/OSV-2020-353/): Stack-buffer-overflow in ot::MeshCoP::Commissioner::GeneratePskc (not scored)
- [OSV-2020-352](https://insights.sbomify.com/OSV-2020-352/): Heap-buffer-overflow in searchObjectForKeyRec (not scored)
- [OSV-2020-351](https://insights.sbomify.com/OSV-2020-351/): UNKNOWN READ in validate_past_idat (not scored)
- [OSV-2020-348](https://insights.sbomify.com/OSV-2020-348/): Heap-buffer-overflow in std::__1::vector<std::__1::vector<Sass::SharedImpl<Sass::ComplexSelector>, std:: (not scored)
- [OSV-2020-347](https://insights.sbomify.com/OSV-2020-347/): Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short (not scored)
- [OSV-2020-345](https://insights.sbomify.com/OSV-2020-345/): Index-out-of-bounds in yara_yyparse (not scored)
- [OSV-2020-344](https://insights.sbomify.com/OSV-2020-344/): Heap-buffer-overflow in spng_decode_image (not scored)
- [OSV-2020-343](https://insights.sbomify.com/OSV-2020-343/): Stack-use-after-return in ot::MeshCoP::ChannelMaskEntryBase::GetChannelPage (not scored)
- [OSV-2020-342](https://insights.sbomify.com/OSV-2020-342/): UNKNOWN READ in ndpi_search_kerberos (not scored)
- [OSV-2020-341](https://insights.sbomify.com/OSV-2020-341/): Heap-buffer-overflow in post_process_template (not scored)
- [OSV-2020-34](https://insights.sbomify.com/OSV-2020-34/): UNKNOWN READ in parquet::LevelDecoder::SetData (not scored)
- [OSV-2020-337](https://insights.sbomify.com/OSV-2020-337/): Global-buffer-overflow in lex_multiline_string (not scored)
- [OSV-2020-336](https://insights.sbomify.com/OSV-2020-336/): Stack-buffer-overflow in ot::NetworkData::PrefixTlv::Init (not scored)
- [OSV-2020-335](https://insights.sbomify.com/OSV-2020-335/): Global-buffer-overflow in template_fuzzer.cc (not scored)
- [OSV-2020-334](https://insights.sbomify.com/OSV-2020-334/): Heap-buffer-overflow in _iri_unescape_inline (not scored)
- [OSV-2020-333](https://insights.sbomify.com/OSV-2020-333/): Heap-buffer-overflow in sas_read8 (not scored)
- [OSV-2020-328](https://insights.sbomify.com/OSV-2020-328/): UNKNOWN READ in dotnet_parse_tilde_2 (not scored)
- [OSV-2020-327](https://insights.sbomify.com/OSV-2020-327/): Heap-buffer-overflow in sas_read8 (not scored)
- [OSV-2020-325](https://insights.sbomify.com/OSV-2020-325/): Stack-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch (not scored)
- [OSV-2020-324](https://insights.sbomify.com/OSV-2020-324/): Heap-buffer-overflow in av1_convolve_2d_copy_sr_sse2 (not scored)
- [OSV-2020-323](https://insights.sbomify.com/OSV-2020-323/): Use-of-uninitialized-value in ht_copy (not scored)
- [OSV-2020-322](https://insights.sbomify.com/OSV-2020-322/): Negative-size-param in parse_proxy_protocol_v2 (not scored)
- [OSV-2020-32](https://insights.sbomify.com/OSV-2020-32/): Heap-buffer-overflow in read_bits_16 (not scored)
- [OSV-2020-319](https://insights.sbomify.com/OSV-2020-319/): Use-of-uninitialized-value in inv_txfm2d_add_facade (not scored)
- [OSV-2020-317](https://insights.sbomify.com/OSV-2020-317/): Heap-buffer-overflow in r_core_lines_initcache (not scored)
- [OSV-2020-315](https://insights.sbomify.com/OSV-2020-315/): Heap-buffer-overflow in r_str_utf8_codepoint (not scored)
- [OSV-2020-313](https://insights.sbomify.com/OSV-2020-313/): Heap-buffer-overflow in git_buf_decode_base85 (not scored)
- [OSV-2020-31](https://insights.sbomify.com/OSV-2020-31/): Heap-use-after-free in AES_wrap_key (not scored)
- [OSV-2020-308](https://insights.sbomify.com/OSV-2020-308/): Heap-buffer-overflow in UA_copy (not scored)
- [OSV-2020-307](https://insights.sbomify.com/OSV-2020-307/): Heap-buffer-overflow in spng_decode_image (not scored)
- [OSV-2020-305](https://insights.sbomify.com/OSV-2020-305/): Stack-buffer-overflow in ot::NetworkData::Leader::SendCommissioningGetResponse (not scored)
- [OSV-2020-303](https://insights.sbomify.com/OSV-2020-303/): UNKNOWN READ in dav1d_put_bilin_avx2 (not scored)
- [OSV-2020-300](https://insights.sbomify.com/OSV-2020-300/): Heap-buffer-overflow in sas_read4 (not scored)
- [OSV-2020-3](https://insights.sbomify.com/OSV-2020-3/): UNKNOWN WRITE in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch (not scored)
- [OSV-2020-299](https://insights.sbomify.com/OSV-2020-299/): Bad-free in sig_destroyed (not scored)
- [OSV-2020-294](https://insights.sbomify.com/OSV-2020-294/): Heap-buffer-overflow in ihevcd_process (not scored)
- [OSV-2020-290](https://insights.sbomify.com/OSV-2020-290/): Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized (not scored)
- [OSV-2020-29](https://insights.sbomify.com/OSV-2020-29/): Heap-use-after-free in CRYPTO_DOWN_REF (not scored)
- [OSV-2020-289](https://insights.sbomify.com/OSV-2020-289/): Stack-buffer-overflow in ot::Message::Write (not scored)
- [OSV-2020-288](https://insights.sbomify.com/OSV-2020-288/): Heap-use-after-free in pixReadMemBmp (not scored)
- [OSV-2020-287](https://insights.sbomify.com/OSV-2020-287/): Heap-use-after-free in condition_free_list_type (not scored)
- [OSV-2020-286](https://insights.sbomify.com/OSV-2020-286/): Use-of-uninitialized-value in ZSTD_loadCEntropy (not scored)
- [OSV-2020-280](https://insights.sbomify.com/OSV-2020-280/): Null-dereference READ (not scored)
- [OSV-2020-28](https://insights.sbomify.com/OSV-2020-28/): Heap-buffer-overflow in get16 (not scored)
- [OSV-2020-279](https://insights.sbomify.com/OSV-2020-279/): Global-buffer-overflow in lex_multiline_string (not scored)
- [OSV-2020-278](https://insights.sbomify.com/OSV-2020-278/): Heap-buffer-overflow in ih264d_decode_slice_thread (not scored)
- [OSV-2020-273](https://insights.sbomify.com/OSV-2020-273/): Heap-use-after-free in copy_string (not scored)
- [OSV-2020-27](https://insights.sbomify.com/OSV-2020-27/): Heap-buffer-overflow in parquet::LevelDecoder::SetData (not scored)
- [OSV-2020-263](https://insights.sbomify.com/OSV-2020-263/): Heap-use-after-free in dotnet_parse_tilde_2 (not scored)
- [OSV-2020-261](https://insights.sbomify.com/OSV-2020-261/): Use-of-uninitialized-value in WelsDec::CWelsDecoder::ReleaseBufferedReadyPicture (not scored)
- [OSV-2020-26](https://insights.sbomify.com/OSV-2020-26/): UNKNOWN READ in parquet::DictDecoderImpl<parquet::PhysicalType< (not scored)
- [OSV-2020-258](https://insights.sbomify.com/OSV-2020-258/): Stack-buffer-overflow in ot::Message::Write (not scored)
- [OSV-2020-257](https://insights.sbomify.com/OSV-2020-257/): Heap-use-after-free in ihevcd_jobq_lock (not scored)
- [OSV-2020-256](https://insights.sbomify.com/OSV-2020-256/): Global-buffer-overflow in dissect_wassp_sub_tlv (not scored)
- [OSV-2020-255](https://insights.sbomify.com/OSV-2020-255/): Heap-buffer-overflow in dname_pkt_copy (not scored)
- [OSV-2020-254](https://insights.sbomify.com/OSV-2020-254/): Heap-buffer-overflow in pixReadFromTiffStream (not scored)
- [OSV-2020-253](https://insights.sbomify.com/OSV-2020-253/): Stack-buffer-overflow in mrb_str_len_to_dbl (not scored)
- [OSV-2020-252](https://insights.sbomify.com/OSV-2020-252/): Global-buffer-overflow in json_tokener_parse_ex (not scored)
- [OSV-2020-250](https://insights.sbomify.com/OSV-2020-250/): UNKNOWN READ in Sass::Inspect::operator (not scored)
- [OSV-2020-249](https://insights.sbomify.com/OSV-2020-249/): Heap-buffer-overflow in cipher_generic_initiv (not scored)
- [OSV-2020-248](https://insights.sbomify.com/OSV-2020-248/): Heap-use-after-free in LocalizedText_clear (not scored)
- [OSV-2020-247](https://insights.sbomify.com/OSV-2020-247/): Use-of-uninitialized-value in WavpackDeleteTagItem (not scored)
- [OSV-2020-245](https://insights.sbomify.com/OSV-2020-245/): Heap-use-after-free in ndpi_http_check_content (not scored)
- [OSV-2020-244](https://insights.sbomify.com/OSV-2020-244/): Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short (not scored)
- [OSV-2020-243](https://insights.sbomify.com/OSV-2020-243/): Heap-buffer-overflow in OT::VarRegionList::serialize (not scored)
- [OSV-2020-242](https://insights.sbomify.com/OSV-2020-242/): Heap-buffer-overflow in ndpi_workflow_process_packet (not scored)
- [OSV-2020-240](https://insights.sbomify.com/OSV-2020-240/): UNKNOWN READ in perfetto::trace_processor::TraceStorage::GetIdForVariadicType (not scored)
- [OSV-2020-24](https://insights.sbomify.com/OSV-2020-24/): Heap-buffer-overflow in pcpp::SSLCertificateRequestMessage::SSLCertificateRequestMessage (not scored)
- [OSV-2020-238](https://insights.sbomify.com/OSV-2020-238/): Heap-use-after-free in copy_string (not scored)
- [OSV-2020-236](https://insights.sbomify.com/OSV-2020-236/): Heap-buffer-overflow in get_ndpi_flow_info6 (not scored)
- [OSV-2020-233](https://insights.sbomify.com/OSV-2020-233/): Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short (not scored)
- [OSV-2020-232](https://insights.sbomify.com/OSV-2020-232/): Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short (not scored)
- [OSV-2020-231](https://insights.sbomify.com/OSV-2020-231/): UNKNOWN WRITE in gen_mftr (not scored)
- [OSV-2020-2299](https://insights.sbomify.com/OSV-2020-2299/): Heap-buffer-overflow in ato16 (not scored)
- [OSV-2020-2298](https://insights.sbomify.com/OSV-2020-2298/): UNKNOWN READ in ndpi_free (not scored)
- [OSV-2020-2297](https://insights.sbomify.com/OSV-2020-2297/): Heap-double-free in WelsCommon::WelsFree (not scored)
- [OSV-2020-2291](https://insights.sbomify.com/OSV-2020-2291/): Heap-buffer-overflow in dotnet_parse_tilde_2 (not scored)
- [OSV-2020-2285](https://insights.sbomify.com/OSV-2020-2285/): Bad-cast to pcpp::Layer from invalid vptr (not scored)
- [OSV-2020-2276](https://insights.sbomify.com/OSV-2020-2276/): Negative-size-param in tcos_decipher (not scored)
- [OSV-2020-2274](https://insights.sbomify.com/OSV-2020-2274/): Heap-buffer-overflow in McCopyWidthEq4_c (not scored)
- [OSV-2020-2273](https://insights.sbomify.com/OSV-2020-2273/): Stack-buffer-overflow in perfetto::trace_processor::MemoryTrackerSnapshotParser::EmitRows (not scored)
- [OSV-2020-227](https://insights.sbomify.com/OSV-2020-227/): Heap-double-free in spng__free (not scored)
- [OSV-2020-2264](https://insights.sbomify.com/OSV-2020-2264/): Stack-buffer-overflow in ot::IsValidUtf8String (not scored)
- [OSV-2020-2263](https://insights.sbomify.com/OSV-2020-2263/): Heap-buffer-overflow in McChromaWithFragMv_c (not scored)
- [OSV-2020-2259](https://insights.sbomify.com/OSV-2020-2259/): Stack-buffer-overflow in ot::MeshCoP::ChannelMaskEntry::GetMask (not scored)
- [OSV-2020-2254](https://insights.sbomify.com/OSV-2020-2254/): Stack-use-after-return in insert_pin (not scored)
- [OSV-2020-2253](https://insights.sbomify.com/OSV-2020-2253/): Global-buffer-overflow in g_date_time_get_ymd (not scored)
- [OSV-2020-2251](https://insights.sbomify.com/OSV-2020-2251/): Heap-buffer-overflow in blosc_run_decompression_with_context (not scored)
- [OSV-2020-225](https://insights.sbomify.com/OSV-2020-225/): Heap-buffer-overflow in dname_pkt_compare (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/6/