# Vulnerabilities published in 2021


- [OSV-2021-1143](https://insights.sbomify.com/OSV-2021-1143/): UNKNOWN WRITE in QtPrivate::QPodArrayOps<QPainterPath::Element>::copyAppend (not scored)
- [OSV-2021-1142](https://insights.sbomify.com/OSV-2021-1142/): Heap-buffer-overflow in exif_get_slong (not scored)
- [OSV-2021-1141](https://insights.sbomify.com/OSV-2021-1141/): Heap-use-after-free in TranslateLetter (not scored)
- [OSV-2021-1139](https://insights.sbomify.com/OSV-2021-1139/): UNKNOWN READ in exif_mnote_data_apple_load (not scored)
- [OSV-2021-1138](https://insights.sbomify.com/OSV-2021-1138/): Heap-buffer-overflow in exif_get_sshort (not scored)
- [OSV-2021-1135](https://insights.sbomify.com/OSV-2021-1135/): Heap-use-after-free in prvTidyInsertedToken (not scored)
- [OSV-2021-1134](https://insights.sbomify.com/OSV-2021-1134/): Heap-buffer-overflow in exif_mnote_data_apple_load (not scored)
- [OSV-2021-1128](https://insights.sbomify.com/OSV-2021-1128/): Heap-buffer-overflow in exif_mnote_data_apple_identify (not scored)
- [OSV-2021-1127](https://insights.sbomify.com/OSV-2021-1127/): Heap-use-after-free in zebra_nhg_hash_equal (not scored)
- [OSV-2021-1124](https://insights.sbomify.com/OSV-2021-1124/): Segv on unknown address in helper_uc_tracecode (not scored)
- [OSV-2021-1122](https://insights.sbomify.com/OSV-2021-1122/): Heap-double-free in sudoers_gc_run (not scored)
- [OSV-2021-1121](https://insights.sbomify.com/OSV-2021-1121/): UNKNOWN WRITE in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend (not scored)
- [OSV-2021-1120](https://insights.sbomify.com/OSV-2021-1120/): Heap-use-after-free in on_body (not scored)
- [OSV-2021-1117](https://insights.sbomify.com/OSV-2021-1117/): Heap-buffer-overflow in json_object_new_string (not scored)
- [OSV-2021-1116](https://insights.sbomify.com/OSV-2021-1116/): Use-after-poison in JS::PrimitiveString::string (not scored)
- [OSV-2021-1113](https://insights.sbomify.com/OSV-2021-1113/): Stack-buffer-overflow in getoid (not scored)
- [OSV-2021-1110](https://insights.sbomify.com/OSV-2021-1110/): Stack-buffer-overflow in TranslateWord2 (not scored)
- [OSV-2021-1109](https://insights.sbomify.com/OSV-2021-1109/): UNKNOWN READ in mrb_check_frozen (not scored)
- [OSV-2021-1108](https://insights.sbomify.com/OSV-2021-1108/): Use-of-uninitialized-value in init_main_qtable (not scored)
- [OSV-2021-1105](https://insights.sbomify.com/OSV-2021-1105/): Heap-buffer-overflow in read_config (not scored)
- [OSV-2021-1104](https://insights.sbomify.com/OSV-2021-1104/): Heap-buffer-overflow in ap_escape_path_segment_buffer (not scored)
- [OSV-2021-1102](https://insights.sbomify.com/OSV-2021-1102/): Heap-use-after-free in usbredirparser_serialize (not scored)
- [OSV-2021-1099](https://insights.sbomify.com/OSV-2021-1099/): Stack-buffer-overflow in ot::StringFind (not scored)
- [OSV-2021-1086](https://insights.sbomify.com/OSV-2021-1086/): Heap-buffer-overflow in dwg_convert_SAB_to_SAT1 (not scored)
- [OSV-2021-1085](https://insights.sbomify.com/OSV-2021-1085/): Stack-buffer-overflow in strcat (not scored)
- [OSV-2021-1083](https://insights.sbomify.com/OSV-2021-1083/): Heap-buffer-overflow in flb_hash_get_by_id (not scored)
- [OSV-2021-1082](https://insights.sbomify.com/OSV-2021-1082/): UNKNOWN READ in std::__1::__tree<std::__1::__value_type<std::__1::basic_string<char, std::__1::c (not scored)
- [OSV-2021-1081](https://insights.sbomify.com/OSV-2021-1081/): Heap-use-after-free in gx_pattern_accum_finalize_cw (not scored)
- [OSV-2021-1080](https://insights.sbomify.com/OSV-2021-1080/): Use-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr (not scored)
- [OSV-2021-1078](https://insights.sbomify.com/OSV-2021-1078/): Heap-buffer-overflow in prvTidygrowStack (not scored)
- [OSV-2021-1076](https://insights.sbomify.com/OSV-2021-1076/): UNKNOWN READ in ParseXMLElement (not scored)
- [OSV-2021-1075](https://insights.sbomify.com/OSV-2021-1075/): UNKNOWN READ in helper_uc_tracecode (not scored)
- [OSV-2021-1074](https://insights.sbomify.com/OSV-2021-1074/): Use-of-uninitialized-value in SkBaseDevice::save (not scored)
- [OSV-2021-1071](https://insights.sbomify.com/OSV-2021-1071/): Heap-use-after-free in SkCanvas::MCRec::MCRec (not scored)
- [OSV-2021-1070](https://insights.sbomify.com/OSV-2021-1070/): Heap-buffer-overflow in ZSTD_decompressBlock_internal (not scored)
- [OSV-2021-1069](https://insights.sbomify.com/OSV-2021-1069/): Segv on unknown address in helper_uc_tracecode (not scored)
- [OSV-2021-1066](https://insights.sbomify.com/OSV-2021-1066/): UNKNOWN READ in helper_uc_tracecode (not scored)
- [OSV-2021-1061](https://insights.sbomify.com/OSV-2021-1061/): UNKNOWN WRITE in CompileBlock (not scored)
- [OSV-2021-1059](https://insights.sbomify.com/OSV-2021-1059/): Use-of-uninitialized-value in fuzz_json_decode_encode.cc (not scored)
- [OSV-2021-1055](https://insights.sbomify.com/OSV-2021-1055/): UNKNOWN WRITE in jxl::ModularFrameDecoder::DecodeGroup (not scored)
- [OSV-2021-1054](https://insights.sbomify.com/OSV-2021-1054/): Heap-buffer-overflow in jxl::N_SCALAR::SingleFromSingle (not scored)
- [OSV-2021-1052](https://insights.sbomify.com/OSV-2021-1052/): Use-of-uninitialized-value in jxl::N_AVX2::UpsampleRect (not scored)
- [OSV-2021-1049](https://insights.sbomify.com/OSV-2021-1049/): Container-overflow in jxl::InvSqueeze (not scored)
- [OSV-2021-1048](https://insights.sbomify.com/OSV-2021-1048/): Stack-buffer-overflow in INDEX_ORDERLY_RAM_Marshal (not scored)
- [OSV-2021-1046](https://insights.sbomify.com/OSV-2021-1046/): UNKNOWN READ in helper_ret_stb_mmu_x86_64 (not scored)
- [OSV-2021-1045](https://insights.sbomify.com/OSV-2021-1045/): Heap-buffer-overflow in mrb_vm_exec (not scored)
- [OSV-2021-1041](https://insights.sbomify.com/OSV-2021-1041/): Global-buffer-overflow in SetUpPhonemeTable (not scored)
- [OSV-2021-1039](https://insights.sbomify.com/OSV-2021-1039/): Use-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr (not scored)
- [OSV-2021-1024](https://insights.sbomify.com/OSV-2021-1024/): Global-buffer-overflow in GetSsmlAttribute (not scored)
- [OSV-2021-1017](https://insights.sbomify.com/OSV-2021-1017/): Stack-buffer-overflow in piv_compute_signature (not scored)
- [OSV-2021-1015](https://insights.sbomify.com/OSV-2021-1015/): Dynamic-stack-buffer-overflow in VP8SetSegmentParams (not scored)
- [OSV-2021-1011](https://insights.sbomify.com/OSV-2021-1011/): Use-of-uninitialized-value in jxl::N_AVX2::AddNoise (not scored)
- [OSV-2021-1008](https://insights.sbomify.com/OSV-2021-1008/): Dynamic-stack-buffer-overflow in clear_opt_map_info (not scored)
- [OSV-2021-1003](https://insights.sbomify.com/OSV-2021-1003/): Dynamic-stack-buffer-overflow in mdb_numeric_to_string (not scored)
- [OSV-2021-10](https://insights.sbomify.com/OSV-2021-10/): Heap-buffer-overflow in sp_tohex (not scored)
- [OSV-2020-2328](https://insights.sbomify.com/OSV-2020-2328/): UNKNOWN READ in UA_Server_initNS0 (not scored)
- [OSV-2020-2320](https://insights.sbomify.com/OSV-2020-2320/): UNKNOWN WRITE in cpu_arm_exec_arm (not scored)
- [OSV-2020-2309](https://insights.sbomify.com/OSV-2020-2309/): UNKNOWN WRITE in flb_utils_proxy_url_split (not scored)
- [OSV-2020-2308](https://insights.sbomify.com/OSV-2020-2308/): Heap-buffer-overflow in derive_collocated_motion_vectors (not scored)
- [OSV-2020-2305](https://insights.sbomify.com/OSV-2020-2305/): UNKNOWN WRITE in tb_flush_armeb (not scored)
- [OSV-2020-2304](https://insights.sbomify.com/OSV-2020-2304/): Use-of-uninitialized-value in memory_test (not scored)
- [OSV-2020-2301](https://insights.sbomify.com/OSV-2020-2301/): Heap-buffer-overflow in H5MM_xstrdup (not scored)
- [OSV-2020-2300](https://insights.sbomify.com/OSV-2020-2300/): Heap-buffer-overflow in H5MM_strdup (not scored)
- [OSV-2019-1](https://insights.sbomify.com/OSV-2019-1/): ASSERT: bufferRemainingSize() >= length. (not scored)
- [OSV-2018-99](https://insights.sbomify.com/OSV-2018-99/): Heap-buffer-overflow in git__strntol64 (not scored)
- [OSV-2018-97](https://insights.sbomify.com/OSV-2018-97/): Heap-buffer-overflow in CFF::CFF2VariationStore::serialize (not scored)
- [OSV-2018-95](https://insights.sbomify.com/OSV-2018-95/): Heap-use-after-free in Envoy::FakeConnectionBase::close (not scored)
- [OSV-2018-92](https://insights.sbomify.com/OSV-2018-92/): Use-of-uninitialized-value in _gnutls_x509_get_time (not scored)
- [OSV-2018-91](https://insights.sbomify.com/OSV-2018-91/): Heap-buffer-overflow in BEInt<unsigned int, 4>::operator unsigned int (not scored)
- [OSV-2018-90](https://insights.sbomify.com/OSV-2018-90/): Heap-buffer-overflow in wireguard_done (not scored)
- [OSV-2018-89](https://insights.sbomify.com/OSV-2018-89/): Heap-use-after-free in TunnelIPv6Interface::remove_address (not scored)
- [OSV-2018-85](https://insights.sbomify.com/OSV-2018-85/): Heap-buffer-overflow in put_8tap_scaled_c (not scored)
- [OSV-2018-83](https://insights.sbomify.com/OSV-2018-83/): Heap-buffer-overflow in encode_LEARN (not scored)
- [OSV-2018-82](https://insights.sbomify.com/OSV-2018-82/): Heap-buffer-overflow in OT::LigatureSubstFormat1::closure (not scored)
- [OSV-2018-79](https://insights.sbomify.com/OSV-2018-79/): Use-of-uninitialized-value in g_dbus_message_new_from_blob (not scored)
- [OSV-2018-75](https://insights.sbomify.com/OSV-2018-75/): Heap-buffer-overflow in ref_oneandzero_unpad (not scored)
- [OSV-2018-74](https://insights.sbomify.com/OSV-2018-74/): Heap-use-after-free in yr_re_ast_extract_literal (not scored)
- [OSV-2018-73](https://insights.sbomify.com/OSV-2018-73/): Stack-buffer-overflow in hb_array_t<char const>::cmp (not scored)
- [OSV-2018-72](https://insights.sbomify.com/OSV-2018-72/): Use-of-uninitialized-value in read_pbkdf2_params (not scored)
- [OSV-2018-71](https://insights.sbomify.com/OSV-2018-71/): Heap-use-after-free in parse_odp_action (not scored)
- [OSV-2018-70](https://insights.sbomify.com/OSV-2018-70/): Heap-buffer-overflow in learn_check (not scored)
- [OSV-2018-68](https://insights.sbomify.com/OSV-2018-68/): Heap-buffer-overflow in read_bits_16 (not scored)
- [OSV-2018-64](https://insights.sbomify.com/OSV-2018-64/): Heap-buffer-overflow in BEInt<unsigned int, 4>::operator unsigned int (not scored)
- [OSV-2018-62](https://insights.sbomify.com/OSV-2018-62/): Heap-buffer-overflow in parse_odp_key_mask_attr (not scored)
- [OSV-2018-61](https://insights.sbomify.com/OSV-2018-61/): Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short (not scored)
- [OSV-2018-6](https://insights.sbomify.com/OSV-2018-6/): Use-of-uninitialized-value in DosSlashToUnix (not scored)
- [OSV-2018-59](https://insights.sbomify.com/OSV-2018-59/): Heap-use-after-free in read_uncompressed_header (not scored)
- [OSV-2018-58](https://insights.sbomify.com/OSV-2018-58/): Heap-buffer-overflow in tag_parse (not scored)
- [OSV-2018-57](https://insights.sbomify.com/OSV-2018-57/): Heap-buffer-overflow in read_uncompressed_header (not scored)
- [OSV-2018-56](https://insights.sbomify.com/OSV-2018-56/): UNKNOWN READ in OT::propagate_attachment_offsets (not scored)
- [OSV-2018-55](https://insights.sbomify.com/OSV-2018-55/): Heap-buffer-overflow in ot::MeshForwarder::GetFramePriority (not scored)
- [OSV-2018-54](https://insights.sbomify.com/OSV-2018-54/): UNKNOWN READ in BEInt<short, 2>::operator short (not scored)
- [OSV-2018-50](https://insights.sbomify.com/OSV-2018-50/): Heap-use-after-free in UA_Session_deleteMembersCleanup (not scored)
- [OSV-2018-48](https://insights.sbomify.com/OSV-2018-48/): Heap-buffer-overflow in PCF_Glyph_Load (not scored)
- [OSV-2018-47](https://insights.sbomify.com/OSV-2018-47/): Heap-buffer-overflow in ycc_rgb_convert (not scored)
- [OSV-2018-46](https://insights.sbomify.com/OSV-2018-46/): Heap-buffer-overflow in GDAL_LercNS::RLE::readCount (not scored)
- [OSV-2018-459](https://insights.sbomify.com/OSV-2018-459/): Use-of-uninitialized-value in lex_white (not scored)
- [OSV-2018-457](https://insights.sbomify.com/OSV-2018-457/): Heap-buffer-overflow in xstrndup (not scored)
- [OSV-2018-454](https://insights.sbomify.com/OSV-2018-454/): Use-of-uninitialized-value in fz_expand_indexed_pixmap (not scored)
- [OSV-2018-451](https://insights.sbomify.com/OSV-2018-451/): Use-of-uninitialized-value in jbig2_huffman_get (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/9/
