ANT-2026-PVQH654C · gdal · Heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-PVQH654C: Heap-buffer-overflow in mitabtabfile.cpp:97...

BIT-ENVOY-2026-26309 Envoy has an off-by-one write in JsonEscaper::escapeString()

Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, an off-by-one write in Envoy::JsonEscaper::escapeString can corrupt std::string null-termination, causing undefined behavior and potentially leading to crashes or out-of-bounds reads when the...

CVE-2026-26309 Envoy has an off-by-one write in JsonEscaper::escapeString()

Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, an off-by-one write in Envoy::JsonEscaper::escapeString can corrupt std::string null-termination, causing undefined behavior and potentially leading to crashes or out-of-bounds reads when the...

CVE-2026-26309: Off-by-one Error

Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, an off-by-one write in Envoy::JsonEscaper::escapeString can corrupt std::string null-termination, causing undefined behavior and potentially leading to crashes or out-of-bounds reads when the...

PT-2026-24617

Summary An off-by-one write in Envoy::JsonEscaper::escapeString can corrupt std::string null-termination, causing undefined behavior and potentially leading to crashes or out-of-bounds reads when the resulting string is later treated as a C-string. Details The bug is in the control-character...

Envoy 安全漏洞

Envoy is an open-source gateway program developed by Enphase, used to connect smart home devices. There are security vulnerabilities in versions of Envoy prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13. These vulnerabilities stem from a race condition in the JsonEscaper::escapeString function, which...

oatpp:fuzz_mapper: Heap-buffer-overflow in oatpp::json::Utils::escapeString

Project: https://github.com/oatpp/oatpp.git Detailed Report: https://oss-fuzz.com/testcase?key=4513873071243264 Project: oatpp Fuzzing Engine: libFuzzer Fuzz Target: fuzzmapper Job Type: libfuzzerasanoatpp Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x533000018728...

OSV-2021-1678 Heap-buffer-overflow in flatbuffers::EscapeString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42244 Crash type: Heap-buffer-overflow READ 1 Crash state: flatbuffers::EscapeString flexbuffers::Reference::ToString void flexbuffers::AppendToString...

PT-2021-27932

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, which occurs in the flatbuffers::EscapeString function, and is also associated with...

flatbuffers:monster_fuzzer: Heap-buffer-overflow in flatbuffers::EscapeString

Project: https://github.com/google/flatbuffers.git Detailed Report: https://oss-fuzz.com/testcase?key=6327961110839296 Project: flatbuffers Fuzzing Engine: libFuzzer Fuzz Target: monsterfuzzer Job Type: libfuzzerasanflatbuffers Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

OSV-2021-520 Heap-buffer-overflow in flatbuffers::EscapeString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32008 Crash type: Heap-buffer-overflow READ 1 Crash state: flatbuffers::EscapeString flexbuffers::Reference::ToString void flexbuffers::AppendToString...

PT-2021-28155

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is reported, which occurs in the flatbuffers::EscapeString function, specifically when flexbuffers::Reference::ToString...

flatbuffers:monster_fuzzer: Heap-buffer-overflow in flatbuffers::EscapeString

Project: https://github.com/google/flatbuffers.git Detailed Report: https://oss-fuzz.com/testcase?key=5881834912219136 Project: flatbuffers Fuzzing Engine: libFuzzer Fuzz Target: monsterfuzzer Job Type: libfuzzerasanflatbuffers Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...