OSV-2025-275 UNKNOWN READ in void std::__1::vector<unsigned char, std::__1::allocator<unsigned char>>::__cons

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=410115359 Crash type: UNKNOWN READ Crash state: void std::1::vector::cons Poco::Net::NTLMCredentials::parseChallengeMessage Poco::Net::HTTPNTLMCredentials::createNTLMMessage...

OSV-2025-271 Use-of-uninitialized-value in luaS_new

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=409585559 Crash type: Use-of-uninitialized-value Crash state: luaSnew auxsetstr luaLrequiref...

OSV-2025-266 Heap-buffer-overflow in lj_buf_ruleb128

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408513931 Crash type: Heap-buffer-overflow READ 1 Crash state: ljbufruleb128 ljbcread cpparser...

OSV-2025-264 Security exception in org.joni.Parser.parseCharClass

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408254044 Crash type: Security exception Crash state: org.joni.Parser.parseCharClass org.joni.Lexer.fetchTokenInCC org.joni.Parser.parseCharClass...

OSV-2025-262 UNKNOWN WRITE in _lou_handlePassVariableAction

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408523839 Crash type: UNKNOWN WRITE Crash state: louhandlePassVariableAction passDoAction translateString...

OSV-2025-260 Heap-buffer-overflow in bfd_getb16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408254000 Crash type: Heap-buffer-overflow READ 1 Crash state: bfdgetb16 nds32elfdo9pcrelreloc nds32elf9pcrelreloc...

OSV-2025-258 Global-buffer-overflow in parseExtraField

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408025088 Crash type: Global-buffer-overflow READ 1 Crash state: parseExtraField KZip::openArchive KArchive::open...

OSV-2025-255 Security exception in com.github.javaparser.GeneratedJavaParser.Expression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=407817254 Crash type: Security exception Crash state: com.github.javaparser.GeneratedJavaParser.Expression java.base/java.lang.String.equals com.github.javaparser.utils.LineSeparator.lookup...

OSV-2025-253 Security exception in org.apache.lucene.analysis.ckb.SoraniNormalizer.normalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=407477665 Crash type: Security exception Crash state: org.apache.lucene.analysis.ckb.SoraniNormalizer.normalize org.apache.lucene.analysis.ckb.SoraniNormalizationFilter.incrementToken...

OSV-2025-251 Heap-buffer-overflow in icu_78::RegexMatcher::MatchChunkAt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=407590995 Crash type: Heap-buffer-overflow READ 2 Crash state: icu78::RegexMatcher::MatchChunkAt icu78::RegexMatcher::findUsingChunk uregexmatchfuzzer.cpp...

OSV-2025-249 Heap-use-after-free in lj_strfmt_pushvf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=407592872 Crash type: Heap-use-after-free READ 2 Crash state: ljstrfmtpushvf luapushfstring luaLloadfilex...

OSV-2025-240 Security exception in com.powsybl.commons.xml.XmlUtil.lambda$skipSubElements$0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=406332767 Crash type: Security exception Crash state: com.powsybl.commons.xml.XmlUtil.lambda$skipSubElements$0 com.powsybl.commons.xml.XmlUtil.readSubElements com.powsybl.commons.xml.XmlUtil.skipSubElements...

OSV-2025-239 Security exception in com.github.javaparser.GeneratedJavaParser.Expression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=406331578 Crash type: Security exception Crash state: com.github.javaparser.GeneratedJavaParser.Expression java.base/java.lang.StringLatin1.regionMatchesCI java.base/java.lang.String.regionMatches...

OSV-2025-230 Heap-buffer-overflow in wasm_loader_prepare_bytecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=404921047 Crash type: Heap-buffer-overflow WRITE 8 Crash state: wasmloaderpreparebytecode loadfromsections wasmloaderload...

OSV-2025-228 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=404941300 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.lang.Exception. java.base/java.lang.RuntimeException...

OSV-2025-226 UNKNOWN READ in extract_sess_version

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=404844413 Crash type: UNKNOWN READ Crash state: extractsessversion parsesdpsession parsemixedcontent...

OSV-2025-219 Heap-buffer-overflow in opj_j2k_read_tile_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=403673832 Crash type: Heap-buffer-overflow WRITE 8 Crash state: opjj2kreadtileheader opjj2kdecodetiles opjj2kdecode...

OSV-2025-207 Security exception in org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=403330010 Crash type: Security exception Crash state: org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone org.apache.lucene.analysis.tokenattributes.PackedTokenAttributeImpl.clone...

OSV-2025-190 Heap-buffer-overflow in std::__1::__function::__func<cv::PngDecoder::compose_frame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=401712861 Crash type: Heap-buffer-overflow READ 1 Crash state: std::1::function::funccv::PngDecoder::composeframe cv::ParallelLoopBodyWrapper::operator cv::ParallelJob::execute...

OSV-2025-178 Heap-buffer-overflow in usm_set_user_password

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=399458050 Crash type: Heap-buffer-overflow WRITE 9 Crash state: usmsetuserpassword usmsetpassword runconfighandler...