OSV-2026-963 Bad-cast to Ogre::HardwareBuffer from invalid vptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=526758819 Crash type: Bad-cast Crash state: Bad-cast to Ogre::HardwareBuffer from invalid vptr Ogre::HardwareBuffer::unlockImpl Ogre::HardwareBuffer::unlock...

PT-2026-55435

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=526224351 Crash type: Heap-use-after-free READ 8 Crash state: Wt::Http::Request::parseFormUrlEncoded Wt::CgiParser::parse fuzz-cgi.C...

OSV-2026-925 Heap-buffer-overflow in ssh_config_parse_line_internal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=523820519 Crash type: Heap-buffer-overflow READ 1 Crash state: sshconfigparselineinternal sshconfigparsestring sshclientconfigfuzzer.c...

OSV-2026-837 Heap-use-after-free in grk::TileProcessor::parseTilePart

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=519348401 Crash type: Heap-use-after-free READ 8 Crash state: grk::TileProcessor::parseTilePart tf::Executor::invoke tf::Executor::spawn...

PT-2026-53348

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=519348401 Crash type: Heap-use-after-free READ 8 Crash state: grk::TileProcessor::parseTilePart tf::Executor:: invoke tf::Executor:: spawn...

OSV-2026-762 Heap-buffer-overflow in coap_pdu_parse_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=513783540 Crash type: Heap-buffer-overflow READ 1 Crash state: coappduparseheader coappduparse2 coappduparse...

OSV-2026-743 UNKNOWN READ in persist_target.c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=513282269 Crash type: UNKNOWN READ Crash state: persisttarget.c...

OSV-2026-736 Heap-buffer-overflow in coap_pdu_parse_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=512517700 Crash type: Heap-buffer-overflow READ 1 Crash state: coappduparseheader coappduparse2 coappduparse...

OSV-2026-678 UNKNOWN WRITE in ___interceptor_strncpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=508899220 Crash type: UNKNOWN WRITE Crash state: interceptorstrncpy concathashstring ndpisearchsshtcp...

OSV-2026-655 Heap-buffer-overflow in lj_record_idx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=507646002 Crash type: Heap-buffer-overflow WRITE 8 Crash state: ljrecordidx ljrecordins tracestate...

OSV-2026-595 UNKNOWN WRITE in std::__1::istreambuf_iterator<char, std::__1::char_traits<char>> std::__1::num_g

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=504141064 Crash type: UNKNOWN WRITE Crash state: std::1::istreambufiterator std::1::numg std::1::basicistream& std::1::inputar igl::MshLoader::parseelementfield...

OSV-2026-518 Use-of-uninitialized-value in ne_read_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=498498500 Crash type: Use-of-uninitialized-value Crash state: nereadblock nesteggreadpacket fuzz.cc...

OSV-2026-455 UNKNOWN READ in mkv::matroska_segment_c::TrackInit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=495498906 Crash type: UNKNOWN READ Crash state: mkv::matroskasegmentc::TrackInit mkv::matroskasegmentc::TrackInit mkv::matroskasegmentc::ParseTrackEntry...

OSV-2026-301 Use-of-uninitialized-value in pcpp::IPv6Extension::getExtensionLen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=486705308 Crash type: Use-of-uninitialized-value Crash state: pcpp::IPv6Extension::getExtensionLen pcpp::IPv6Layer::parseExtensions pcpp::IPv6Layer::IPv6Layer...

OSV-2026-259 Use-of-uninitialized-value in tsip_parse_input

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=484859694 Crash type: Use-of-uninitialized-value Crash state: tsipparseinput gpsdpoll FuzzDrivers.c...

OSV-2026-255 UNKNOWN WRITE in nmeaid_to_prn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=484666533 Crash type: UNKNOWN WRITE Crash state: nmeaidtoprn processGSV nmeaparse...

OSV-2026-242 Use-of-uninitialized-value in ntrip_parse_url

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=483900342 Crash type: Use-of-uninitialized-value Crash state: ntripparseurl FuzzClient.c...

OSV-2026-177 Security exception in org.apache.poi.util.IOUtils.safelyAllocate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=479908886 Crash type: Security exception Crash state: org.apache.poi.util.IOUtils.safelyAllocate org.apache.poi.hssf.record.RecordInputStream.readRemainder org.apache.poi.hssf.record.UnknownRecord...

OSV-2026-105 Use-of-uninitialized-value in pcpp::SSLServerHelloMessage::ServerHelloTLSFingerprint::toString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=476187680 Crash type: Use-of-uninitialized-value Crash state: pcpp::SSLServerHelloMessage::ServerHelloTLSFingerprint::toString pcpp::SSLServerHelloMessage::ServerHelloTLSFingerprint::toStringAndMD5...

OSV-2026-54 Heap-use-after-free in _dwarf_exec_frame_instr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=475563464 Crash type: Heap-use-after-free READ 8 Crash state: dwarfexecframeinstr dwarfgetfdeinfoforapcrow dwarfgetfdeinfoforallregs3b...