qemu:qemu-fuzz-i386-target-generic-fuzz-am53c974: Heap-buffer-overflow in scsi_cdb_length

Detailed Report: https://oss-fuzz.com/testcase?key=6329577241903104 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-am53c974 Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x515001dbb8a6 Crash State:...

ffmpeg:ffmpeg_AV_CODEC_ID_PRORES_RAW_DEC_fuzzer: Heap-buffer-overflow in decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5093159807025152 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDPRORESRAWDECfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type:...

Medium: gnutls

Issue Overview: A heap-buffer-overflow off-by-one flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds OOB NULL pointer write, resulting in memory...

Huawei HarmonyOS heap buffer overflow vulnerability (CNVD-2025-22264)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to cause an availability impact...

Adobe Substance3D Viewer Heap Buffer Overflow Vulnerability (CNVD-2025-24440)

Adobe Substance3D Viewer is a stand-alone desktop application for viewing and editing 3D files from Audobee Adobe USA. Adobe Substance3D Viewer suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to cause arbitrary code to be executed in the context of the curre...

Linux Distros Unpatched Vulnerability : CVE-2022-38238

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::lookChar at /xpdf/Stream.cc. CVE-2022-38238 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2022-35466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c0473. CVE-2022-35466 Note that Nessus relies on the presence of th...

Linux Distros Unpatched Vulnerability : CVE-2019-5063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0. A specially crafted XML file can cause...

Linux Distros Unpatched Vulnerability : CVE-2022-35448

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b55af. CVE-2022-35448 Note that Nessus relies on the presence of th...

libmicrohttpd2:fuzz_response: Heap-buffer-overflow in response_add_auth_digest_challenge_alg

Detailed Report: https://oss-fuzz.com/testcase?key=6279829306802176 Project: libmicrohttpd2 Fuzzing Engine: libFuzzer Fuzz Target: fuzzresponse Job Type: libfuzzerasanlibmicrohttpd2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 15 Crash Address: 0x5110000003a0 Crash State:...

mruby:mruby_proto_fuzzer: Heap-buffer-overflow in mpz_div_2exp

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4859132240003072 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyprotofuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_SANM_fuzzer: Heap-buffer-overflow in old_codec37

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5383455572819968 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSANMfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

binutils:fuzz_windres: Heap-buffer-overflow in bfd_getl16

Detailed Report: https://oss-fuzz.com/testcase?key=4838573204635648 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzwindres Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x52100000c4e1 Crash State: bfdgetl16 bintores readcoffdataentry...

openexr:openexr_exrcheck_fuzzer: Heap-buffer-overflow in internal_exr_undo_ht

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5764013666664448 Project: openexr Fuzzing Engine: afl Fuzz Target: openexrexrcheckfuzzer Job Type: aflasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

binutils:fuzz_objcopy: Heap-buffer-overflow in bfd_getl32

Detailed Report: https://oss-fuzz.com/testcase?key=6099386087309312 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzobjcopy Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x50b000000704 Crash State: bfdgetl32...

ffmpeg:ffmpeg_AV_CODEC_ID_DXV_DEC_fuzzer: Heap-buffer-overflow in dxv_decompress_dxt5

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5850827739955200 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDDXVDECfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type:...

Chromium: CVE-2025-8879 Heap buffer overflow in libaom

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

ffmpeg:ffmpeg_AV_CODEC_ID_PRORES_RAW_DEC_fuzzer: Heap-buffer-overflow in prores_idct_put_bayer_12_c

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6674195116523520 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDPRORESRAWDECfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

Adobe InCopy Heap Buffer Overflow Vulnerability (CNVD-2025-18932)

Adobe InCopy is a text editing software for creative writing from the American company Audobee Adobe. Adobe InCopy suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code on the system or cause the application to crash...

Adobe InCopy Heap Buffer Overflow Vulnerability (CNVD-2025-18931)

Adobe InCopy is a text editing software for creative writing from the American company Audobee Adobe. Adobe InCopy suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to cause a buffer overflow that can be used to execute arbitrary code on the system or cause th...