PT-2026-99051

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=530730549 Crash type: Heap-buffer-overflow READ 1 Crash state: decode reason code and cc decode nsm provide token resp decode nsm provide token resp fuzzer.cc...

PT-2026-99053

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=530730553 Crash type: Heap-buffer-overflow READ 1 Crash state: decode common resp decode get error injection mode v1 resp decode get error injection mode v1 resp fuzzer.cc...

PT-2026-67373

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=530970666 Crash type: Heap-buffer-overflow WRITE 4 Crash state: mp load float mp decode float luamp decode with ctx...

mruby:mruby_proto_fuzzer: Heap-buffer-overflow in find_symbol

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6319235631218688 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyprotofuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

mruby:mruby_proto_fuzzer: Heap-buffer-overflow in read_irep_record

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6164719250243584 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyprotofuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

assimp:assimp_roundtrip_fuzzer: Heap-buffer-overflow in Assimp::D3MF::D3MFExporter::writeFaces

Detailed Report: https://oss-fuzz.com/testcase?key=5916417795620864 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimproundtripfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x78382b112a34 Crash State:...

janet:fuzz_dobytes: Heap-buffer-overflow in make_struct_n

Project: https://github.com/janet-lang/janet.git Detailed Report: https://oss-fuzz.com/testcase?key=5622419499581440 Project: janet Fuzzing Engine: libFuzzer Fuzz Target: fuzzdobytes Job Type: libfuzzerasanjanet Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

mongoose:fuzz: Heap-buffer-overflow in ppp_tx_frame

Project: https://github.com/cesanta/mongoose.git Detailed Report: https://oss-fuzz.com/testcase?key=5174989637353472 Project: mongoose Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasanmongoose Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x7a9f4bbe01b0...

libredwg:llvmfuzz: Heap-buffer-overflow in dxf_entities_read

Detailed Report: https://oss-fuzz.com/testcase?key=4625202148081664 Project: libredwg Fuzzing Engine: honggfuzz Fuzz Target: llvmfuzz Job Type: honggfuzzasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x7803678e27c0 Crash State: dxfentitiesread dwgreaddxf...

OSV-2026-1016 Heap-buffer-overflow in decode_query_device_identification_resp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=530569583 Crash type: Heap-buffer-overflow READ 1 Crash state: decodequerydeviceidentificationresp decodequerydeviceidentificationrespfuzzer.cc...

PT-2026-99050

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=530569583 Crash type: Heap-buffer-overflow READ 1 Crash state: decode query device identification resp decode query device identification resp fuzzer.cc...

tarantool:msgpack_decode_test: Heap-buffer-overflow in mp_load_float

Project: https://github.com/tarantool/tarantool.git Detailed Report: https://oss-fuzz.com/testcase?key=6102314986045440 Project: tarantool Fuzzing Engine: libFuzzer Fuzz Target: msgpackdecodetest Job Type: libfuzzerasantarantool Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash...

CVE-2026-58379

A flaw was found in GIMP's Paint Shop Pro PSP file format parser. This heap buffer overflow vulnerability allows a remote attacker to cause arbitrary code execution or a denial of service DoS by tricking a user into opening a specially crafted PSP image file. The vulnerability occurs because the...

Chromium: CVE-2026-13798 Heap buffer overflow in Chromecast

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE-SU-2026:22664-1 Security update for jq

This update for jq fixes the following issues: - CVE-2026-32316: integer overflow within the jvpstringappend and jvpstringcopyreplacebad functions can lead to heap buffer overflow when evaluating untrusted jq queries bsc1262044. - CVE-2026-33947: unbounded recursion in functions jvsetpath,...

nsmd:decode_get_error_injection_mode_v1_resp_fuzzer: Heap-buffer-overflow in decode_common_resp

Detailed Report: https://oss-fuzz.com/testcase?key=5265468894806016 Project: nsmd Fuzzing Engine: libFuzzer Fuzz Target: decodegeterrorinjectionmodev1respfuzzer Job Type: libfuzzerasannsmd Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x75d605fe00b6 Crash State:...

libyal:libluksde_volume_fuzzer: Heap-buffer-overflow in libcaes_crypt_ecb

Detailed Report: https://oss-fuzz.com/testcase?key=5126067141279744 Project: libyal Fuzzing Engine: afl Fuzz Target: libluksdevolumefuzzer Job Type: aflasanlibyal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x796095de0123 Crash State: libcaescryptecb libcaescryptcbc...

nsmd:decode_common_resp_fuzzer: Heap-buffer-overflow in decode_common_resp

Detailed Report: https://oss-fuzz.com/testcase?key=4832295673200640 Project: nsmd Fuzzing Engine: libFuzzer Fuzz Target: decodecommonrespfuzzer Job Type: libfuzzerasannsmd Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x75fbfefe00b6 Crash State: decodecommonresp...

nsmd:decode_nsm_provide_token_resp_fuzzer: Heap-buffer-overflow in decode_reason_code_and_cc

Detailed Report: https://oss-fuzz.com/testcase?key=4522035288801280 Project: nsmd Fuzzing Engine: libFuzzer Fuzz Target: decodensmprovidetokenrespfuzzer Job Type: libfuzzerasannsmd Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x789a485e00b6 Crash State:...

SUSE CVE-2025-15666

A security vulnerability has been detected in Open Asset Import Library Assimp up to 5.4.3. Affected by this vulnerability is the function Assimp::SceneCombiner::Copy of the file code/Common/SceneCombiner.cpp of the component Model File Handler. Such manipulation of the argument width/height lead...