mongoose:fuzz: Heap-buffer-overflow in ppp_tx_frame

Project: https://github.com/cesanta/mongoose.git Detailed Report: https://oss-fuzz.com/testcase?key=5174989637353472 Project: mongoose Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasanmongoose Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x7a9f4bbe01b0...

libredwg:llvmfuzz: Heap-buffer-overflow in dxf_entities_read

Detailed Report: https://oss-fuzz.com/testcase?key=4625202148081664 Project: libredwg Fuzzing Engine: honggfuzz Fuzz Target: llvmfuzz Job Type: honggfuzzasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x7803678e27c0 Crash State: dxfentitiesread dwgreaddxf...

OSV-2026-1016 Heap-buffer-overflow in decode_query_device_identification_resp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=530569583 Crash type: Heap-buffer-overflow READ 1 Crash state: decodequerydeviceidentificationresp decodequerydeviceidentificationrespfuzzer.cc...

PT-2026-99050

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=530569583 Crash type: Heap-buffer-overflow READ 1 Crash state: decode query device identification resp decode query device identification resp fuzzer.cc...

tarantool:msgpack_decode_test: Heap-buffer-overflow in mp_load_float

Project: https://github.com/tarantool/tarantool.git Detailed Report: https://oss-fuzz.com/testcase?key=6102314986045440 Project: tarantool Fuzzing Engine: libFuzzer Fuzz Target: msgpackdecodetest Job Type: libfuzzerasantarantool Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash...

CVE-2026-58379

A flaw was found in GIMP's Paint Shop Pro PSP file format parser. This heap buffer overflow vulnerability allows a remote attacker to cause arbitrary code execution or a denial of service DoS by tricking a user into opening a specially crafted PSP image file. The vulnerability occurs because the...

Chromium: CVE-2026-13798 Heap buffer overflow in Chromecast

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE-SU-2026:22664-1 Security update for jq

This update for jq fixes the following issues: - CVE-2026-32316: integer overflow within the jvpstringappend and jvpstringcopyreplacebad functions can lead to heap buffer overflow when evaluating untrusted jq queries bsc1262044. - CVE-2026-33947: unbounded recursion in functions jvsetpath,...

nsmd:decode_get_error_injection_mode_v1_resp_fuzzer: Heap-buffer-overflow in decode_common_resp

Detailed Report: https://oss-fuzz.com/testcase?key=5265468894806016 Project: nsmd Fuzzing Engine: libFuzzer Fuzz Target: decodegeterrorinjectionmodev1respfuzzer Job Type: libfuzzerasannsmd Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x75d605fe00b6 Crash State:...

libyal:libluksde_volume_fuzzer: Heap-buffer-overflow in libcaes_crypt_ecb

Detailed Report: https://oss-fuzz.com/testcase?key=5126067141279744 Project: libyal Fuzzing Engine: afl Fuzz Target: libluksdevolumefuzzer Job Type: aflasanlibyal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x796095de0123 Crash State: libcaescryptecb libcaescryptcbc...

nsmd:decode_common_resp_fuzzer: Heap-buffer-overflow in decode_common_resp

Detailed Report: https://oss-fuzz.com/testcase?key=4832295673200640 Project: nsmd Fuzzing Engine: libFuzzer Fuzz Target: decodecommonrespfuzzer Job Type: libfuzzerasannsmd Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x75fbfefe00b6 Crash State: decodecommonresp...

nsmd:decode_nsm_provide_token_resp_fuzzer: Heap-buffer-overflow in decode_reason_code_and_cc

Detailed Report: https://oss-fuzz.com/testcase?key=4522035288801280 Project: nsmd Fuzzing Engine: libFuzzer Fuzz Target: decodensmprovidetokenrespfuzzer Job Type: libfuzzerasannsmd Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x789a485e00b6 Crash State:...

SUSE CVE-2025-15666

A security vulnerability has been detected in Open Asset Import Library Assimp up to 5.4.3. Affected by this vulnerability is the function Assimp::SceneCombiner::Copy of the file code/Common/SceneCombiner.cpp of the component Model File Handler. Such manipulation of the argument width/height lead...

PT-2026-55578

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A heap buffer overflow exists in the Paint Shop Pro PSP file format parser. The issue occurs when the software incorrectly calculates buffer sizes while processing low bit-depth images, which...

nsmd:decode_query_device_identification_resp_fuzzer: Heap-buffer-overflow in decode_query_device_identification_resp

Detailed Report: https://oss-fuzz.com/testcase?key=6143090466029568 Project: nsmd Fuzzing Engine: libFuzzer Fuzz Target: decodequerydeviceidentificationrespfuzzer Job Type: libfuzzerasannsmd Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x750a80ae00b6 Crash State:...

CVE-2025-15666

A flaw was found in Assimp, the Open Asset Import Library. A local attacker could exploit a vulnerability where specially crafted model files could cause a heap-based buffer overflow. This issue, occurring in the SceneCombiner::Copy function, could allow an attacker to gain unauthorized access to...

EUVD-2026-41156

Heap buffer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

rabbitmq-c -- multiple vulnerabilities

The rabbitmq-c project reports: CVE-2026-61547: A heap buffer overflow exists when the amqpsendframe API is used to serialise an oversized AMQPFRAMEBODY frame, as memcpy writes past the end of the heap allocation without validating that the body fragment fits within the allocated frame buffer...

UBUNTU-CVE-2026-20213

A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PE file...

CVE-2026-14427

Heap buffer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...