CVE-2026-44636

libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. From to 1.8.7-r1, signed integer overflow in sixelencodehighcolor's allocation size calculation can lead to a heap buffer overflow. The public sixelencode entry point validates only that width and height are greater th...

CVE-2026-43903

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, sgiinput.cpp:265,274 use OIIODASSERT for bounds checking in the RLE decode loop. In release builds, OIIODASSERT compiles to voidsizeofx...

CVE-2026-43907

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, a signed integer overflow in QueryRGBBufferSizeInternal in DPXColorConverter.cpp leads to a heap-based out-of-bounds write when...

CVE-2026-43907

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, a signed integer overflow in QueryRGBBufferSizeInternal in DPXColorConverter.cpp leads to a heap-based out-of-bounds write when...

WS-2019-0573

Libpcap in versions libpcap-1.7.2 to libpcap-1.9.1 is vulnerable to Heap-buffer-overflow in finddom, related to optimize.c...

WS-2020-0392

Harfbuzz in versions 1.4.2 to 2.6.4 is vulnerable to Heap-buffer-overflow in OT::SegmentMaps::map, related to src/hb-ot-var-avar-table.hh...

WS-2019-0569

Htslib in versions 1.4 to 1.9 is vulnerable to Heap-buffer-overflow in bamread1, related to sam.c...

WS-2021-0185

libjpeg-turbo before 2.1.0 is vulnerable to heap-buffer-overflow in getwordrgbrow, related to rdppm.c...

WS-2019-0557

file in versions FILE520 to FILE537 is vulnerable to Heap-buffer-overflow, related to src/cdf.c...

WS-2019-0555

libgit2 in versions v0.27.0-rc1 to 0.28.4 is vulnerable to Heap-buffer-overflow, related to src/patchparse.c...

WS-2020-0352

htslib in versions 1.10 to 1.10.2 is vulnerable to Heap-buffer-overflow in htsmd5update , related to cram/cramdecode.c...

WS-2019-0530

GNU Aspell 0.60.8 and before is vulnerable to heap-buffer-overflow in acommon::ObjStack::duptop, related to common/objstack.hpp...

WS-2018-0647

GNOME GLib in versions 2.20.0 to 2.57.3 is vulnerable to heap-buffer-overflow in tokenstreamprepare on glib/gvariant-parser.c...

WS-2018-0646

curl 7.21.0 through 7.57.0 is vulnerable to an heap-buffer-overflow in loop on lib/curlfnmatch.c...

WS-2018-0644

GNOME GLib before 2.59.0 is vulnerable to heap-buffer-overflow in fastvalidate...

WS-2017-3769

The function cdffilepropertyinfo in src/readcdf.c in library libmagic causes to Heap-buffer-overflow in version FILE529 and FILE530...

WS-2016-7108

The mcopy function in src/softmagic.c in libmagic causes a Heap Buffer Overflow in version FILE529...

wolfmqtt:wolfmqtt-fuzzer: Heap-buffer-overflow in MqttDecode_Props

Project: https://github.com/wolfSSL/wolfMQTT.git Detailed Report: https://oss-fuzz.com/testcase?key=6047565794836480 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzerasanwolfmqtt Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

p11-kit:persist_fuzzer: Heap-buffer-overflow in p11_lexer_next

Project: https://github.com/p11-glue/p11-kit.git Detailed Report: https://oss-fuzz.com/testcase?key=6006011348713472 Project: p11-kit Fuzzing Engine: libFuzzer Fuzz Target: persistfuzzer Job Type: libfuzzerasanp11-kit Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

libcoap:persist_fuzzer: Heap-buffer-overflow in coap_persist_startup_lkd

Project: https://github.com/obgm/libcoap.git Detailed Report: https://oss-fuzz.com/testcase?key=5769153566015488 Project: libcoap Fuzzing Engine: libFuzzer Fuzz Target: persistfuzzer Job Type: libfuzzerasanlibcoap Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...