OSV-2026-1267 Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=560242604 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.RegexInjection.hookInternal com.codeintelligence.jazzer.sanitizers.RegexInjection.patternHook...

PT-2026-45895

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=515796208 Crash type: Security exception Crash state: com.code intelligence.jazzer.sanitizers.RegexInjection.hookInternal com.code intelligence.jazzer.sanitizers.RegexInjection.patternHook...

OSV-2026-341 Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=488745540 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.RegexInjection.hookInternal com.codeintelligence.jazzer.sanitizers.RegexInjection.patternHook...

maven-model:Xpp3ReaderFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf

Project: https://github.com/apache/maven.git Detailed Report: https://oss-fuzz.com/testcase?key=6158708575371264 Project: maven-model Fuzzing Engine: libFuzzer Fuzz Target: Xpp3ReaderFuzzer Job Type: libfuzzerasanmaven-model Platform Id: linux Crash Type: Security exception Crash Address: Crash...

reflections:ConfigurationBuilderFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Detailed Report: https://oss-fuzz.com/testcase?key=4534735016886272 Project: reflections Fuzzing Engine: libFuzzer Fuzz Target: ConfigurationBuilderFuzzer Job Type: libfuzzerasanreflections Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

OSV-2025-1004 Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=470469212 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.RegexInjection.hookInternal com.codeintelligence.jazzer.sanitizers.RegexInjection.patternHook...

keycloak:ValidatorFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Project: https://github.com/keycloak/keycloak.git Detailed Report: https://oss-fuzz.com/testcase?key=6364780233818112 Project: keycloak Fuzzing Engine: libFuzzer Fuzz Target: ValidatorFuzzer Job Type: libfuzzerasankeycloak Platform Id: linux Crash Type: Security exception Crash Address: Crash...

hikaricp:PropertyElfFuzzer: Security exception in jaz.Zer.reportFinding

Detailed Report: https://oss-fuzz.com/testcase?key=6253186960654336 Project: hikaricp Fuzzing Engine: libFuzzer Fuzz Target: PropertyElfFuzzer Job Type: libfuzzerasanhikaricp Platform Id: linux Crash Type: Security exception Crash Address: Crash State: jaz.Zer.reportFinding...

opencsv:CSVReaderFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Detailed Report: https://oss-fuzz.com/testcase?key=5409066396286976 Project: opencsv Fuzzing Engine: libFuzzer Fuzz Target: CSVReaderFuzzer Job Type: libfuzzerasanopencsv Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-commons-text:StringSubstitutorInterpolatorFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexRoadblocks.nodeMatchHook

Detailed Report: https://oss-fuzz.com/testcase?key=5267762668503040 Project: apache-commons-text Fuzzing Engine: libFuzzer Fuzz Target: StringSubstitutorInterpolatorFuzzer Job Type: libfuzzerasanapache-commons-text Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

dom4j:DOMReaderFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf

Project: https://github.com/dom4j/dom4j.git Detailed Report: https://oss-fuzz.com/testcase?key=6496868914561024 Project: dom4j Fuzzing Engine: libFuzzer Fuzz Target: DOMReaderFuzzer Job Type: libfuzzerasandom4j Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

htmlunit:HtmlParserFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf

Project: https://github.com/HtmlUnit/htmlunit.git Detailed Report: https://oss-fuzz.com/testcase?key=5187786085629952 Project: htmlunit Fuzzing Engine: libFuzzer Fuzz Target: HtmlParserFuzzer Job Type: libfuzzerasanhtmlunit Platform Id: linux Crash Type: Security exception Crash Address: Crash...

apache-commons-configuration:XMLConfigurationWriteFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf

Detailed Report: https://oss-fuzz.com/testcase?key=6596136799174656 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: XMLConfigurationWriteFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...

xstream:XmlFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf

Project: https://github.com/x-stream/xstream.git Detailed Report: https://oss-fuzz.com/testcase?key=4854544337862656 Project: xstream Fuzzing Engine: libFuzzer Fuzz Target: XmlFuzzer Job Type: libfuzzerasanxstream Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

hamcrest:HamcrestFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Project: https://github.com/hamcrest/JavaHamcrest.git Detailed Report: https://oss-fuzz.com/testcase?key=5153064552366080 Project: hamcrest Fuzzing Engine: libFuzzer Fuzz Target: HamcrestFuzzer Job Type: libfuzzerasanhamcrest Platform Id: linux Crash Type: Security exception Crash Address: Crash...

PT-2022-37759

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51941 Crash type: Security exception Crash state: com.code intelligence.jazzer.sanitizers.RegexInjection.hookInternal com.code intelligence.jazzer.sanitizers.RegexInjection.stringHook...

archaius-core:DynamicPropertyFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexRoadblocks.nodeMatchHook

Detailed Report: https://oss-fuzz.com/testcase?key=6297591020650496 Project: archaius-core Fuzzing Engine: libFuzzer Fuzz Target: DynamicPropertyFuzzer Job Type: libfuzzerasanarchaius-core Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

OSV-2022-764 Security exception in org.apache.commons.jxpath.ri.compiler.CoreOperation.parenthesize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50458 Crash type: Security exception Crash state: org.apache.commons.jxpath.ri.compiler.CoreOperation.parenthesize org.apache.commons.jxpath.ri.compiler.CoreOperation.toString...

PT-2022-37158

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to an uncaught exception in the com.code intelligence.jazzer.sanitizers.RegexInjection class, specifically in the hookInternal and...

Infinite Loop in Apache James

In Apache James, while fuzzing with Jazzer the IMAP parsing stack, we discover that crafted APPEND and STATUS IMAP command could be used to trigger infinite loops resulting in expensive CPU computations and OutOfMemory exceptions. This can be used for a Denial Of Service attack. The IMAP user nee...