gosentry

gosentry gosentry is a security-focused fork of the Go toolchain, integrating numerous features for state-of-the-art fuzzing campaigns on Go codebases. If you were using go test -fuzz before, you should use gosentry as a replacement. It comes with various fuzzing improvements and bug detectors th...

LibAFL

LibAFL，模糊测试库 高级模糊测试库 - 使用 Rust 将你自己的模糊测试器组合起来并扩展其功能。 LibAFL 是一个用 Rust 编写的可复用模糊测试器组件集合，它为你提供了现成模糊测试器的许多优势，同时又完全可定制。目前一些突出的功能包括： fast：我们在编译时尽一切可能，保持运行时开销最小。用户在手机上的 frida 模式下达到每秒 12 万次执行（使用所有核心）。 scalable：低级消息传递（简称 LLMP）使 LibAFL 能够在核心之间几乎线性扩展，并通过 TCP 扩展到多台机器。 adaptable：你可以替换 LibAFL 的每个部分。例如，BytesInp...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ntfs3: Boundary checks for the buffer were added to rununpack. rununpack checks runbuf runlast at the beginning of the while loop. However, it then reads sizesize and offsetsize bytes via rununpacks64, without verifying that thes...

WuppieFuzz

WuppieFuzz v1.7.1 TNO developed WuppieFuzz, a coverage-guided REST API fuzzer developed on top of LibAFL, targeting a wide audience of end-users, with a strong focus on ease-of-use, explainability of the discovered flaws and modularity. WuppieFuzz supports all three settings of testing black box,...

WuppieFuzz v1.7.1

WuppieFuzz v1.7.1 TNO developed WuppieFuzz, a coverage-guided REST API fuzzer developed on top of LibAFL, targeting a wide audience of end-users, with a strong focus on ease-of-use, explainability of the discovered flaws and modularity. WuppieFuzz supports all three settings of testing black box,...

gosentry v0.4.1

gosentry gosentry is a security-focused fork of the Go toolchain, integrating numerous features for state-of-the-art fuzzing campaigns on Go codebases. If you were using go test -fuzz before, you should use gosentry as a replacement. It comes with various fuzzing improvements and bug detectors th...

absolut (0.1.1), absolut-core (0.1.0) +21 more potentially affected by unknown CVE via z3 (>=0.4.0, <=0.20.2)

z3 CARGO version =0.4.0, =0.4.0, =0.13.0, =0.64.0, =0.2.1, =0.1.0, =0.6.0, =0.1.0, =0.1.0, =0.2.0, =0.5.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0295...

LibAFL v0.16.0

LibAFL, the fuzzer library Advanced Fuzzing Library - Slot your own fuzzers together and extend their features using Rust. LibAFL is a collection of reusable pieces of fuzzers, written in Rust, it gives you many of the benefits of an off-the-shelf fuzzer, while being completely customizable. Some...

EUVD-2026-32454

In the Linux kernel, the following vulnerability has been resolved: ntfs3: add buffer boundary checks to rununpack rununpack checks runbuf runlast at the top of the while loop but then reads sizesize and offsetsize bytes via rununpacks64 without verifying they fit within the remaining buffer. A...

Rust and Go Directed Fuzzing with LibAFL-DiFuzz

In modern SSDLC, program analysis and automated testing are essential for minimizing vulnerabilities before software release, with fuzzing being a fast and widely used dynamic testing method. However, traditional coverage-guided fuzzing may be less effective in specific tasks like verifying stati...

butterfly-fuzz (>=0.1.0, <=0.2.2), feroxfuzz (>=0.1.0-rc.0, <=1.0.0-rc.10) +5 more potentially affected by unknown CVE via libafl (>=0.1.0, <=0.10.1)

libafl CARGO version =0.1.0, =0.1.0, =0.1.0-rc.0, =0.1.0, =0.6.0, =0.6.0, =0.3.1, =0.1.0, =0.10.1 Source cves: unknown CVE Source advisory: OSV:GHSA-F7QJ-V3VP-4856...

GHSA-F7QJ-V3VP-4856 libafl has unsound usages of `core::slice::from_raw_parts_mut`

The library breaks the safety assumptions when using unsafe API slice::fromrawpartsmut. The pointer passed to fromrawpartsmut is misaligned by casting u8 to u16 raw pointer directly, which is unsound. The bug is patched by using alignoffset, which could make sure the memory address is aligned to ...

libafl has unsound usages of `core::slice::from_raw_parts_mut`

The library breaks the safety assumptions when using unsafe API slice::fromrawpartsmut. The pointer passed to fromrawpartsmut is misaligned by casting u8 to u16 raw pointer directly, which is unsound. The bug is patched by using alignoffset, which could make sure the memory address is aligned to ...

PT-2024-40265 · Libafl · Libafl

Name of the Vulnerable Software and Affected Versions: LibAFL versions prior to 0.11.2 Description: The issue arises from the misuse of the slice::from raw parts mut API, where a pointer is misaligned due to a direct cast from u8 to u16 raw pointer, leading to unsound behavior. The problem is...

butterfly-fuzz (>=0.1.0, <=0.2.2), feroxfuzz (>=0.1.0-rc.0, <=1.0.0-rc.10) +5 more potentially affected by unknown CVE via libafl (>=0.1.0, <=0.10.1)

libafl CARGO version =0.1.0, =0.1.0, =0.1.0-rc.0, =0.1.0, =0.6.0, =0.6.0, =0.3.1, =0.1.0, =0.10.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0424...

PT-2024-40967 · Libafl · Libafl

Name of the Vulnerable Software and Affected Versions: LibAFL versions prior to 0.11.2 Description: The issue arises from the misuse of the slice::from raw parts mut API, where a pointer is misaligned due to a direct cast from u8 to u16 raw pointer, leading to unsound behavior. The problem is...

LibAFL - Advanced Fuzzing Library - Slot Your Fuzzer Together In Rust! Scales Across Cores And Machines. For Windows, Android, MacOS, Linux, No_Std, ...

Advanced Fuzzing Library - Slot your own fuzzers together and extend their features using Rust. LibAFL is written and maintained by Andrea Fioraldi [email protected] and Dominik Maier [email protected]. Why LibAFL? LibAFL gives you many of the benefits of an off-the-shelf fuzzer, while...