CVE-2026-46384: Integer Overflow or Wraparound

iskorotkov/avro is a fast Go Avro codec. Prior to 2.33.0, several Avro decoder paths read attacker-controlled 64-bit values from the wire format and either narrowed them to platform-sized int before bounds-checking, or summed them with overflow-prone signed-int arithmetic. On 32-bit targets...

cbor-java:FuzzDec: Security exception in co.nstant.in.cbor.decoder.MapDecoder.decodeInfinitiveLength

Detailed Report: https://oss-fuzz.com/testcase?key=6673168129916928 Project: cbor-java Fuzzing Engine: libFuzzer Fuzz Target: FuzzDec Job Type: libfuzzerasancbor-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

cbor-java:FuzzDec: Security exception in co.nstant.in.cbor.decoder.MapDecoder.decodeFixedLength

Detailed Report: https://oss-fuzz.com/testcase?key=4593808694640640 Project: cbor-java Fuzzing Engine: libFuzzer Fuzz Target: FuzzDec Job Type: libfuzzerasancbor-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State: co.nstant.in.cbor.decoder.MapDecoder.decodeFixedLeng...

cbor-java:FuzzDec: Security exception in co.nstant.in.cbor.decoder.MapDecoder.decodeInfinitiveLength

Detailed Report: https://oss-fuzz.com/testcase?key=5082692122705920 Project: cbor-java Fuzzing Engine: libFuzzer Fuzz Target: FuzzDec Job Type: libfuzzerasancbor-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...