OSV-2025-300 Negative-size-param in recurse_update_offsets

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=413078692 Crash type: Negative-size-param Crash state: recurseupdateoffsets match pcre2match8...

OSV-2025-298 Heap-buffer-overflow in i18n::phonenumbers::UnicodeText::const_iterator::operator--

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=413161357 Crash type: Heap-buffer-overflow READ 1 Crash state: i18n::phonenumbers::UnicodeText::constiterator::operator-- i18n::phonenumbers::UnicodeString::tempSubString...

PT-2025-21904 · Git +1 · Pcre2

Name of the Vulnerable Software and Affected Versions: pcre2 affected versions not specified Description: The software is susceptible to a negative-size-param issue. The crash state involves the recurse update offsets and match functions, ultimately leading to a crash within the pcre2 match 8...

PT-2025-19366 · Git +1 · Poco

Name of the Vulnerable Software and Affected Versions: Poco versions affected versions not specified Description: The software suffers from a use-of-uninitialized-value issue. This occurs within the Poco::Net::NTLMCredentials::parseChallengeMessage,...

OSV-2025-290 Heap-buffer-overflow in pcpp::TelnetLayer::toString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=411460531 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::TelnetLayer::toString pcpp::Packet::toStringList pcpp::Packet::toString...

OSV-2025-289 Stack-buffer-overflow in ot::Cli::Utils::OutputLine

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=411460530 Crash type: Stack-buffer-overflow READ Crash state: ot::Cli::Utils::OutputLine ot::Cli::Dns::HandleDnsRecordResponse ot::Dns::Client::FinalizeQuery...

PT-2025-19365 · Git +1 · Openthread

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software contains a stack-buffer-overflow read vulnerability. The crash state indicates the issue occurs within the Cli::Utils::OutputLine,...

OSV-2025-280 Heap-buffer-overflow in Assimp::SceneCombiner::CopyScene

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=410393968 Crash type: Heap-buffer-overflow READ Crash state: Assimp::SceneCombiner::CopyScene Assimp::Exporter::Export Assimp::Exporter::ExportToBlob...

OSV-2025-275 UNKNOWN READ in void std::__1::vector<unsigned char, std::__1::allocator<unsigned char>>::__cons

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=410115359 Crash type: UNKNOWN READ Crash state: void std::1::vector::cons Poco::Net::NTLMCredentials::parseChallengeMessage Poco::Net::HTTPNTLMCredentials::createNTLMMessage...

OSV-2025-271 Use-of-uninitialized-value in luaS_new

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=409585559 Crash type: Use-of-uninitialized-value Crash state: luaSnew auxsetstr luaLrequiref...

OSV-2025-266 Heap-buffer-overflow in lj_buf_ruleb128

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408513931 Crash type: Heap-buffer-overflow READ 1 Crash state: ljbufruleb128 ljbcread cpparser...

OSV-2025-264 Security exception in org.joni.Parser.parseCharClass

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408254044 Crash type: Security exception Crash state: org.joni.Parser.parseCharClass org.joni.Lexer.fetchTokenInCC org.joni.Parser.parseCharClass...

OSV-2025-262 UNKNOWN WRITE in _lou_handlePassVariableAction

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408523839 Crash type: UNKNOWN WRITE Crash state: louhandlePassVariableAction passDoAction translateString...

OSV-2025-260 Heap-buffer-overflow in bfd_getb16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408254000 Crash type: Heap-buffer-overflow READ 1 Crash state: bfdgetb16 nds32elfdo9pcrelreloc nds32elf9pcrelreloc...

OSV-2025-258 Global-buffer-overflow in parseExtraField

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408025088 Crash type: Global-buffer-overflow READ 1 Crash state: parseExtraField KZip::openArchive KArchive::open...

OSV-2025-255 Security exception in com.github.javaparser.GeneratedJavaParser.Expression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=407817254 Crash type: Security exception Crash state: com.github.javaparser.GeneratedJavaParser.Expression java.base/java.lang.String.equals com.github.javaparser.utils.LineSeparator.lookup...

OSV-2025-253 Security exception in org.apache.lucene.analysis.ckb.SoraniNormalizer.normalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=407477665 Crash type: Security exception Crash state: org.apache.lucene.analysis.ckb.SoraniNormalizer.normalize org.apache.lucene.analysis.ckb.SoraniNormalizationFilter.incrementToken...

OSV-2025-251 Heap-buffer-overflow in icu_78::RegexMatcher::MatchChunkAt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=407590995 Crash type: Heap-buffer-overflow READ 2 Crash state: icu78::RegexMatcher::MatchChunkAt icu78::RegexMatcher::findUsingChunk uregexmatchfuzzer.cpp...

OSV-2025-249 Heap-use-after-free in lj_strfmt_pushvf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=407592872 Crash type: Heap-use-after-free READ 2 Crash state: ljstrfmtpushvf luapushfstring luaLloadfilex...

OSV-2025-240 Security exception in com.powsybl.commons.xml.XmlUtil.lambda$skipSubElements$0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=406332767 Crash type: Security exception Crash state: com.powsybl.commons.xml.XmlUtil.lambda$skipSubElements$0 com.powsybl.commons.xml.XmlUtil.readSubElements com.powsybl.commons.xml.XmlUtil.skipSubElements...