Malicious code in oss-fuzz (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ea9bd1245381fc2e4b2f1e2d2ce20ef200636db74be623613eb4498ab3ea0ad Any computer that has this package installed or running should be considered...

OSV-2025-723 Heap-buffer-overflow in processClientServerHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=444547710 Crash type: Heap-buffer-overflow READ 2 Crash state: processClientServerHello processtls fuzzquicgetcryptodata.c...

Linux Distros Unpatched Vulnerability : CVE-2025-29476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in compresschunkfuzzer with oss-fuzz on commit 16450518afddcb3139de627157208e49bfef6987 in c-blosc2 v.2.17.0 and before...

PT-2025-34835 · Git · Json2Avro

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438873397 Crash type: Security exception Crash state: com.fasterxml.jackson.databind.deser.std.UntypedObjectDeserializer$Vanilla.deser com.fasterxml.jackson.databind.deser.std.UntypedObjectDeserializer$Vanilla.mapOb...

OSV-2025-633 UNKNOWN WRITE in _lou_handlePassVariableAction

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438413376 Crash type: UNKNOWN WRITE Crash state: louhandlePassVariableAction passDoAction translateString...

OSV-2025-628 Null-dereference READ in ubsan_GetStackTrace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438294033 Crash type: Null-dereference READ Crash state: ubsanGetStackTrace...

OSV-2025-620 Heap-buffer-overflow in FragPrepareChunk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437694938 Crash type: Heap-buffer-overflow WRITE 8 Crash state: FragPrepareChunk DemuxFrag demuxprocessstream...

OSV-2025-619 Heap-buffer-overflow in webvtt_domnode_SelectNodesInTree

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437537868 Crash type: Heap-buffer-overflow READ 1 Crash state: webvttdomnodeSelectNodesInTree webvttdomnodeSelectNodesInTree webvttdomnodeSelectNodesInTree...

OSV-2025-618 Heap-buffer-overflow in iTUNTripletCallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437731214 Crash type: Heap-buffer-overflow READ 3 Crash state: iTUNTripletCallback SetupMeta MP4LoadMeta...

OSV-2025-617 UNKNOWN WRITE in MP4_BoxFree

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437783630 Crash type: UNKNOWN WRITE Crash state: MP4BoxFree MP4ReadBoxContainerChildrenIndexed MP4ReadBoxContainer...

OSV-2025-616 Heap-buffer-overflow in Open

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437593508 Crash type: Heap-buffer-overflow READ 7 Crash state: Open demuxProbe vlcmoduleload...

OSV-2025-615 Index-out-of-bounds in hevc_get_picture_size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437760137 Crash type: Index-out-of-bounds Crash state: hevcgetpicturesize ParseNALBlock PacketizeParse...

OSV-2025-591 UNKNOWN READ in mov_read_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=435536867 Crash type: UNKNOWN READ Crash state: movreadheader avformatopeninput demuxopenlavf...

OSV-2025-589 Heap-buffer-overflow in isvcd_decode_recon_tfr_nmb_base_lyr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=435086517 Crash type: Heap-buffer-overflow READ 1 Crash state: isvcddecoderecontfrnmbbaselyr isvcdparseinterslicedatacabac isvcdparsepslice...

OSV-2025-584 Heap-buffer-overflow in isvcd_mark_err_slice_skip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=434978682 Crash type: Heap-buffer-overflow READ 2 Crash state: isvcdmarkerrsliceskip isvcdvideodecode Codec::decodeFrame...

OSV-2025-570 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=433311401 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.io.BufferedWriter.write java.base/java.io.Writer.write...

PT-2025-31717 · Git · Checkstyle

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=433311401 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.io.BufferedWriter.write java.base/java.io.Writer.write...

OSV-2025-550 Use-of-uninitialized-value in CFF::cff2_cs_opset_t<cff2_cs_opset_subr_subset_t, CFF::subr_subset_param_t, CFF:

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=431867896 Crash type: Use-of-uninitialized-value Crash state: CFF::cff2csopsettcff2csopsetsubrsubsett, CFF::subrsubsetparamt, CFF: cff2csopsetsubrsubsett::processop CFF::subrsubsettertcff2subrsubsettert,...

PT-2025-31561 · Git · Harfbuzz

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=431867896 Crash type: Use-of-uninitialized-value Crash state: CFF::cff2 cs opset tcff2 cs opset subr subset t, CFF::subr subset param t, CFF: cff2 cs opset subr subset t::process op CFF::subr subsetter tcff2 subr subsetter t,...

OSV-2025-544 Heap-buffer-overflow in N_BELE_RTP::LEPolicy::get32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=430110068 Crash type: Heap-buffer-overflow READ 4 Crash state: NBELERTP::LEPolicy::get32 PackLinuxElf32::elflookup PackLinuxElf32::PackLinuxElf32help1...