libredwg:llvmfuzz: Heap-double-free in dxf_blocks_read

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5692626108743680 Project: libredwg Fuzzing Engine: honggfuzz Fuzz Target: llvmfuzz Job Type: honggfuzzasanlibredwg Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x78956c0e01d0 Cra...

CVE-2026-10560: Improper Authentication

IBM Langflow OSS 1.0.0 through 1.9.6 contains a missing authentication vulnerability in /api/v1/buildpublictmp/ endpoints that allows an unauthenticated attacker to read build event data or cancel jobs using a valid job identifier, resulting in information disclosure and denial of service...

CVE-2026-10564: Server-Side Request Forgery (SSRF)

IBM Langflow OSS 1.0.0 through 1.9.6 contains a Server-Side Request Forgery SSRF. The legacy RSSReaderComponent in rss.py and SearXNG component in searxng.py make unvalidated HTTP requests to user-controlled URLs, bypassing SSRF protections introduced in version 1.9.3. An authenticated attacker c...

CVE-2026-7873: Improper Control of Generation of Code

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement...

CVE-2026-10546: Server-Side Request Forgery (SSRF)

IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery SSRF vulnerability in the URL component src/lfx/src/lfx/components/datasource/url.py due to a Time-of-Check/Time-of-Use TOCTOU race condition that can be exploited via DNS rebinding...

CVE-2026-7871: Deserialization of Untrusted Data

IBM Langflow OSS 1.0.0 through 1.10.0 allows users with Redis access to execute arbitrary code with full application privileges, compromising all secrets, data, and system integrity...

CVE-2026-7663: Improper Authorization

IBM Langflow OSS 1.0.0 through 1.9.6 could allow unauthenticated attackers to access protected MCP project resources and execute MCP operations due to improper authorization enforcement in the Streamable MCP transport endpoint...

CVE-2026-10129: Server-Side Request Forgery (SSRF)

IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery SSRF protection bypass vulnerability in the API Request component. An authenticated attacker with low-level privileges flow author role can bypass SSRF protections by enabling the followredirects parameter and supplying a...

CVE-2026-10140: Authorization Bypass Through User-Controlled Key

IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains improper shared-state handling that allows reuse of API clients across tenant boundaries. An authenticated attacker can manipulate cache state to cause requests from other users to be processed using incorrect upstream API credentials,...

CVE-2026-7803: Improper Input Validation

IBM Langflow OSS 1.0.0 through 1.10.0 could allow arbitrary code execution due to improper validation of flow nodes with missing or empty component type fields...

OSV-2026-995 Heap-double-free in dxf_entities_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=528859714 Crash type: Heap-double-free Crash state: dxfentitiesread dwgreaddxf llvmfuzz.c...

libredwg:llvmfuzz: Heap-double-free in dxf_entities_read

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=6631968138395648 Project: libredwg Fuzzing Engine: honggfuzz Fuzz Target: llvmfuzz Job Type: honggfuzzasanlibredwg Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x7bb1585e02b0 Cra...

libheif:sequence_fuzzer: Heap-buffer-overflow in unc_decoder_legacybase::processComponentSample

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=4561896460845056 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: sequencefuzzer Job Type: libfuzzerasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

ffmpeg:ffmpeg_dem_W64_fuzzer: Use-of-uninitialized-value in ff_adts_header_parse

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6429204661731328 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemW64fuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...

OSV-2026-981 Heap-buffer-overflow in std::__1::__function::__func<grk::FileFormatJP2Decompress::FileFormatJP2Decompre

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=527773834 Crash type: Heap-buffer-overflow WRITE 4 Crash state: std::1::function::funcgrk::FileFormatJP2Decompress::FileFormatJP2Decompre std::1::function::funcgrk::CodeStreamDecompress::postMultiTile...

PT-2026-56121

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=527978938 Crash type: Use-of-uninitialized-value Crash state: ogs cpystrn ogs nas 5gs decode dnn ogs nas 5gs decode pdu session establishment accept...

binutils:fuzz_addr2line: Heap-buffer-overflow in bfd_getl16

Detailed Report: https://oss-fuzz.com/testcase?key=5374725044633600 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzaddr2line Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7c8f9f3e08e1 Crash State: bfdgetl16...

mruby:mruby_fuzzer: Heap-buffer-overflow in mrb_vm_exec

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5740565795504128 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7c8eede958e4 Crash State:...

ogre:ogre_deep_fuzz: Heap-use-after-free in Ogre::VertexData::convertPackedColour

Project: https://github.com/OGRECave/ogre.git Detailed Report: https://oss-fuzz.com/testcase?key=5512354587279360 Project: ogre Fuzzing Engine: honggfuzz Fuzz Target: ogredeepfuzz Job Type: honggfuzzasanogre Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x7affe16e1577...

OSV-2026-962 Use-of-uninitialized-value in iup_delta_optimize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=526770452 Crash type: Use-of-uninitialized-value Crash state: iupdeltaoptimize OT::tupledeltat::optimize OT::TupleVariationData::tuplevariations...