oss-fuzz

OSS-Fuzz: 오픈 소스 소프트웨어를 위한 지속적 퍼징 퍼즈 테스팅은 소프트웨어에서 프로그래밍 오류를 찾는 잘 알려진 기법입니다. 이러한 탐지 가능한 오류 중 상당수는 버퍼 오버플로처럼 심각한 보안 영향을 미칠 수 있습니다. Google은 Chrome 구성 요소의 가이드 인프로세스 퍼징을 배포하여 수천 개의 보안 취약점과 안정성 버그를 발견했으며, 이제 그 서비스를 오픈 소스 커뮤니티와 공유하고자 합니다. Core Infrastructure Initiative 및 OpenSSF와 협력하여 OSS-Fuzz는 현대적인 퍼징 기...

oss-fuzz-gen

ファズターゲット生成と評価のためのフレームワーク このフレームワークは、様々な大規模言語モデル（LLM）を使用して、実際の C/C++/Java/Python プロジェクト向けのファズターゲットを生成し、OSS-Fuzz プラットフォーム を介してベンチマークします。 詳細は AI-Powered Fuzzing: Breaking the Bug Hunting Barrier で確認できます： 現在サポートされているモデルは次のとおりです： Vertex AI code-bison Vertex AI code-bison-32k Gemini Pro Gemini Ultra...

clusterfuzz

ClusterFuzz ClusterFuzz는 소프트웨어에서 보안 및 안정성 문제를 찾는 확장 가능한 퍼징 인프라입니다. Google은 ClusterFuzz를 사용하여 모든 Google 제품을 퍼징하고 OSS-Fuzz의 퍼징 백엔드로 사용합니다. ClusterFuzz는 퍼징을 소프트웨어 프로젝트의 개발 프로세스에 원활하게 통합하는 데 도움이 되는 많은 기능을 제공합니다. 고도로 확장 가능합니다. 모든 크기의 클러스터에서 실행할 수 있습니다 예: OSS-Fuzz 인스턴스는 100,000개의 VM에서 실행됨. 충돌의 정확한 중복 제...

clusterfuzz

ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...

tmux-fuzzing

Fuzzing Lab: tmuxのファジング強化 Software Security @ EPFL, Spring 2025 概要...

fuzzing

Fuzzing Forum このプロジェクトは、fuzzing に関連するチュートリアル、例、議論、研究提案、その他のリソースをホストすることを目的としています。 外部からの貢献も歓迎します。詳細については CONTRIBUTING ファイルを参照してください。 ドキュメント Why fuzz? Introduction to fuzzing What makes a good fuzz target How to split a fuzzer-generated input into parts How to write structure-aware fuzzers with...

LibPNG_OSS-Fuzz

libpng のファジングと脆弱性分析 グループセキュリティ研究プロジェクト ファジングについて: ファジングは、プログラムに無効なデータ、予期しないデータ、またはランダムなデータを入力として提供し、バグや脆弱性を発見する自動化されたソフトウェアテスト手法です。カバレッジガイド付きファジングは、コードカバレッジのフィードバックを使用して、異なる実行経路をインテリジェントに探索します。 OSS-Fuzz について: OSS-Fuzz は、オープンソースソフトウェア向けの Google の継続的ファジングサービスです。LibFuzzer...

clusterfuzz v2.40.2

ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...

suricata suricata-8.0.7

Suricata Introduction Suricata is a network IDS, IPS and NSM engine developed by the OISF and the Suricata community. Resources Home Page Bug Tracker User Guide Dev Guide Installation Guide User Support Forum Contributing We're happily taking patches and other contributions. Please see our...

OSV-2026-1239 Security exception in org.apache.lucene.util.ArrayUtil.copyOfSubArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=557292360 Crash type: Security exception Crash state: org.apache.lucene.util.ArrayUtil.copyOfSubArray org.apache.lucene.util.BytesRef.deepCopyOf org.apache.lucene.index.Term...

clusterfuzz v2.39.2

ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...

OSV-2026-1220 Use-of-uninitialized-value in str_escape

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=554268877 Crash type: Use-of-uninitialized-value Crash state: strescape mrbvmexec yieldwithattr...

OSV-2026-1210 Heap-buffer-overflow in decode_get_histogram_format_resp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=553267079 Crash type: Heap-buffer-overflow READ 1 Crash state: decodegethistogramformatresp decodegethistogramformatrespfuzzer.cc...

OSV-2026-1189 Global-buffer-overflow in oidc_cfg_redirect_urls_allowed_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=550474749 Crash type: Global-buffer-overflow READ 8 Crash state: oidccfgredirecturlsallowedget oidcvalidateredirecturl fuzzurl.c...

ANT-2026-ZRDQDR79 · util-linux · heap-use-after-free

use-after-free medium CVE-2026-13595 GHSA-qpmf-9p9c-455w Severity Claude critical · Security research firm high · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-ZRDQDR79:...

OSV-2026-1157 Memcpy-param-overlap in zxc_decompress_chunk_wrapper_default

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=546426939 Crash type: Memcpy-param-overlap Crash state: zxcdecompresschunkwrapperdefault zxcdecompressframe fuzzdecompress.c...

php:php-fuzz-function-jit: Heap-use-after-free in zval_ptr_dtor_nogc

Detailed Report: https://oss-fuzz.com/testcase?key=4584750845853696 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-function-jit Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x7944a94efd30 Crash State: zvalptrdtornogc...

OSV-2026-1127 Heap-buffer-overflow in read_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=543583447 Crash type: Heap-buffer-overflow READ 1 Crash state: readdata zipsourcecall zipsourceread...

OSV-2026-1110 Check failed in CheckUnwind

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=541969271 Crash type: Check failed Crash state: CheckUnwind mrbbasicallocfunc pmnodehashinsert...

OSV-2026-1095 Heap-buffer-overflow in grk::t1::CodeblockDecompressImpl::parsePacketData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=540111888 Crash type: Heap-buffer-overflow READ 8 Crash state: grk::t1::CodeblockDecompressImpl::parsePacketData grk::PacketParser::readData grk::PacketParser::parsePacketData...