libavc:svc_dec_fuzzer: Heap-buffer-overflow in isvcd_nal_parse_vcl_nal_partial

Detailed Report: https://oss-fuzz.com/testcase?key=6609205678374912 Project: libavc Fuzzing Engine: honggfuzz Fuzz Target: svcdecfuzzer Job Type: honggfuzzasanlibavc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x74ac6409a800 Crash State: isvcdnalparsevclnalpartial...

DEBIAN-CVE-2026-28420

Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal emulator when processing maximum combining characters from Unicode supplementary planes. Version 9.2.0076 fixes the issue...

kernel security update

3.10.0-1160.119.1.0.17 - scsi: ses: Fix possible descptr out-of-bounds accesses CVE-2023-53675 Orabug: 38860426 - ipv6: Fix out-of-bounds access in ipv6findtlv CVE-2023-53705 Orabug: 38860426 - netsched: hfsc: Fix a potential UAF in hfscdequeue too CVE-2025-37823 Orabug: 38860426 - libceph: fix...

openssl:provider: Heap-buffer-overflow in bin2bn

Project: https://github.com/openssl/openssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6120637956685824 Project: openssl Fuzzing Engine: afl Fuzz Target: provider Job Type: aflasanopenssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7bec1ebe5af5 Crash...

mongoose:fuzz: Heap-buffer-overflow in mg_mqtt_next_prop

Project: https://github.com/cesanta/mongoose.git Detailed Report: https://oss-fuzz.com/testcase?key=5230206175739904 Project: mongoose Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasanmongoose Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7caa794ece...

gpsd:FuzzDriversStructured: Global-buffer-overflow in gpsd_poll

Project: https://gitlab.com/gpsd/gpsd.git Detailed Report: https://oss-fuzz.com/testcase?key=4900618321068032 Project: gpsd Fuzzing Engine: libFuzzer Fuzz Target: FuzzDriversStructured Job Type: libfuzzerasangpsd Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

CLSA-2026-1770040438 kernel: Fix of 14 CVEs

efivarfs: Fix slab-out-of-bounds in efivarfsdcompare CVE-2025-39817 - scsi: ses: Fix possible descptr out-of-bounds accesses CVE-2023-53675 - ipv6: Fix out-of-bounds access in ipv6findtlv CVE-2023-53705 - libceph: fix potential use-after-free in havemonandosdmap CVE-2025-68285 - scsi: lpfc: Fix...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::TLSSupportedGroupsExtension::getSupportedGroups

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5812764829614080 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

openh264:decoder_fuzzer: Heap-buffer-overflow in WelsDec::WelsActualDecodeMbCavlcBSlice

Detailed Report: https://oss-fuzz.com/testcase?key=4512098314158080 Project: openh264 Fuzzing Engine: honggfuzz Fuzz Target: decoderfuzzer Job Type: honggfuzzasanopenh264 Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address: 0x7a79b840e81b Crash State:...

CLSA-2026-1769610819 kernel: Fix of 39 CVEs

Bluetooth: hcisysfs: Fix attempting to call deviceadd multiple times CVE-2022-50419 - firewire: net: fix use after free in fwnetfinishincomingpacket CVE-2023-53432 - wifi: brcmfmac: fix use-after-free bug in brcmfnetdevstartxmit CVE-2022-50408 - wifi: brcmfmac: slab-out-of-bounds read in...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::SipResponseFirstLine::parseFirstLine

Detailed Report: https://oss-fuzz.com/testcase?key=5939270128041984 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x79434f6e0ec9 Crash State:...

mruby:mruby_fuzzer: Heap-buffer-overflow in mrb_vm_exec

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4920911034908672 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x79854b1e2c70 Crash State:...

MiracleLinux 8 : glibc-2.28-225.el8.6 (AXSA:2023-6476:04)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6476:04 advisory. glibc: buffer overflow in ld.so leading to privilege escalation CVE-2023-4911 glibc: Stack read overflow in getaddrinfo in no-aaaa mode CVE-2023-452...

MiracleLinux 9 : glibc-2.34-60.el9.7 (AXSA:2023-6486:05)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6486:05 advisory. glibc: buffer overflow in ld.so leading to privilege escalation CVE-2023-4911 glibc: Stack read overflow in getaddrinfo in no-aaaa mode CVE-2023-452...

MiracleLinux 7 : httpd-2.4.6-93.0.1.el7.AXS7 (AXSA:2020-006:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-006:01 advisory. httpd: modsessioncookie does not respect expiry time CVE-2018-17199 httpd: Out of bounds write in modauthnzldap when using too small Accept-Language...

CVE-2025-12051

The CVE-2025-12051 entry describes a buffer overflow vulnerability in drivers within InsydeH2O tool packages where RTL_QUERY_REGISTRY_DIRECT is used to read a registry value. An untrusted user-mode application may manipulate the registry value to trigger the overflow. Affected software is referen...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in avi_parse_input_file

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5023398651822080 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 6 Crash Address: 0x75b2248fa6c0 Crash State:...

CVE-2023-40036

Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in CharDistributionAnalysis::HandleOneChar. The exploitability of this issue is not clear. Potentially, it may be used to leak internal memory allocation information. As ...

vlc:vlc-demux-dec-libfuzzer-mp4: Heap-buffer-overflow in DecodeFrame

Detailed Report: https://oss-fuzz.com/testcase?key=5331382730817536 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-mp4 Job Type: aflasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x7cbd28f64600 Crash State: DecodeFrame testdecoderprocess...

shaderc:glslc_fuzzer: Container-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, glslang::pool_allocato

Project: https://github.com/google/shaderc.git Detailed Report: https://oss-fuzz.com/testcase?key=5794567036403712 Project: shaderc Fuzzing Engine: libFuzzer Fuzz Target: glslcfuzzer Job Type: libfuzzerasanshaderc Platform Id: linux Crash Type: Container-overflow READ 1 Crash Address:...