ruzzy

Ruzzy A coverage-guided fuzzer for pure Ruby code and Ruby C extensions. Ruzzy is heavily inspired by Google's Atheris, a Python fuzzer. Ruzzy uses libFuzzer or LibAFL for its coverage instrumentation and fuzzing engine. Ruzzy also supports AddressSanitizer and UndefinedBehaviorSanitizer when...

CVE-2025-6554

CVE-2025-6554 Reproducing the Vulnerability for macOS: brew intsall ninja git clone https://chromium.googlesource.com/chromium/tools/depottools.git export PATH=/path/to/depottools:$PATH fetch v8 cd v8 git checkout 13.8.500258 gclient sync -D sh v8asan.sh autoninja -C out/arm64.asan d8...

bunch-of-fuzzers-developed-using-libfuzzer-and-asan

bunch-of-fuzzers-developed-using-libfuzzer-and-asan...

libtheora-CVE-2024-56431-PoC

Compile application source code CFLAGS="-fsanitize=address -fsanitize=undefined -g -O1" CXXFLAGS="-fsanitize=address -fsanitize=undefined -g -O1" LDFLAGS="-fsanitize=address" ./configure make Compile PoC source code g++ fuzzer.cpp -o poc -I include/ lib/.libs/libtheora.a -fsanitize=address...

CVE-2023-4863

CVE-2023-4863 checkout webp git clone https://chromium.googlesource.com/webm/libwebp/ webptest cd webptest/ checkout vulnerable version git checkout 7ba44f80f3b94fc0138db159afea770ef06532a0 enable AddressSanitizer sed -i 's/^EXTRAFLAGS=./& -fsanitize=address/' makefile.unix build webp make -f...

grounded-vuln-confirmation

Grounded Vulnerability Confirmation A vulnerability is only...

wasm3:fuzzer: Crash in op_i64_Load_u16_r

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=5408397055557632 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerasanwasm3 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x76b4f1aa100c Crash State:...

libyal:libvsgpt_partition_fuzzer: Heap-buffer-overflow in libvsgpt_partition_entry_read_data

Detailed Report: https://oss-fuzz.com/testcase?key=6082663170244608 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libvsgptpartitionfuzzer Job Type: libfuzzerasani386libyal Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address: 0xf4e00651 Crash State:...

Linux Distros Unpatched Vulnerability : CVE-2026-30754

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nalsend function in libavformat/rtpench264hevc.c, a negative siz...

llvm:llvm-special-case-list-fuzzer: Crash in p_ere

Detailed Report: https://oss-fuzz.com/testcase?key=6388532688781312 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-special-case-list-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7b6587ce1ff0 Crash State: pere pere pere Sanitizer: addre...

libaom:av1_enc_fuzzer: Heap-buffer-overflow in av1_calc_mb_wiener_var_row

Detailed Report: https://oss-fuzz.com/testcase?key=5683371750260736 Project: libaom Fuzzing Engine: libFuzzer Fuzz Target: av1encfuzzer Job Type: libfuzzerasanlibaom Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x7e239e8618ea Crash State: av1calcmbwienervarrow...

CVE-2026-30754

FFmpeg versions prior to 8.1 are susceptible to a memory corruption vulnerability within the RTP encoding process. The issue resides in the nal_send function of libavformat/rtpenc_h264_hevc.c, where a crafted input file can cause a negative size parameter (size=-3) to be passed to memcpy during H...

lucene:QueryParserFuzzer: Security exception in org.apache.lucene.util.ArrayUtil.copyOfSubArray

Detailed Report: https://oss-fuzz.com/testcase?key=6593902333984768 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: QueryParserFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.apache.lucene.util.ArrayUtil.copyOfSubArray...

gpac:fuzz_probe_analyze: Global-buffer-overflow in gf_ac4_substream_group_info

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6063460539236352 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x5a4f0433c67c Crash Stat...

dr_libs:dr_mp3_fuzzer: Heap-buffer-overflow in drmp3_init_internal

Project: https://github.com/mackron/drlibs.git Detailed Report: https://oss-fuzz.com/testcase?key=5395474153275392 Project: drlibs Fuzzing Engine: libFuzzer Fuzz Target: drmp3fuzzer Job Type: libfuzzerasandrlibs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

vlc:vlc-demux-dec-libfuzzer-aac: Global-buffer-overflow in DecodeBlock

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=6155966759632896 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-aac Job Type: aflasanvlc Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x5b19c24c2c2...

wasmtime:wast_tests: Stack-use-after-scope in wast_tests

Project: https://github.com/bytecodealliance/wasmtime.git Detailed Report: https://oss-fuzz.com/testcase?key=6483688326758400 Project: wasmtime Fuzzing Engine: libFuzzer Fuzz Target: wasttests Job Type: libfuzzerasanwasmtime Platform Id: linux Crash Type: Stack-use-after-scope WRITE 7 Crash...

cairo:font_fuzzer: Heap-buffer-overflow in cairo_ft_apply_variations

Detailed Report: https://oss-fuzz.com/testcase?key=4947926569517056 Project: cairo Fuzzing Engine: honggfuzz Fuzz Target: fontfuzzer Job Type: honggfuzzasancairo Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x7d0ff71d18c8 Crash State: cairoftapplyvariations...

mapserver:owsfuzzer: Stack-buffer-overflow in msLayoutTextSymbol

Project: https://github.com/MapServer/MapServer.git Detailed Report: https://oss-fuzz.com/testcase?key=6243451692449792 Project: mapserver Fuzzing Engine: honggfuzz Fuzz Target: owsfuzzer Job Type: honggfuzzasanmapserver Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address:...

wasmtime:wast_tests: Stack-buffer-overflow in <wasmtime::runtime::store::StoreOpaque>::allocate_continuation

Project: https://github.com/bytecodealliance/wasmtime.git Detailed Report: https://oss-fuzz.com/testcase?key=6455086528921600 Project: wasmtime Fuzzing Engine: libFuzzer Fuzz Target: wasttests Job Type: libfuzzerasanwasmtime Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address...