libreoffice:ww8fuzzer: Heap-use-after-free in SwNode::FindTableNode

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=6387926343417856 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: ww8fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash...

libssh2:ssh2_client_fuzzer: Null-dereference READ in kex_diffie_hellman_sha

Project: https://github.com/cmeister2/libssh2.git https://github.com/libssh2/libssh2.git Detailed Report: https://oss-fuzz.com/testcase?key=4528762809810944 Project: libssh2 Fuzzing Engine: afl Fuzz Target: ssh2clientfuzzer Job Type: aflasanlibssh2 Platform Id: linux Crash Type: Null-dereference...

jsoncons:fuzz_cbor_parser_max: Heap-buffer-overflow in jsoncons::cbor::basic_cbor_parser<jsoncons::stream_source<unsigned char, std::__

Project: https://github.com/danielaparker/jsoncons.git Detailed Report: https://oss-fuzz.com/testcase?key=5246852585553920 Project: jsoncons Fuzzing Engine: honggfuzz Fuzz Target: fuzzcborparsermax Job Type: honggfuzzasanjsoncons Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

jsoncons:fuzz_msgpack: Heap-buffer-overflow in jsoncons::heap::heap_string_factory<unsigned char, unsigned long, std::__1::allo

Project: https://github.com/danielaparker/jsoncons.git Detailed Report: https://oss-fuzz.com/testcase?key=5217334684614656 Project: jsoncons Fuzzing Engine: honggfuzz Fuzz Target: fuzzmsgpack Job Type: honggfuzzasanjsoncons Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

jsoncons:fuzz_msgpack: Heap-buffer-overflow in std::__1::enable_if<std::is_same<std::__1::iterator_traits<unsigned char const*>

Project: https://github.com/danielaparker/jsoncons.git Detailed Report: https://oss-fuzz.com/testcase?key=5065588456882176 Project: jsoncons Fuzzing Engine: libFuzzer Fuzz Target: fuzzmsgpack Job Type: libfuzzerasanjsoncons Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

lucene:QueryParserFuzzer: Security exception in org.apache.lucene.util.ArrayUtil.copyOfSubArray

Detailed Report: https://oss-fuzz.com/testcase?key=4853418557243392 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: QueryParserFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.apache.lucene.util.ArrayUtil.copyOfSubArray...

ghostscript:gs_xps_fuzzer: Stack-buffer-overflow in do_impl_process

Detailed Report: https://oss-fuzz.com/testcase?key=6370797451804672 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsxpsfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 8 Crash Address: 0x7aa78b3dbdb0 Crash State: doimplprocess...

libreoffice:sftfuzzer: Heap-buffer-overflow in vcl::ConvertCFFfontToType1

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5582294472261632 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: sftfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

llvm:llvm-opt-fuzzer--x86_64-dse: New-delete-type-mismatch in std::__1::vector<std::__1::unique_ptr<llvm::detail::PassConcept<llvm::Function,

Detailed Report: https://oss-fuzz.com/testcase?key=5365654174367744 Project: llvm Fuzzing Engine: honggfuzz Fuzz Target: llvm-opt-fuzzer--x8664-dse Job Type: honggfuzzasanllvm Platform Id: linux Crash Type: New-delete-type-mismatch Crash Address: 0x7c7ff70f0c40 Crash State:...

PT-2026-59953

Impact The TensorKey hash function used total estimated AllocatedBytes, which a is an estimate per tensor, and b is a very poor hash function for constants e.g. int32 t. It also tried to access individual tensor bytes through tensor.data of size AllocatedBytes. This led to ASAN failures because t...

PT-2026-59817

Impact The TensorKey hash function used total estimated AllocatedBytes, which a is an estimate per tensor, and b is a very poor hash function for constants e.g. int32 t. It also tried to access individual tensor bytes through tensor.data of size AllocatedBytes. This led to ASAN failures because t...

threetenbp:ThreetenbpFuzzer: Security exception in org.threeten.bp.format.DateTimeFormatterBuilder$CompositePrinterParser.parse

Detailed Report: https://oss-fuzz.com/testcase?key=5780183949574144 Project: threetenbp Fuzzing Engine: libFuzzer Fuzz Target: ThreetenbpFuzzer Job Type: libfuzzerasanthreetenbp Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

ntopng:fuzz_dissect_packet: Heap-buffer-overflow in NetworkInterface::dissectPacket

Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=4670874561871872 Project: ntopng Fuzzing Engine: afl Fuzz Target: fuzzdissectpacket Job Type: aflasanntopng Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x79492060ceec Crash...

Heap buffer overflow due to incorrect hash function in TensorFlow

ImpactThe TensorKey hash function used total estimated AllocatedBytes, which a is an estimate per tensor, and b is a very poor hash function for constants e.g. int32t. It also tried to access individual tensor bytes through tensor.data of size AllocatedBytes. This led to ASAN failures because the...

mruby:mruby_proto_fuzzer: Heap-buffer-overflow in find_symbol

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6319235631218688 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyprotofuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

tarantool:misc_sysprof_test: Segv on unknown address in stream_lfunc

Project: https://github.com/tarantool/tarantool.git Detailed Report: https://oss-fuzz.com/testcase?key=5150541643317248 Project: tarantool Fuzzing Engine: libFuzzer Fuzz Target: miscsysproftest Job Type: libfuzzerasantarantool Platform Id: linux Crash Type: Segv on unknown address Crash Address:...

open62541:fuzz_mdns_xht: Global-buffer-overflow in txt2sd

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5900753060036608 Project: open62541 Fuzzing Engine: afl Fuzz Target: fuzzmdnsxht Job Type: aflasanopen62541 Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

flyway:LocationFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Project: https://github.com/flyway/flyway.git Detailed Report: https://oss-fuzz.com/testcase?key=6741324783747072 Project: flyway Fuzzing Engine: libFuzzer Fuzz Target: LocationFuzzer Job Type: libfuzzerasanflyway Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

libiec61850:fuzz_mms_server_decode_mms_pdu: Heap-double-free in IsoClientConnection_handleConnection

Detailed Report: https://oss-fuzz.com/testcase?key=5952442823671808 Project: libiec61850 Fuzzing Engine: libFuzzer Fuzz Target: fuzzmmsserverdecodemmspdu Job Type: libfuzzerasanlibiec61850 Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x78a4a25e58f0 Crash State:...

json-flattener:AdvancedFuzzer: Security exception in com.github.wnameless.json.base.JsonValueUtils.toMap

Project: https://github.com/wnameless/json-flattener.git Detailed Report: https://oss-fuzz.com/testcase?key=4619821543915520 Project: json-flattener Fuzzing Engine: libFuzzer Fuzz Target: AdvancedFuzzer Job Type: libfuzzerasanjson-flattener Platform Id: linux Crash Type: Security exception Crash...