libigl:igl_fuzzer: Crash in std::__1::istreambuf_iterator<char, std::__1::char_traits<char>> std::__1::num_g

Project: https://github.com/libigl/libigl.git Detailed Report: https://oss-fuzz.com/testcase?key=4990965831237632 Project: libigl Fuzzing Engine: libFuzzer Fuzz Target: iglfuzzer Job Type: libfuzzerasanlibigl Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x74ad5363f818 Crash State:...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement

Detailed Report: https://oss-fuzz.com/testcase?key=5456829659545600 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerubsancheckstyle Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

libvips:vips_fuzzer: Heap-buffer-overflow in vips_stdif_generate

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5109269497446400 Project: libvips Fuzzing Engine: afl Fuzz Target: vipsfuzzer Job Type: aflasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x750f7bcff161 Crash...

freerdp:TestFuzzNTLMMessage: Heap-buffer-overflow in winpr_Data_Get_UINT32

Project: https://github.com/FreeRDP/FreeRDP.git Detailed Report: https://oss-fuzz.com/testcase?key=4961453902987264 Project: freerdp Fuzzing Engine: libFuzzer Fuzz Target: TestFuzzNTLMMessage Job Type: libfuzzerasanfreerdp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

tdengine:sql-fuzzer: Global-buffer-overflow in tGetToken

Detailed Report: https://oss-fuzz.com/testcase?key=4807015468957696 Project: tdengine Fuzzing Engine: afl Fuzz Target: sql-fuzzer Job Type: aflasantdengine Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x563c8298c4e8 Crash State: tGetToken parse qParseSqlSyntax...

Amazon EFS CSI Driver has mount option injection via unsanitized volumeHandle and mounttargetip fields

Summary The Amazon EFS CSI Driver is a Container Storage Interface driver that allows Kubernetes clusters to use Amazon Elastic File System. An issue exists where, under certain circumstances, unsanitized values in the volumeHandle and mounttargetip fields are passed directly to the mount command...

GHSA-MPH4-Q2VM-W2PW Amazon EFS CSI Driver has mount option injection via unsanitized volumeHandle and mounttargetip fields

Summary The Amazon EFS CSI Driver is a Container Storage Interface driver that allows Kubernetes clusters to use Amazon Elastic File System. An issue exists where, under certain circumstances, unsanitized values in the volumeHandle and mounttargetip fields are passed directly to the mount command...

Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability

ZDI-CAN-29412: FlowiseAI Flowise AirtableAgent Code Injection Remote Code Execution Vulnerability Trend Micro's Zero Day Initiative has identified a vulnerability affecting the following products: Flowise - Flowise -- VULNERABILITY DETAILS ------------------------ Version tested: 3.0.13 Installer...

GHSA-V38X-C887-992F Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability

ZDI-CAN-29412: FlowiseAI Flowise AirtableAgent Code Injection Remote Code Execution Vulnerability Trend Micro's Zero Day Initiative has identified a vulnerability affecting the following products: Flowise - Flowise -- VULNERABILITY DETAILS ------------------------ Version tested: 3.0.13 Installer...

PT-2026-34723

Name of the Vulnerable Software and Affected Versions pretalx versions prior to 2026.1.0 Description The organiser search in the backend renders submission titles, speaker display names, and user names or emails into the result dropdown using innerHTML string interpolation. This allows a user who...

PT-2026-33598

Name of the Vulnerable Software and Affected Versions OpenTelemetry.Exporter.Jaeger affected versions not specified Description This issue allows sustained memory pressure when the internal pooled-list sizing grows based on a large observed span or tag set and that enlarged size is reused for...

harfbuzz:hb-gpu-fuzzer: Segv on unknown address in hb_font_get_scale

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=6573156621156352 Project: harfbuzz Fuzzing Engine: afl Fuzz Target: hb-gpu-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

kimageformats:kimgio_jxl_fuzzer: Use-of-uninitialized-value in jxl::N_SCALAR::FromLinearStage<jxl::N_SCALAR::OpRgb>::ProcessRow

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=6280057986547712 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgiojxlfuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst

Detailed Report: https://oss-fuzz.com/testcase?key=6226402788835328 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

freerdp:TestFuzzNTLMMessage: Heap-buffer-overflow in ntlm_read_ChallengeMessage

Project: https://github.com/FreeRDP/FreeRDP.git Detailed Report: https://oss-fuzz.com/testcase?key=6052045370228736 Project: freerdp Fuzzing Engine: honggfuzz Fuzz Target: TestFuzzNTLMMessage Job Type: honggfuzzasanfreerdp Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

Metasploit Wrap-Up 04/17/2026

Happy Friday - Seven New Metasploit Modules We’re happy to announce that Metasploit Framework had a big week, landing seven new modules alongside various bug fixes and enhancements. This week’s highlights include RCE modules targeting AVideo, openDCIM, Selenium Grid/Selenoid, and ChurchCRM. On th...

libcoap:oscore_conf_parse_fuzzer: Heap-double-free in coap_new_oscore_conf

Project: https://github.com/obgm/libcoap.git Detailed Report: https://oss-fuzz.com/testcase?key=5304791441145856 Project: libcoap Fuzzing Engine: libFuzzer Fuzz Target: oscoreconfparsefuzzer Job Type: libfuzzerasanlibcoap Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x79c75ff13e...

pcapplusplus:FuzzTarget: Crash in pcpp::RawPacket::clear

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5048089567363072 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerubsanpcapplusplus Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

matio:matio_fuzzer: Heap-buffer-overflow in H5A__read

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=4961073198333952 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerasanmatio Platform Id: linux Crash Type: Heap-buffer-overflow REA...

imagemagick:encoder_mvg_fuzzer: Use-of-uninitialized-value in DrawPolygonPrimitive

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4668906500587520 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...