PT-2026-29903

Name of the Vulnerable Software and Affected Versions Azure SRE Agent affected versions not specified Description Improper authentication in the Azure SRE Agent allows an unauthorized attacker to disclose information over a network. A multi-tenant design oversight occurred where authentication...

sleuthkit:fls_ntfs_fuzzer: Heap-buffer-overflow in ntfs_proc_attrseq

Detailed Report: https://oss-fuzz.com/testcase?key=5542460911845376 Project: sleuthkit Fuzzing Engine: honggfuzz Fuzz Target: flsntfsfuzzer Job Type: honggfuzzasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7d1329be1481 Crash State: ntfsprocattrseq...

duckdb:parse_fuzz_test: Bad-cast to duckdb::ProfilingNode from invalid vptr in duckdb::QueryProfiler::Flush

Project: https://github.com/duckdb/duckdb.git Detailed Report: https://oss-fuzz.com/testcase?key=5097336987779072 Project: duckdb Fuzzing Engine: libFuzzer Fuzz Target: parsefuzztest Job Type: libfuzzerubsanduckdb Platform Id: linux Crash Type: Bad-cast Crash Address: 0x58ecea529ba0 Crash State:...

harfbuzz:hb-raster-fuzzer: Heap-buffer-overflow in hb_raster_paint_push_clip_rectangle

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=4872362293264384 Project: harfbuzz Fuzzing Engine: afl Fuzz Target: hb-raster-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

yyjson:yyjson_fuzzer: Use-of-uninitialized-value in read_root_single

Project: https://github.com/ibireme/yyjson.git Detailed Report: https://oss-fuzz.com/testcase?key=4836509529473024 Project: yyjson Fuzzing Engine: libFuzzer Fuzz Target: yyjsonfuzzer Job Type: libfuzzermsanyyjson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State...

lucene:QueryParserFuzzer: Security exception in org.apache.lucene.util.ArrayUtil.copyOfSubArray

Detailed Report: https://oss-fuzz.com/testcase?key=4743143588429824 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: QueryParserFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.apache.lucene.util.ArrayUtil.copyOfSubArray...

@01.software/sdk (>=0.0.1-251022.145258, <=0.2.3), @adenta/cms (>=0.0.6, <=1.1.1-0) +71 more potentially affected by CVE-2026-34748 via @payloadcms/ui (>=3.0.0, <=3.77.0-internal.9837b1e)

@payloadcms/ui NPM version =3.0.0, =0.0.1-251022.145258, =0.0.6, =3.70.0, =0.0.3, =3.39.2, =1.0.1-beta.3, =0.1.2, =0.0.1, =1.0.0, =0.1.0, =0.1.2, =1.0.0, =1.0.0, =1.0.29 and more Source cves: CVE-2026-34748 Source advisory: SNYK:JS-PAYLOADCMSUI-15873862...

OPENSUSE-FU-2026:20453-1 Feature update for himmelblau

This update for himmelblau fixes the following issues: Update to himmelblau 2.3.8 jscPED-14511: Security issues: - CVE-2025-54882: world readable cloud TGT token bsc1247735. - CVE-2025-58160: tracing-subscriber: Tracing log pollution bsc1249013. - CVE-2026-25727: time: parsing of user-provided...

nestegg:fuzz: Use-of-uninitialized-value in ne_read_block

Project: https://github.com/kinetiknz/nestegg.git Detailed Report: https://oss-fuzz.com/testcase?key=6705140546732032 Project: nestegg Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzermsannestegg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

ghostscript:gs_xps_fuzzer: Segv on unknown address in chunk_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=6683180378947584 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsxpsfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: chunkfreeobject sblockreadclose sclose...

SUSE-FU-2026:20990-1 Feature update for himmelblau

This update for himmelblau fixes the following issues: Update to himmelblau 2.3.8 jscPED-14511: Security issues: - CVE-2025-54882: world readable cloud TGT token bsc1247735. - CVE-2025-58160: tracing-subscriber: Tracing log pollution bsc1249013. - CVE-2026-25727: time: parsing of user-provided...

gdk-pixbuf:pixbuf_file_fuzzer: Heap-buffer-overflow in null_convert

Detailed Report: https://oss-fuzz.com/testcase?key=6313884716957696 Project: gdk-pixbuf Fuzzing Engine: afl Fuzz Target: pixbuffilefuzzer Job Type: aflasangdk-pixbuf Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x7ccbafae6266 Crash State: nullconvert sepupsample...

mvel:MvelFuzzer: Security exception in jaz.Zer.reportFinding

Detailed Report: https://oss-fuzz.com/testcase?key=5757959866220544 Project: mvel Fuzzing Engine: libFuzzer Fuzz Target: MvelFuzzer Job Type: libfuzzerasanmvel Platform Id: linux Crash Type: Security exception Crash Address: Crash State: jaz.Zer.reportFinding jaz.Zer.el...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::LWOImporter::LoadLWO2File

Detailed Report: https://oss-fuzz.com/testcase?key=5724993966374912 Project: assimp Fuzzing Engine: honggfuzz Fuzz Target: assimpfuzzer Job Type: honggfuzzasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x746e7aae0b94 Crash State:...

tmux:format-fuzzer: Heap-buffer-overflow in format_expand1

Project: https://github.com/tmux/tmux.git Detailed Report: https://oss-fuzz.com/testcase?key=5348870392709120 Project: tmux Fuzzing Engine: libFuzzer Fuzz Target: format-fuzzer Job Type: libfuzzerasantmux Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7ada289e1712 Cra...

gstreamer:gst-tag: Heap-buffer-overflow in ___interceptor_strncpy

Project: https://anongit.freedesktop.org/git/gstreamer/gstreamer https://gitlab.freedesktop.org/gstreamer/gstreamer.git Detailed Report: https://oss-fuzz.com/testcase?key=5245521680990208 Project: gstreamer Fuzzing Engine: libFuzzer Fuzz Target: gst-tag Job Type: libfuzzerasangstreamer Platform I...

glib:fuzz_markup_escape_text: Heap-buffer-overflow in g_utf8_get_char

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed Report: https://oss-fuzz.com/testcase?key=5150018775613440 Project: glib Fuzzing Engine: afl Fuzz Target: fuzzmarkupescapetext Job Type: aflasanglib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7bd2ef4e00b1...

radare2:ia_fuzz: Heap-buffer-overflow in load_symbols

Project: https://github.com/radare/radare2.git https://github.com/radareorg/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=4952757034614784 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type:...

PT-2026-29495

Summary Ash.Type.Module.cast input/2 unconditionally creates a new Erlang atom via Module.concatvalue for any user-supplied binary string that starts with "Elixir.", before verifying whether the referenced module exists. Because Erlang atoms are never garbage-collected and the BEAM atom table has...

PT-2026-29498

Name of the Vulnerable Software and Affected Versions Tina versions prior to 2.2.2 Description A path-traversal issue exists in Tina, a headless content management system, due to insufficient validation of file paths in the dev media routes. The implementation validates only the path string and...