pyvex:irsb_fuzzer: Heap-buffer-overflow in libpyvex.so

Detailed Report: https://oss-fuzz.com/testcase?key=5290127705571328 Project: pyvex Fuzzing Engine: libFuzzer Fuzz Target: irsbfuzzer Job Type: libfuzzerasanpyvex Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6170003f4910 Crash State: libpyvex.so libpyvex.so...

archaius-core:DynamicPropertyFuzzer: Security exception in java.base/java.util.Arrays.copyOf

Detailed Report: https://oss-fuzz.com/testcase?key=4840355240673280 Project: archaius-core Fuzzing Engine: libFuzzer Fuzz Target: DynamicPropertyFuzzer Job Type: libfuzzerasanarchaius-core Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

rdkit:smiles_string_to_mol_fuzzer: Use-of-uninitialized-value in RDKit::Chirality::cleanupStereoGroups

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4702946361147392 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: smilesstringtomolfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

SUSE-SU-2026:20710-1 Security update for python311

This update for python311 fixes the following issues: - CVE-2025-11468: preserving parens when folding comments in email headers. bsc1257029 - CVE-2026-0672: rejects control characters in http cookies. bsc1257031 - CVE-2026-0865: rejecting control characters in wsgiref.headers.Headers, which coul...

rdkit:smiles_string_to_mol_fuzzer: Bad-cast to RDKit::Atom from invalid vptr in RDKit::Canon::initCanonAtoms

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6396301163167744 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: smilesstringtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: Bad-cast Crash Address: 0x5c2e9f3266d0 Crash...

libvips:vips_fuzzer: Heap-buffer-overflow in vips_min_scan

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5917407612043264 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: vipsfuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

openjph:ojph_expand_fuzz_target: Use-of-uninitialized-value in ojph::local::tile::finalize_alloc

Project: https://github.com/aous72/OpenJPH.git Detailed Report: https://oss-fuzz.com/testcase?key=5205194525966336 Project: openjph Fuzzing Engine: libFuzzer Fuzz Target: ojphexpandfuzztarget Job Type: libfuzzermsanopenjph Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

vlc:vlc-demux-dec-libfuzzer-mp4: Heap-buffer-overflow in PacketizeStreamBlock

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=5048071871594496 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-mp4 Job Type: aflasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7d61981e9540...

PT-2026-24465

Name of the Vulnerable Software and Affected Versions quinn versions prior to 0.11.14 Description A remote, unauthenticated attacker can trigger a denial of service in applications using the quinn-proto QUIC transport protocol implementation. The issue occurs when a crafted QUIC Initial packet...

PT-2026-24168

Name of the Vulnerable Software and Affected Versions Glances versions prior to 4.5.1 Description Glances, a cross-platform system monitoring tool, contains a flaw in its TimescaleDB export module. The module builds SQL queries by concatenating strings with unverified system monitoring data. The...

PT-2026-24112

Name of the Vulnerable Software and Affected Versions Camaleon CMS versions 2.4.5.0 through 2.9.0 Description Camaleon CMS versions 2.4.5.0 through 2.9.0, prior to commit f54a77e, have a path traversal issue in the AWS S3 uploader implementation. Authenticated users can read arbitrary files from...

PT-2026-26499

OpenClaw's system.run allowlist analysis did not honor POSIX shell comment semantics when deriving allow-always persistence entries. A caller in security=allowlist mode who received an allow-always decision could submit a shell command whose tail was commented out at runtime, for example by using...

Admidio: Event participation IDOR - non-leaders can register other users for events via user_uuid parameter

Register unwilling users for events potential harassment/spam - Cancel other users' event participation - Manipulate event participant counts and comments - If events have participation limits, fill slots with unwanted registrations...

PT-2026-24181

Name of the Vulnerable Software and Affected Versions affected versions not specified Description Attackers are utilizing a technique involving malformed ZIP metadata, referred to as 'shadow archives', to circumvent antivirus AV and Endpoint Detection and Response EDR systems. This method allows...

SUSE: Security Advisory (SUSE-SU-2026:20629-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2026-24114

Name of the Vulnerable Software and Affected Versions Ghostty versions prior to 1.3.0 Description Ghostty allows control characters, such as 0x03 Ctrl+C, within pasted or dropped text. These characters can be leveraged to execute arbitrary commands in certain shell environments. Successful...

llvm:clangd-fuzzer: Global-buffer-overflow in _GLOBAL__sub_I_DependencyScanningTool.cpp

Detailed Report: https://oss-fuzz.com/testcase?key=5886579209207808 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clangd-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Global-buffer-overflow READ Crash Address: 0x5759a2773a02 Crash State:...

rdkit:mol_data_stream_to_mol_fuzzer: Use-of-uninitialized-value in RDKit::SGroupParsing::ParseV3000SGroupsBlock

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5517848155848704 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

pyvex:irsb_fuzzer: Heap-buffer-overflow in libpyvex.so

Detailed Report: https://oss-fuzz.com/testcase?key=4798045517840384 Project: pyvex Fuzzing Engine: libFuzzer Fuzz Target: irsbfuzzer Job Type: libfuzzerasanpyvex Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x6160006566c9 Crash State: libpyvex.so disInstrARM bbtoIR...

libvips:vips_fuzzer: Heap-buffer-overflow in vips_sign_buffer

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=6674538674061312 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: vipsfuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...