ANT-2026-C0BW3XD3 · dlplibs · Heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Opus 4.6 REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-C0BW3XD3: Heap-buffer-overflow in MSPUBParser.cpp:1575 When...

dlplibs:hanmacwrdfuzzer: Heap-use-after-free in MsWks4Text::numPages

Detailed Report: https://oss-fuzz.com/testcase?key=4615652903288832 Project: dlplibs Fuzzing Engine: afl Fuzz Target: hanmacwrdfuzzer Job Type: aflasandlplibs Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x769e934e1198 Crash State: MsWks4Text::numPages...

dlplibs:macdrawfuzzer: Heap-buffer-overflow in Canvas5Structure::NIBDecoder::decode

Detailed Report: https://oss-fuzz.com/testcase?key=5106666735009792 Project: dlplibs Fuzzing Engine: honggfuzz Fuzz Target: macdrawfuzzer Job Type: honggfuzzasandlplibs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x611000000893 Crash State:...

dlplibs:key6fuzzer: Object-size in std::__1::deque<std::__1::deque<boost::variant<libetonyek::MoveTo, libetonyek::L

Detailed Report: https://oss-fuzz.com/testcase?key=4952206901116928 Project: dlplibs Fuzzing Engine: libFuzzer Fuzz Target: key6fuzzer Job Type: libfuzzerubsandlplibs Platform Id: linux Crash Type: Object-size Crash Address: Crash State: std::1::dequestd::1::dequeboost::variantlibetonyek::MoveTo,...

dlplibs:wpsfuzzer: Crash in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Detailed Report: https://oss-fuzz.com/testcase?key=4774484703838208 Project: dlplibs Fuzzing Engine: libFuzzer Fuzz Target: wpsfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x602f50c571b0 Crash State: std::1::basicstring, std::1::allocatorch...

dlplibs:wpsfuzzer: Crash in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Detailed Report: https://oss-fuzz.com/testcase?key=5351542550167552 Project: dlplibs Fuzzing Engine: honggfuzz Fuzz Target: wpsfuzzer Job Type: honggfuzzasandlplibs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x602f0ae47960 Crash State: std::1::basicstring, std::1::allocatorch...

dlplibs:wdbfuzzer: Stack-buffer-overflow in WPSEmbeddedObject::operator=

Detailed Report: https://oss-fuzz.com/testcase?key=5726414686126080 Project: dlplibs Fuzzing Engine: libFuzzer Fuzz Target: wdbfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address: 0x7ffeb240ead8 Crash State: WPSEmbeddedObject::operator=...

dlplibs:wdbfuzzer: Crash in QuattroParserInternal::State::getColor

Detailed Report: https://oss-fuzz.com/testcase?key=5689050066583552 Project: dlplibs Fuzzing Engine: afl Fuzz Target: wdbfuzzer Job Type: aflasandlplibs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000004c91fbc Crash State: QuattroParserInternal::State::getColor...

dlplibs:wdbfuzzer: Stack-buffer-overflow in WPSEmbeddedObject::operator=

Detailed Report: https://oss-fuzz.com/testcase?key=5720192547291136 Project: dlplibs Fuzzing Engine: libFuzzer Fuzz Target: wdbfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address: 0x7ffde3842118 Crash State: WPSEmbeddedObject::operator=...

dlplibs:key6fuzzer: Segv on unknown address in std::__1::deque<std::__1::deque<boost::variant<libetonyek::MoveTo, libetonyek::L

Detailed Report: https://oss-fuzz.com/testcase?key=5752428626706432 Project: dlplibs Fuzzing Engine: honggfuzz Fuzz Target: key6fuzzer Job Type: honggfuzzasandlplibs Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

dlplibs:wdbfuzzer: Crash in QuattroParserInternal::State::getColor

Detailed Report: https://oss-fuzz.com/testcase?key=5735536765698048 Project: dlplibs Fuzzing Engine: libFuzzer Fuzz Target: wdbfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000004c748bc Crash State: QuattroParserInternal::State::getColor...

dlplibs/wqfuzzer: Use-of-uninitialized-value in std::__1::enable_if<

Detailed report: https://oss-fuzz.com/testcase?key=5717618784206848 Project: dlplibs Fuzzer: libFuzzerdlplibswqfuzzer Fuzz target binary: wqfuzzer Job Type: libfuzzermsandlplibs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: std::1::enableif...

dlplibs/wqfuzzer: Stack-buffer-overflow in WPSEmbeddedObject::operator=

Detailed report: https://oss-fuzz.com/testcase?key=5119335720288256 Project: dlplibs Fuzzer: libFuzzerdlplibswqfuzzer Fuzz target binary: wqfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address: 0x7f774d6f6158 Crash State:...

dlplibs/qxpfuzzer: Bad-cast to std::__1::__shared_weak_count from invalid vptr in std::__1::shared_ptr<librevenge::RVNGInputStream>::~shared_ptr

Detailed report: https://oss-fuzz.com/testcase?key=5739393340407808 Project: dlplibs Fuzzer: libFuzzerdlplibsqxpfuzzer Fuzz target binary: qxpfuzzer Job Type: libfuzzerubsandlplibs Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000004b0cb90 Crash State: Bad-cast to std::1::sharedweakcou...

dlplibs/qxpfuzzer: Bad-cast to std::__1::__shared_weak_countstd::__1::shared_ptr<librevenge::RVNGInputStream>::~shared_ptr in libqxp::QXPParser::parse

Detailed report: https://oss-fuzz.com/testcase?key=5744289871560704 Project: dlplibs Fuzzer: libFuzzerdlplibsqxpfuzzer Fuzz target binary: qxpfuzzer Job Type: libfuzzerubsandlplibs Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000004d215f0 Crash State: Bad-cast to...

dlplibs/docfuzzer: Use-of-uninitialized-value in WPSHeader::constructHeader

Detailed report: https://oss-fuzz.com/testcase?key=5691444556201984 Project: dlplibs Fuzzer: libFuzzerdlplibsdocfuzzer Fuzz target binary: docfuzzer Job Type: libfuzzermsandlplibs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: WPSHeader::constructHeader...

dlplibs/vdxfuzzer: Use-of-uninitialized-value in xmlParseCharEncoding

Detailed report: https://oss-fuzz.com/testcase?key=5660715172495360 Project: dlplibs Fuzzer: libFuzzerdlplibsvdxfuzzer Fuzz target binary: vdxfuzzer Job Type: libfuzzermsandlplibs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: xmlParseCharEncoding...

dlplibs/cdrfuzzer: Heap-buffer-overflow in libcdr::CDRStylesCollector::collectBmp

Detailed report: https://oss-fuzz.com/testcase?key=5671084106973184 Project: dlplibs Fuzzer: libFuzzerdlplibscdrfuzzer Fuzz target binary: cdrfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60900000c5f7 Crash State:...

dlplibs/beaglewksfuzzer: Use-of-uninitialized-value in MWAWTextListener::_changeList

Detailed report: https://oss-fuzz.com/testcase?key=5964848847388672 Project: dlplibs Fuzzer: libFuzzerdlplibsbeaglewksfuzzer Fuzz target binary: beaglewksfuzzer Job Type: libfuzzermsandlplibs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

dlplibs/morefuzzer: Use-of-uninitialized-value in librevenge::doubleToString

Detailed report: https://oss-fuzz.com/testcase?key=5423406051753984 Project: dlplibs Fuzzer: libFuzzerdlplibsmorefuzzer Fuzz target binary: morefuzzer Job Type: libfuzzermsandlplibs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: librevenge::doubleToString...