PT-2025-54494

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=391709145 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOfRange org.apache.poi.util.IOUtils.safelyClone org.apache.poi.ddf.EscherBlipRecord.setPictureData...

PT-2025-14338

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null dereference or oops exception will occur when the qla1280.c driver is compiled with DEBUG QLA1280 enabled and ql debug level is greater than 2. The issue arises from the intention...

PT-2025-14295

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, related to the slimbus messaging system. In cases where an interrupt is delayed, the slim do transfer function returns a timeout...

UBUNTU-CVE-2025-22153

RestrictedPython is a tool that helps to define a subset of the Python language which allows to provide a program input into a trusted environment. Via a type confusion bug in versions of the CPython interpreter starting in 3.11 and prior to 3.13.2 when using try/except, RestrictedPython starting...

apache-poi:POIHPBFFuzzer: Security exception in java.base/java.util.Arrays.copyOfRange

Detailed Report: https://oss-fuzz.com/testcase?key=4918886059278336 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHPBFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.util.Arrays.copyOfRange...

CVE-2024-37284

Improper handling of alternate encoding occurs when Elastic Defend on Windows systems attempts to scan a file or process encoded as a multibyte character. This leads to an uncaught exception causing Elastic Defend to crash which in turn will prevent it from quarantining the file and/or killing th...

presto:SqlParserFuzzer: Security exception in java.base/java.util.Arrays.copyOf

Detailed Report: https://oss-fuzz.com/testcase?key=5794974884495360 Project: presto Fuzzing Engine: libFuzzer Fuzz Target: SqlParserFuzzer Job Type: libfuzzerasanpresto Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.util.Arrays.copyOf...

Elastic Defend security vulnerabilities

Elastic Defend is an application from the Dutch company Elastic. It provides prevention, detection and response capabilities, as well as deep visibility into EPP, EDR, SIEM and security analytics. A security vulnerability exists in Elastic Defend 8.13.3 and prior versions, which stems from an...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from the die function in the riscv module attempting to sleep during an exception handler. This could lead t...

apache-poi:POIHDGFFuzzer: Security exception in org.apache.poi.hdgf.chunks.Chunk.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=6139164889776128 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHDGFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.apache.poi.hdgf.chunks.Chunk...

OSV-2025-45 Security exception in POIHDGFFuzzer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=390461322 Crash type: Security exception Crash state: POIHDGFFuzzer...

PT-2025-5659 · Git +1 · Apache Poi

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A security exception crash was reported. The crash type is a security exception, and the crash state includes POIHDGFFuzzer. No further details are provided about the issue, including t...

gix-worktree-state nonexclusive checkout sets executable files world-writable

Summary gix-worktree-state specifies 0777 permissions when checking out executable files, intending that the umask will restrict them appropriately. But one of the strategies it uses to set permissions is not subject to the umask. This causes files in a repository to be world-writable in some...

hsqldb:SqlStatementFuzzer: Security exception in java.base/java.lang.String.encodeWithEncoder

Detailed Report: https://oss-fuzz.com/testcase?key=6539901025189888 Project: hsqldb Fuzzing Engine: libFuzzer Fuzz Target: SqlStatementFuzzer Job Type: libfuzzerasanhsqldb Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.lang.String.encodeWithEncoder...

apache-poi:POIHDGFFuzzer: Security exception in POIHDGFFuzzer

Detailed Report: https://oss-fuzz.com/testcase?key=6194754315943936 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHDGFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State: POIHDGFFuzzer Sanitizer: address ASAN...

mvel:MvelFuzzer: Security exception in java.base/java.lang.reflect.Array.multiNewArray

Detailed Report: https://oss-fuzz.com/testcase?key=6411040016891904 Project: mvel Fuzzing Engine: libFuzzer Fuzz Target: MvelFuzzer Job Type: libfuzzerasanmvel Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.lang.reflect.Array.multiNewArray...

hamcrest:HamcrestFuzzer: Security exception in HamcrestFuzzer

Detailed Report: https://oss-fuzz.com/testcase?key=5120979916881920 Project: hamcrest Fuzzing Engine: libFuzzer Fuzz Target: HamcrestFuzzer Job Type: libfuzzerasanhamcrest Platform Id: linux Crash Type: Security exception Crash Address: Crash State: HamcrestFuzzer Sanitizer: address ASAN...

cron-utils:CronParserFuzzer: Security exception in java.base/java.util.Arrays.copyOf

Detailed Report: https://oss-fuzz.com/testcase?key=5103060199735296 Project: cron-utils Fuzzing Engine: libFuzzer Fuzz Target: CronParserFuzzer Job Type: libfuzzerasancron-utils Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.util.Arrays.copyOf...

CVE-2024-57857 RDMA/siw: Remove direct link to net_device

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Remove direct link to netdevice Do not manage a per device direct link to netdevice. Rely on associated ibdevices netdevice management, not doubling the effort locally. A badly managed local link to netdevice was causin...

PT-2025-4349

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.126 Linux kernel versions prior to 6.6.73 Linux kernel versions prior to 6.12.10 Description The issue is related to the imx8mp blk ctrl remove function in the Linux kernel, which can cause an out-of-bounds...