9190 matches found
binutils:fuzz_objdump_safe: Heap-buffer-overflow in byte_get_little_endian
Detailed Report: https://oss-fuzz.com/testcase?key=6367976782364672 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzobjdumpsafe Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7afd389e048c Crash State: bytegetlittleendian...
gdal:gdal_translate_fuzzer: Heap-buffer-overflow in gdal::LERCMaskBand::IReadBlock
Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=4764528092184576 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdaltranslatefuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
OSV-2026-923 Heap-use-after-free in gf_node_unregister
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=523799837 Crash type: Heap-use-after-free READ 8 Crash state: gfnodeunregister BMParseCommand gfbifsflushcommandlist...
gpac:fuzz_scene: Heap-use-after-free in lsr_restore_base
Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5938992393814016 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzscene Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x756d84ee0260 Crash...
libarchive:libarchive_fuzzer: Heap-buffer-overflow in aes_ctr_update
Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=4648224800178176 Project: libarchive Fuzzing Engine: afl Fuzz Target: libarchivefuzzer Job Type: aflasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
libssh:ssh_client_config_fuzzer: Heap-buffer-overflow in ssh_config_parse_line_internal
Project: https://git.libssh.org/projects/libssh.git Detailed Report: https://oss-fuzz.com/testcase?key=6445180799221760 Project: libssh Fuzzing Engine: libFuzzer Fuzz Target: sshclientconfigfuzzer Job Type: libfuzzerasanlibssh Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...
suricata:fuzz_sigpcap_aware: Heap-buffer-overflow in PrefilterSetupRuleGroup
Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=6026694084067328 Project: suricata Fuzzing Engine: honggfuzz Fuzz Target: fuzzsigpcapaware Job Type: honggfuzzasansuricata Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...
OSV-2026-910 Heap-use-after-free in gf_node_unregister
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=523017646 Crash type: Heap-use-after-free READ 8 Crash state: gfnodeunregister BDDecSceneReplace BMSceneReplace...
OSV-2026-907 Heap-use-after-free in gf_sg_route_del
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=523017644 Crash type: Heap-use-after-free READ 8 Crash state: gfsgroutedel gfsgreset gfsgdel...
PT-2026-51469
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=523017646 Crash type: Heap-use-after-free READ 8 Crash state: gf node unregister BD DecSceneReplace BM SceneReplace...
ogre:ogre_deep_fuzz: Heap-buffer-overflow in Ogre::VertexData::convertPackedColour
Project: https://github.com/OGRECave/ogre.git Detailed Report: https://oss-fuzz.com/testcase?key=5877332838252544 Project: ogre Fuzzing Engine: libFuzzer Fuzz Target: ogredeepfuzz Job Type: libfuzzerasanogre Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7a56246e9780...
njs:njs_process_script_fuzzer: Use-of-uninitialized-value in njs_utf8_decode
Project: http://hg.nginx.org/njs https://github.com/nginx/njs.git Detailed Report: https://oss-fuzz.com/testcase?key=5302473343172608 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...
Investigating Metamorphic Fuzz Oracle Enhancement Via Large Language Models
Fuzz drivers are essential components of greybox fuzzing, as they encapsulate target interfaces, define test spaces, and largely determine fuzzing effectiveness. Existing fuzz drivers typically rely on crash-based oracles for security testing, overlooking library functionality and limiting bug...
PT-2026-51267
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=522061221 Crash type: UNKNOWN Crash state: avi parse input file AVI open input file avidmx process...
jsoncons:fuzz_cbor_encoder: Heap-use-after-free in jsoncons::cbor::cbor_mdarray_row_major_iterator<jsoncons::stream_source<unsigned
Project: https://github.com/danielaparker/jsoncons.git Detailed Report: https://oss-fuzz.com/testcase?key=4834232383111168 Project: jsoncons Fuzzing Engine: libFuzzer Fuzz Target: fuzzcborencoder Job Type: libfuzzerasanjsoncons Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...
gpac:fuzz_probe_analyze: Crash in avi_parse_input_file
Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5355164335931392 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: UNKNOWN Crash Address: 0xfffffff400000000 Crash State: aviparseinputfi...
OSV-2026-896 Security exception in org.apache.lucene.util.ArrayUtil.copyOfSubArray
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=521163865 Crash type: Security exception Crash state: org.apache.lucene.util.ArrayUtil.copyOfSubArray org.apache.lucene.util.BytesRef.deepCopyOf org.apache.lucene.index.Term...
PT-2026-51126
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=521437880 Crash type: Heap-buffer-overflow WRITE 8 Crash state: ihevcd fmt conv ihevcd process thread start thread...
OSV-2026-892 Heap-buffer-overflow in decode_R13_RNUMBER
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=521044421 Crash type: Heap-buffer-overflow READ 8 Crash state: decodeR13RNUMBER dwgdecode llvmfuzz.c...