openbabel:fuzz_convert: Stack-buffer-overflow in OpenBabel::MCDLFormat::getMCDL

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=4918021742460928 Project: openbabel Fuzzing Engine: afl Fuzz Target: fuzzconvert Job Type: aflasanopenbabel Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address:...

OSV-2026-787 Heap-buffer-overflow in N_BELE_RTP::BEPolicy::get32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=514739401 Crash type: Heap-buffer-overflow READ 4 Crash state: NBELERTP::BEPolicy::get32 PackLinuxElf32::elflookup PackLinuxElf32::PackLinuxElf32help1...

OSV-2026-785 Heap-double-free in _dwarf_load_elf_symtab_symbols

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=514753154 Crash type: Heap-double-free Crash state: dwarfloadelfsymtabsymbols dwarfelfnlsetup dwarfinitpathdla...

freeradius:fuzzer_xlat: Global-buffer-overflow in tokenize_field

Detailed Report: https://oss-fuzz.com/testcase?key=5900948294926336 Project: freeradius Fuzzing Engine: libFuzzer Fuzz Target: fuzzerxlat Job Type: libfuzzerasanfreeradius Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x7bce01f17a48 Crash State: tokenizefield...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: libbpf: Fixed an issue of accessing the BTF.ext corerelo header. Updated btfextparseinfo to ensure that the corerelo header is present before reading its fields. This prevents a potential buffer read overflow reported by the OSS...

FuzzingBrain V2: A Multi-Agent LLM System for Automated Vulnerability Discovery and Reproduction

Software vulnerabilities pose critical security threats, with nearly 50,000 CVEs reported in 2025. While Large Language Models LLMs show promise for automated vulnerability detection, three key challenges remain. First, LLM-generated vulnerability reports suffer from high false positive rates and...

gdal:s101_fuzzer: Heap-buffer-overflow in DDFSubfieldDefn::GetDataLength

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=4683469484785664 Project: gdal Fuzzing Engine: afl Fuzz Target: s101fuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7aa45b4e06e0 Crash State:...

OSV-2026-777 Heap-buffer-overflow in md_is_link_title

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=514122612 Crash type: Heap-buffer-overflow READ 1 Crash state: mdislinktitle mdanalyzeinlines mdprocessnormalblockcontents...

OSV-2026-767 Heap-use-after-free in gf_sg_reset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=513912488 Crash type: Heap-use-after-free READ 8 Crash state: gfsgreset gfsgdel fuzzscene.c...

OSV-2024-1464 Use-of-uninitialized-value in Splash::compositeBackground

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=513891492 Crash type: Use-of-uninitialized-value Crash state: Splash::compositeBackground SplashOutputDev::setSoftMask Gfx::doSoftMask...

OSV-2026-765 Heap-use-after-free in gf_node_get_id

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=513783541 Crash type: Heap-use-after-free READ 8 Crash state: gfnodegetid lsrreadcommandlist lsrdecodelaserunit...

libvips:vips_fuzzer: Heap-buffer-overflow in vips_hist_local_generate

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=6121452385665024 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: vipsfuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libavif:[email protected]: Heap-buffer-overflow in aom_stop_encode

Project: https://github.com/AOMediaCodec/libavif.git Detailed Report: https://oss-fuzz.com/testcase?key=5288434888671232 Project: libavif Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzerasanlibavif Platform Id: linux Crash...

freeradius:fuzzer_json: Heap-buffer-overflow in fr_utf8_char

Detailed Report: https://oss-fuzz.com/testcase?key=6558953457909760 Project: freeradius Fuzzing Engine: libFuzzer Fuzz Target: fuzzerjson Job Type: libfuzzerasanfreeradius Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x750350ce0153 Crash State: frutf8char frjpathparse...

OSV-2026-760 Heap-buffer-overflow in md_decode_utf8__

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=513677122 Crash type: Heap-buffer-overflow READ 1 Crash state: mddecodeutf8 mdskipunicodewhitespace mdlinklabelhash...

OSV-2026-752 Heap-buffer-overflow in Mat_VarGetStructsLinear

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=513434228 Crash type: Heap-buffer-overflow WRITE 8 Crash state: MatVarGetStructsLinear matiostructcellfuzzer.cpp...

gdal:s101_fuzzer: Heap-buffer-overflow in DDFSubfieldDefn::ExtractIntData

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=4880919399038976 Project: gdal Fuzzing Engine: afl Fuzz Target: s101fuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7bca7dcecf63 Crash State:...

graphicsmagick:coder_HEIF_fuzzer: Heap-buffer-overflow in vvdec_push_data2

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5932941304987648 Project: graphicsmagick Fuzzing Engine: honggfuzz Fuzz Target: coderHEIFfuzzer Job Type: honggfuzzasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

OSV-2026-750 Heap-buffer-overflow in MqttDecode_Props

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=513047073 Crash type: Heap-buffer-overflow READ 1 Crash state: MqttDecodeProps MqttDecodeDisconnect MqttClientDecodePacket...

OSV-2026-748 Heap-buffer-overflow in p11_lexer_next

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=513102821 Crash type: Heap-buffer-overflow READ 2 Crash state: p11lexernext p11persistread p11parserformatpersist...