OSV-2026-747 Heap-buffer-overflow in coap_persist_startup_lkd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=513035615 Crash type: Heap-buffer-overflow READ 8 Crash state: coappersiststartuplkd persisttarget.c...

openbabel:fuzz_molecule: Heap-use-after-free in OpenBabel::OBAngleData::FillAngleArray

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=5045393024155648 Project: openbabel Fuzzing Engine: afl Fuzz Target: fuzzmolecule Job Type: aflasanopenbabel Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x7707b57e18...

tensorflow:[email protected]: Heap-buffer-overflow in std::__1::pair<google::protobuf::Map<std::__1::basic_string<char, std::__1::char

Detailed Report: https://oss-fuzz.com/testcase?key=5381387644633088 Project: tensorflow Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzerasantensorflow Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

openbabel:fuzz_molecule: Segv on unknown address in std::__1::basic_ostream<char, std::__1::char_traits<char>>::sentry::sentry

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=5357831149912064 Project: openbabel Fuzzing Engine: afl Fuzz Target: fuzzmolecule Job Type: aflasanopenbabel Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

OSV-2026-733 Use-of-uninitialized-value in JBIG2Stream::readSymbolDictSeg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=512468082 Crash type: Use-of-uninitialized-value Crash state: JBIG2Stream::readSymbolDictSeg JBIG2Stream::readSegments JBIG2Stream::rewind...

OSV-2026-727 Global-buffer-overflow in md_start_new_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=512429152 Crash type: Global-buffer-overflow READ 4 Crash state: mdstartnewblock mdparse mdhtml...

jsoncons:fuzz_cbor: Heap-buffer-overflow in jsoncons::mdarray_iterator<double>::next

Project: https://github.com/danielaparker/jsoncons.git Detailed Report: https://oss-fuzz.com/testcase?key=4539821292060672 Project: jsoncons Fuzzing Engine: libFuzzer Fuzz Target: fuzzcbor Job Type: libfuzzerasanjsoncons Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

libcoap:persist_fuzzer: Heap-buffer-overflow in coap_pdu_parse_header

Project: https://github.com/obgm/libcoap.git Detailed Report: https://oss-fuzz.com/testcase?key=6630622805426176 Project: libcoap Fuzzing Engine: libFuzzer Fuzz Target: persistfuzzer Job Type: libfuzzerasanlibcoap Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

mruby:mruby_fuzzer: Heap-buffer-overflow in mrb_ary_splice

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6525563811725312 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x7b583fde0520 Crash State:...

kamailio:fuzz_parse_digest: Crash in parse_param_name

Project: https://github.com/kamailio/kamailio.git Detailed Report: https://oss-fuzz.com/testcase?key=5291131759034368 Project: kamailio Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsedigest Job Type: libfuzzerubsankamailio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x5d41b4e79000...

md4c:fuzz-mdhtml: Use-after-poison in md_build_attribute

Project: https://github.com/mity/md4c.git Detailed Report: https://oss-fuzz.com/testcase?key=4638121173254144 Project: md4c Fuzzing Engine: afl Fuzz Target: fuzz-mdhtml Job Type: aflasanmd4c Platform Id: linux Crash Type: Use-after-poison READ 1 Crash Address: 0x77bd9e9c40bd Crash State:...

OSV-2026-718 Heap-buffer-overflow in md_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=511825301 Crash type: Heap-buffer-overflow READ 1 Crash state: mdparse mdhtml fuzz-mdhtml.c...

OSV-2026-717 Stack-use-after-scope in enter_block_callback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=511831392 Crash type: Stack-use-after-scope READ 4 Crash state: enterblockcallback mdprocessallblocks mdparse...

PT-2026-42655

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=511825301 Crash type: Heap-buffer-overflow READ 1 Crash state: md parse md html fuzz-mdhtml.c...

matio:matio_readdataall_fuzzer: Heap-buffer-overflow in H5D__scatter_mem

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=5248828050833408 Project: matio Fuzzing Engine: honggfuzz Fuzz Target: matioreaddataallfuzzer Job Type: honggfuzzasanmatio Platform Id: linux Crash Type:...

md4c:fuzz-mdhtml: Stack-use-after-scope in enter_block_callback

Project: https://github.com/mity/md4c.git Detailed Report: https://oss-fuzz.com/testcase?key=5554248703344640 Project: md4c Fuzzing Engine: afl Fuzz Target: fuzz-mdhtml Job Type: aflasanmd4c Platform Id: linux Crash Type: Stack-use-after-scope READ 4 Crash Address: 0x78c7412d0380 Crash State:...

OSV-2026-713 Use-of-uninitialized-value in ojph::local::tile::pull

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=511443006 Crash type: Use-of-uninitialized-value Crash state: ojph::local::tile::pull ojph::local::codestream::pull ojphexpandfuzztarget.cpp...

OSV-2026-712 Heap-buffer-overflow in Mat_VarGetCellsLinear

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=511531637 Crash type: Heap-buffer-overflow READ 8 Crash state: MatVarGetCellsLinear matiostructcellfuzzer.cpp...

OSV-2026-711 Use-of-uninitialized-value in jxl::PerformMulBlending

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=511400706 Crash type: Use-of-uninitialized-value Crash state: jxl::PerformMulBlending jxl::PerformBlending jxl::NAVX2::BlendingStage::ProcessRow...

OSV-2026-710 UNKNOWN WRITE in ojph::local::precinct::parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=511393472 Crash type: UNKNOWN WRITE Crash state: ojph::local::precinct::parse ojph::local::resolution::parseoneprecinct ojph::local::tile::parsetileheader...