OSV-2026-707 Global-buffer-overflow in txt2sd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=511056140 Crash type: Global-buffer-overflow READ 1 Crash state: txt2sd fuzzmdnsxht.cc...

matio:matio_fuzzer: Stack-buffer-overflow in H5T__bit_copy

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=6348110531198976 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash...

matio:matio_fuzzer: Heap-use-after-free in H5T__bit_find

Detailed Report: https://oss-fuzz.com/testcase?key=5566795263311872 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x78d4f63cd6b3 Crash State: H5Tbitfind H5Tconvfiloop H5Tconvfi Sanitizer:...

openjph:ojph_expand_fuzz_target: Use-of-uninitialized-value in ojph::local::tile::pull

Project: https://github.com/aous72/OpenJPH.git Detailed Report: https://oss-fuzz.com/testcase?key=5957724247752704 Project: openjph Fuzzing Engine: libFuzzer Fuzz Target: ojphexpandfuzztarget Job Type: libfuzzermsanopenjph Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

OSV-2026-703 Heap-use-after-free in js_atomics_op

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=510792185 Crash type: Heap-use-after-free WRITE 4 Crash state: jsatomicsop jscallcfunction JSCallInternal...

c-blosc2:decompress_frame_fuzzer: Use-of-uninitialized-value in get_coffset

Detailed Report: https://oss-fuzz.com/testcase?key=4559143301349376 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzermsanc-blosc2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: getcoffset framegetchunk...

SUSE CVE-2026-43267

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix potential zero beacon interval in beacon tracking During fuzz testing, it was discovered that bssconf-beaconint might be zero, which could result in a division by zero error in subsequent calculations. Set a...

OSV-2026-696 Use-of-uninitialized-value in JXRHandler::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=510577322 Crash type: Use-of-uninitialized-value Crash state: JXRHandler::read kimgiofuzzer.cc interceptormalloc...

quickjs:fuzz_eval: Heap-use-after-free in js_atomics_op

Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=6255977170272256 Project: quickjs Fuzzing Engine: libFuzzer Fuzz Target: fuzzeval Job Type: libfuzzerasanquickjs Platform Id: linux Crash Type:...

gstreamer:gst-tag: Crash in gst_tag_list_from_id3v2_tag

Detailed Report: https://oss-fuzz.com/testcase?key=5255641580240896 Project: gstreamer Fuzzing Engine: honggfuzz Fuzz Target: gst-tag Job Type: honggfuzzasangstreamer Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7bffe128102a Crash State: gsttaglistfromid3v2tag gst-tag.c Sanitizer...

freerdp:TestFuzzNTLMMessage: Heap-buffer-overflow in ntlm_read_ChallengeMessage

Project: https://github.com/FreeRDP/FreeRDP.git Detailed Report: https://oss-fuzz.com/testcase?key=6753217856995328 Project: freerdp Fuzzing Engine: afl Fuzz Target: TestFuzzNTLMMessage Job Type: aflasanfreerdp Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x7594320e15...

matio:matio_fuzzer: Use-of-uninitialized-value in Mat_VarGetSize

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=6575773858463744 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzermsanmatio Platform Id: linux Crash Type: Use-of-uninitialized-val...

CVE-2026-43267 wifi: rtw89: fix potential zero beacon interval in beacon tracking

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix potential zero beacon interval in beacon tracking During fuzz testing, it was discovered that bssconf-beaconint might be zero, which could result in a division by zero error in subsequent calculations. Set a...

CVE-2026-43267: Divide By Zero

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix potential zero beacon interval in beacon tracking During fuzz testing, it was discovered that bssconf-beaconint might be zero, which could result in a division by zero error in subsequent calculations. Set a...

libigl:igl_fuzzer: Use-of-uninitialized-value in igl::MshLoader::MshLoader

Detailed Report: https://oss-fuzz.com/testcase?key=5411213164216320 Project: libigl Fuzzing Engine: libFuzzer Fuzz Target: iglfuzzer Job Type: libfuzzermsanlibigl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: igl::MshLoader::MshLoader iglfuzzer.cpp...

CVE-2026-7443

A weakness has been identified in BurtTheCoder mcp-dnstwist up to 1.0.4. Affected by this vulnerability is the function fuzzdomain of the file src/index.ts of the component MCP Interface. Executing a manipulation of the argument Request can lead to os command injection. The attack may be launched...

gstreamer:gst-discoverer: Heap-use-after-free in parse_stream_topology

Project: https://anongit.freedesktop.org/git/gstreamer/gstreamer https://gitlab.freedesktop.org/gstreamer/gstreamer.git Detailed Report: https://oss-fuzz.com/testcase?key=5193697808678912 Project: gstreamer Fuzzing Engine: libFuzzer Fuzz Target: gst-discoverer Job Type: libfuzzerasangstreamer...

grok:grk_decompress_fuzzer: Heap-buffer-overflow in grk::N_AVX2::DecompressRev::transform

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=4717825607663616 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzerasangrok Platform Id...

kamailio:fuzz_parse_digest: Heap-buffer-overflow in parse_param_name

Project: https://github.com/kamailio/kamailio.git Detailed Report: https://oss-fuzz.com/testcase?key=4567553560346624 Project: kamailio Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsedigest Job Type: libfuzzerasankamailio Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

kamailio:fuzz_strutils: Heap-buffer-overflow in unescape_user

Project: https://github.com/kamailio/kamailio.git Detailed Report: https://oss-fuzz.com/testcase?key=4826174714085376 Project: kamailio Fuzzing Engine: libFuzzer Fuzz Target: fuzzstrutils Job Type: libfuzzerasankamailio Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...