OSV-2026-632 Use-of-uninitialized-value in PKFormatConverter_InitializeConvert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=506459298 Crash type: Use-of-uninitialized-value Crash state: PKFormatConverterInitializeConvert PKFormatConverterInitialize JXRHandler::read...

mruby:mruby_fuzzer: Global-buffer-overflow in fixed_width

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5180852039647232 Project: mruby Fuzzing Engine: honggfuzz Fuzz Target: mrubyfuzzer Job Type: honggfuzzasanmruby Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x5c3ba5fdf538...

OSV-2026-629 Security exception in org.apache.thrift.protocol.TProtocolUtil.skip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=506318134 Crash type: Security exception Crash state: org.apache.thrift.protocol.TProtocolUtil.skip org.apache.thrift.protocol.TCompactProtocol.readByte org.apache.thrift.protocol.TCompactProtocol.readFieldBegin...

libvips:vips_fuzzer: Heap-buffer-overflow in vips_stdif_generate

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=6416631973871616 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: vipsfuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

kimageformats:kimgio_jxr_fuzzer: Use-of-uninitialized-value in PKFormatConverter_InitializeConvert

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=4729998048296960 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgiojxrfuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

libucl:ucl_add_string_fuzzer: Heap-buffer-overflow in ucl_hash_insert

Detailed Report: https://oss-fuzz.com/testcase?key=4504932836507648 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x76892804ab80 Crash State: uclhashinsert...

OSV-2026-623 Use-of-uninitialized-value in Mat_PrintNumber

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=505903317 Crash type: Use-of-uninitialized-value Crash state: MatPrintNumber MatPrintData MatVarPrint...

OSV-2026-621 Use-of-uninitialized-value in vcardtime_from_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=505903588 Crash type: Use-of-uninitialized-value Crash state: vcardtimefromstring vcardvaluenewfromstring parsevcard...

OSV-2026-620 Heap-buffer-overflow in ixheaace_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=505674302 Crash type: Heap-buffer-overflow WRITE Crash state: ixheaaceprocess xaacencfuzzer.cpp...

ARIstoteles -- Dissecting Apple's Baseband Interface

Wireless chips and interfaces expose a substantial remote attack surface. As of today, most cellular baseband security research is performed on the Android ecosystem, leaving a huge gap on Apple devices. With iOS jailbreaks, last-generation wireless chips become fairly accessible for performance...

matio:matio_fuzzer: Use-of-uninitialized-value in Mat_PrintNumber

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=6489731344171008 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzermsanmatio Platform Id: linux Crash Type: Use-of-uninitialized-val...

libical:libicalvcard_fuzzer: Use-of-uninitialized-value in vcardtime_from_string

Project: https://github.com/libical/libical.git Detailed Report: https://oss-fuzz.com/testcase?key=6040898940239872 Project: libical Fuzzing Engine: libFuzzer Fuzz Target: libicalvcardfuzzer Job Type: libfuzzermsanlibical Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

OSV-2026-616 Use-of-uninitialized-value in JXRHandlerPrivate::colorSpace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=505263965 Crash type: Use-of-uninitialized-value Crash state: JXRHandlerPrivate::colorSpace JXRHandlerPrivate::imageFormat JXRHandler::read...

kimageformats:kimgio_jxr_fuzzer: Use-of-uninitialized-value in JXRHandlerPrivate::imageSize

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=4777040151904256 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgiojxrfuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

vlc:vlc-demux-dec-libfuzzer-ps: Heap-buffer-overflow in ParsePacket

Detailed Report: https://oss-fuzz.com/testcase?key=4857063984660480 Project: vlc Fuzzing Engine: honggfuzz Fuzz Target: vlc-demux-dec-libfuzzer-ps Job Type: honggfuzzasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x77658dce92e0 Crash State: ParsePacket Decode...

OSV-2026-610 Memcpy-param-overlap in htx_replace_blk_value

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=504612570 Crash type: Memcpy-param-overlap Crash state: htxreplaceblkvalue httpreplaceheadervalue httpschemebasednormalize...

OSV-2026-608 Stack-buffer-overflow in is_http

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=504809218 Crash type: Stack-buffer-overflow READ Crash state: ishttp stungetmessagelenstr FuzzStunClient.c...

OSV-2026-605 Heap-buffer-overflow in DwaCompressor_uncompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=504280155 Crash type: Heap-buffer-overflow WRITE Crash state: DwaCompressoruncompress internalexrundodwaa exruncompresschunk...

OSV-2026-603 UNKNOWN READ in <wasmtime::runtime::func::Func>::call_unchecked_raw::<

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=504268343 Crash type: UNKNOWN READ Crash state: ::calluncheckedraw::::callimpldocall:: wasmtimeinternalfiber::stackswitch::x8664::wasmtimefiberstart...

OSV-2026-600 Heap-buffer-overflow in skcms_private::baseline::clut

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=504261818 Crash type: Heap-buffer-overflow READ 8 Crash state: skcmsprivate::baseline::clut skcmsprivate::baseline::execstages skcmsprivate::baseline::runprogram...