matio:matio_fuzzer: Heap-buffer-overflow in H5A__read

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=6454365811703808 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...

libcoap:oscore_conf_parse_fuzzer: Heap-double-free in coap_new_oscore_conf

Project: https://github.com/obgm/libcoap.git Detailed Report: https://oss-fuzz.com/testcase?key=5304791441145856 Project: libcoap Fuzzing Engine: libFuzzer Fuzz Target: oscoreconfparsefuzzer Job Type: libfuzzerasanlibcoap Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x79c75ff13e...

OSV-2026-582 Use-of-uninitialized-value in H5S_select_hyperslab

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=502905691 Crash type: Use-of-uninitialized-value Crash state: H5Sselecthyperslab H5Dchunkioinit H5Dread...

OSV-2026-579 Heap-buffer-overflow in CEA708_DTVCC_Demuxer_Push

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=502906444 Crash type: Heap-buffer-overflow READ 1 Crash state: CEA708DTVCCDemuxerPush DoDecode Decode...

OSV-2026-565 Heap-buffer-overflow in xmlFAParsePosCharGroup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=501547873 Crash type: Heap-buffer-overflow READ 1 Crash state: xmlFAParsePosCharGroup xmlFAParseCharGroup xmlFAParseCharGroup...

OSV-2026-563 UNKNOWN READ in bfd_getl32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=501547869 Crash type: UNKNOWN READ Crash state: bfdgetl32 m32relflo16reloc bfdperformrelocation...

tidy-html5:tidy_general_fuzzer: Heap-use-after-free in CleanTree

Detailed Report: https://oss-fuzz.com/testcase?key=6411373809827840 Project: tidy-html5 Fuzzing Engine: libFuzzer Fuzz Target: tidygeneralfuzzer Job Type: libfuzzerasantidy-html5 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x7572498e1020 Crash State: CleanTree CleanTr...

libultrahdr:ultrahdr_dec_fuzzer: Heap-buffer-overflow in ultrahdr::IccHelper::readIccColorGamut

Project: https://github.com/google/libultrahdr.git Detailed Report: https://oss-fuzz.com/testcase?key=5433768319188992 Project: libultrahdr Fuzzing Engine: libFuzzer Fuzz Target: ultrahdrdecfuzzer Job Type: libfuzzerasani386libultrahdr Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

OSV-2026-551 UNKNOWN WRITE in ___interceptor_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=500762221 Crash type: UNKNOWN WRITE Crash state: interceptorfree ppdClose fuzzppdgen1.c...

assimp:assimp_fuzzer_collada: Stack-buffer-overflow in Assimp::ColladaLoader::CreateAnimation

Detailed Report: https://oss-fuzz.com/testcase?key=4815251051970560 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzercollada Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0x78c321ee0d30 Crash State:...

OSV-2026-548 UNKNOWN in ojph::local::precinct::parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=500177411 Crash type: UNKNOWN Crash state: ojph::local::precinct::parse ojph::local::resolution::parseoneprecinct ojph::local::tile::parsetileheader...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.JavaAstVisitor.lambda$processChildren$28

Detailed Report: https://oss-fuzz.com/testcase?key=5633153250426880 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

libvips:vips_fuzzer: Heap-buffer-overflow in vips_bandjoin_const_buffer

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5259340872482816 Project: libvips Fuzzing Engine: afl Fuzz Target: vipsfuzzer Job Type: aflasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7a0cb1264214 Crash...

openjph:ojph_expand_fuzz_target: Heap-buffer-overflow in ojph::local::resolution::finalize_alloc

Project: https://github.com/aous72/OpenJPH.git Detailed Report: https://oss-fuzz.com/testcase?key=5603613035790336 Project: openjph Fuzzing Engine: afl Fuzz Target: ojphexpandfuzztarget Job Type: aflasanopenjph Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

OSV-2026-535 Security exception in org.htmlunit.cyberneko.HTMLTagBalancer.endElement

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=499447433 Crash type: Security exception Crash state: org.htmlunit.cyberneko.HTMLTagBalancer.endElement java.base/sun.nio.cs.CESU8.updatePositions java.base/sun.nio.cs.CESU8$Encoder.encodeArrayLoop...

OSV-2026-532 Heap-buffer-overflow in regsub

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=499446092 Crash type: Heap-buffer-overflow READ 1 Crash state: regsub formatreplace formatexpand1...

sqlite3:ossfuzz: Use-of-uninitialized-value in selectExpander

Detailed Report: https://oss-fuzz.com/testcase?key=6162609471815680 Project: sqlite3 Fuzzing Engine: libFuzzer Fuzz Target: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: selectExpander sqlite3WalkSelect sqlite3SelectPr...

grok:grk_compress_fuzzer: Use-of-uninitialized-value in grk::t1::ojph::local::proc_cq1

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=6012230788513792 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkcompressfuzzer Job Type: libfuzzermsangrok Platform Id:...

htslib:hts_open_fuzzer: Heap-buffer-overflow in cram_encode_container

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5372748074647552 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

OSV-2026-521 UNKNOWN READ in unsigned long Assimp::StreamReader<true, true>::Get<unsigned long>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=499121788 Crash type: UNKNOWN READ Crash state: unsigned long Assimp::StreamReader::Get bool Assimp::Blender::Structure::ResolvePointerstd::1::sharedptr, Assimp::Bl bool Assimp::Blender::Structure::ReadFieldPtr2,...