haproxy:fuzz_cfg_parser: Segv on unknown address in sanitize_for_printing

Project: https://github.com/haproxy/haproxy.git Detailed Report: https://oss-fuzz.com/testcase?key=6605284020912128 Project: haproxy Fuzzing Engine: honggfuzz Fuzz Target: fuzzcfgparser Job Type: honggfuzzasanhaproxy Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash Stat...

ghostscript:gs_xps_fuzzer: Heap-use-after-free in txt_impl_process

Detailed Report: https://oss-fuzz.com/testcase?key=6422215347470336 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsxpsfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free WRITE 1 Crash Address: 0x7c54dadcc973 Crash State: txtimplprocess...

haproxy:fuzz_cfg_parser: Global-buffer-overflow in cfg_eval_cond_term

Project: https://github.com/haproxy/haproxy.git Detailed Report: https://oss-fuzz.com/testcase?key=6039851723194368 Project: haproxy Fuzzing Engine: honggfuzz Fuzz Target: fuzzcfgparser Job Type: honggfuzzasanhaproxy Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

libvips:vips_fuzzer: Crash in vips_invertlut_build

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5664453864783872 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: vipsfuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7a09671e9680 Crash...

OSV-2026-514 Heap-buffer-overflow in format_expand1

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=498472071 Crash type: Heap-buffer-overflow READ 1 Crash state: formatexpand1 formatexpand format-fuzzer.c...

OSV-2026-512 Heap-buffer-overflow in g_utf8_get_char

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=498475244 Crash type: Heap-buffer-overflow READ 1 Crash state: gutf8getchar gmarkupescapetext fuzzmarkupescapetext.c...

OSV-2026-504 Heap-use-after-free in ObjectStream::getObject

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=498251261 Crash type: Heap-use-after-free READ 4 Crash state: ObjectStream::getObject XRef::fetch XRef::fetch...

gdk-pixbuf:pixbuf_file_fuzzer: Heap-buffer-overflow in null_convert

Detailed Report: https://oss-fuzz.com/testcase?key=6313884716957696 Project: gdk-pixbuf Fuzzing Engine: afl Fuzz Target: pixbuffilefuzzer Job Type: aflasangdk-pixbuf Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x7ccbafae6266 Crash State: nullconvert sepupsample...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::LWOImporter::LoadLWO2File

Detailed Report: https://oss-fuzz.com/testcase?key=5724993966374912 Project: assimp Fuzzing Engine: honggfuzz Fuzz Target: assimpfuzzer Job Type: honggfuzzasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x746e7aae0b94 Crash State:...

tmux:format-fuzzer: Heap-buffer-overflow in format_expand1

Project: https://github.com/tmux/tmux.git Detailed Report: https://oss-fuzz.com/testcase?key=5348870392709120 Project: tmux Fuzzing Engine: libFuzzer Fuzz Target: format-fuzzer Job Type: libfuzzerasantmux Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7ada289e1712 Cra...

gstreamer:gst-tag: Heap-buffer-overflow in ___interceptor_strncpy

Project: https://anongit.freedesktop.org/git/gstreamer/gstreamer https://gitlab.freedesktop.org/gstreamer/gstreamer.git Detailed Report: https://oss-fuzz.com/testcase?key=5245521680990208 Project: gstreamer Fuzzing Engine: libFuzzer Fuzz Target: gst-tag Job Type: libfuzzerasangstreamer Platform I...

UBUNTU-CVE-2025-66037

OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, feeding a crafted input to the fuzzpkcs15reader harness causes OpenSC to perform an out-of-bounds heap read in the X.509/SPKI handling path. Specifically, scpkcs15pubkeyfromspkifields allocates a zero-length buffer...

CVE-2025-66037 OpenSC: Out of Bounds vulnerability

OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, feeding a crafted input to the fuzzpkcs15reader harness causes OpenSC to perform an out-of-bounds heap read in the X.509/SPKI handling path. Specifically, scpkcs15pubkeyfromspkifields allocates a zero-length buffer...

ogre:ogre_deep_fuzz: Crash in Ogre::MemoryDataStream::read

Project: https://github.com/OGRECave/ogre.git Detailed Report: https://oss-fuzz.com/testcase?key=5552513716912128 Project: ogre Fuzzing Engine: libFuzzer Fuzz Target: ogredeepfuzz Job Type: libfuzzerubsanogre Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x5c145915ece4 Crash State:...

libraw:libraw_raf_fuzzer: Use-of-uninitialized-value in LibRaw::identify_finetune_dcr

Detailed Report: https://oss-fuzz.com/testcase?key=5941795057106944 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawraffuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::identifyfinetunedcr LibRaw::identi...

ogre:ogre_deep_fuzz: Container-overflow in Ogre::Mesh::setLodStrategy

Project: https://github.com/OGRECave/ogre.git Detailed Report: https://oss-fuzz.com/testcase?key=6040064055640064 Project: ogre Fuzzing Engine: afl Fuzz Target: ogredeepfuzz Job Type: aflasanogre Platform Id: linux Crash Type: Container-overflow WRITE 4 Crash Address: 0x78ca3cee0984 Crash State:...

tinygltf:fuzz_gltf_customjson: Crash in tinygltf_json::parse

Project: https://github.com/syoyo/tinygltf.git Detailed Report: https://oss-fuzz.com/testcase?key=5808325458722816 Project: tinygltf Fuzzing Engine: libFuzzer Fuzz Target: fuzzgltfcustomjson Job Type: libfuzzerasantinygltf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x77db03120000...

ogre:ogre_deep_fuzz: Crash in Ogre::SkeletonSerializer::importSkeleton

Project: https://github.com/OGRECave/ogre.git Detailed Report: https://oss-fuzz.com/testcase?key=5443985933139968 Project: ogre Fuzzing Engine: libFuzzer Fuzz Target: ogredeepfuzz Job Type: libfuzzerasanogre Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000029b40 Crash State:...

OSV-2026-481 Security exception in org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=496552925 Crash type: Security exception Crash state: org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII...

vlc:vlc-demux-dec-libfuzzer-mkv: Heap-buffer-overflow in DecodeBlock

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=6163370809294848 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-mkv Job Type: aflasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7a69bb2e2a38...