OSV-2026-356 Security exception in org.apache.lucene.util.ArrayUtil.copyOfSubArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=489370855 Crash type: Security exception Crash state: org.apache.lucene.util.ArrayUtil.copyOfSubArray org.apache.lucene.util.BytesRef.deepCopyOf org.apache.lucene.index.Term...

OSV-2026-354 Use-of-uninitialized-value in pcpp::MplsLayer::toString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=489360236 Crash type: Use-of-uninitialized-value Crash state: pcpp::MplsLayer::toString FuzzTarget.cpp pcpp::RawPacket::RawPacket...

vlc:vlc-demux-dec-libfuzzer-image: Heap-buffer-overflow in IsMxpeg

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=6476597489369088 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-image Job Type: aflasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7c6bcc4e17e...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the decode0x0805 function of the CRW image parser. An attacker can cause the application to read memory outside the bounds of an allocated buffer by providing a specially crafted CRW image file. Remediation A fix w...

OSV-2026-343 Heap-buffer-overflow in pcre2_compile_32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=488713937 Crash type: Heap-buffer-overflow WRITE 4 Crash state: pcre2compile32 pcre2fuzzsupport.c...

OSV-2026-341 Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=488745540 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.RegexInjection.hookInternal com.codeintelligence.jazzer.sanitizers.RegexInjection.patternHook...

OSV-2026-338 Use-of-uninitialized-value in pjsip_auth_clt_init_req

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=488721002 Crash type: Use-of-uninitialized-value Crash state: pjsipauthcltinitreq fuzz-sip.c fuzz-sip.c...

wasmer:universal_llvm: Stack-buffer-overflow in wasmer_vm_memory32_grow

Detailed Report: https://oss-fuzz.com/testcase?key=5686748306014208 Project: wasmer Fuzzing Engine: libFuzzer Fuzz Target: universalllvm Job Type: libfuzzerasanwasmer Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 8 Crash Address: 0x77e629c9dc70 Crash State: wasmervmmemory32grow...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in avi_parse_input_file

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4678488962695168 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x774ecade040c Crash State:...

pcre2:pcre2_fuzzer_32: Heap-buffer-overflow in pcre2_compile_32

Project: svn://vcs.exim.org/pcre2/code/trunk https://github.com/PCRE2Project/pcre2.git Detailed Report: https://oss-fuzz.com/testcase?key=6378939999387648 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer32 Job Type: libfuzzerasani386pcre2 Platform Id: linux Crash Type:...

pjsip:fuzz-sip: Use-of-uninitialized-value in pjsip_auth_clt_init_req

Project: https://github.com/pjsip/pjproject.git Detailed Report: https://oss-fuzz.com/testcase?key=5352060429336576 Project: pjsip Fuzzing Engine: libFuzzer Fuzz Target: fuzz-sip Job Type: libfuzzermsanpjsip Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

wasmer:universal_llvm: Crash in universal_llvm

Detailed Report: https://oss-fuzz.com/testcase?key=5114350968045568 Project: wasmer Fuzzing Engine: libFuzzer Fuzz Target: universalllvm Job Type: libfuzzerasanwasmer Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x75b248d85fdb Crash State: universalllvm Sanitizer: address ASAN...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::BgpLayer::computeCalculateFields

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5932977975787520 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 16 Crash...

OSV-2026-324 Security exception in java.base/java.util.Arrays.copyOfRange

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=488130836 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOfRange java.base/java.lang.StringUTF16.newString java.base/java.lang.StringBuilder.toString...

freerdp:TestFuzzCoreServer: Heap-use-after-free in Stream_EnsureValidity

Project: https://github.com/FreeRDP/FreeRDP.git Detailed Report: https://oss-fuzz.com/testcase?key=4732227727720448 Project: freerdp Fuzzing Engine: centipede Fuzz Target: TestFuzzCoreServer Job Type: centipedeasanfreerdp Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in Box_prfr::write

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4713306517733376 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

tmux:input-fuzzer: Heap-use-after-free in input_reply_clipboard

Project: https://github.com/tmux/tmux.git Detailed Report: https://oss-fuzz.com/testcase?key=4616287904137216 Project: tmux Fuzzing Engine: libFuzzer Fuzz Target: input-fuzzer Job Type: libfuzzerasantmux Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x797ca51e6a40 Crash...

openexr:openexr_exrcorecheck_fuzzer: Crash in ojph::local::avx2_irv_convert_to_integer

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=6075892014317568 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrexrcorecheckfuzzer Job Type: libfuzzerasanopenexr Platform Id: linux Crash Type: UNKNOWN WRITE Crash...

graphicsmagick:coder_HEIC_fuzzer: Use-of-uninitialized-value in residual_coding

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=4741330642468864 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderHEICfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

OSV-2026-308 Heap-buffer-overflow in vcardstructured_new_from_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=486715154 Crash type: Heap-buffer-overflow WRITE 8 Crash state: vcardstructurednewfromstring vcardparametersetvaluefromstring parsevcard...