OSV-2026-307 Global-buffer-overflow in navcom_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=486709178 Crash type: Global-buffer-overflow READ 1 Crash state: navcomparse gpsdpoll FuzzDrivers.c...

OSV-2026-302 Use-of-uninitialized-value in BIO_new_file

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=486713209 Crash type: Use-of-uninitialized-value Crash state: BIOnewfile libcrypto.so.3 CONFmodulesloadfileex...

ffmpeg:ffmpeg_dem_MOV_fuzzer: Segv on unknown address in mov_read_iref

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6525162874011648 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegdemMOVfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Segv on unknow...

libical:libicalvcard_fuzzer: Crash in strncasecmp

Project: https://github.com/libical/libical.git Detailed Report: https://oss-fuzz.com/testcase?key=6010123784093696 Project: libical Fuzzing Engine: libFuzzer Fuzz Target: libicalvcardfuzzer Job Type: libfuzzerubsanlibical Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000002710...

OSV-2026-297 Security exception in org.apache.poi.util.IOUtils.safelyAllocate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=486522036 Crash type: Security exception Crash state: org.apache.poi.util.IOUtils.safelyAllocate org.apache.poi.hssf.record.RecordInputStream.readRemainder org.apache.poi.hssf.record.UnknownRecord...

OSV-2026-292 UNKNOWN WRITE in <wasmtime::runtime::func::Func>::call_unchecked_raw::<

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=486503337 Crash type: UNKNOWN WRITE Crash state: ::calluncheckedraw::::queuecall...

nginx:http_request_fuzzer: Negative-size-param in ngx_http_header_filter

Project: https://github.com/nginx/nginx.git Detailed Report: https://oss-fuzz.com/testcase?key=4925838385807360 Project: nginx Fuzzing Engine: libFuzzer Fuzz Target: httprequestfuzzer Job Type: libfuzzerasannginx Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

rdkit:mol_deserialization_fuzzer: Heap-buffer-overflow in RDKit::streamRead

Detailed Report: https://oss-fuzz.com/testcase?key=4553794922020864 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldeserializationfuzzer Job Type: libfuzzerasani386rdkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0xf4d01174 Crash State: RDKit::streamRead...

kimageformats:kimgio_heif_fuzzer: Use-of-uninitialized-value in put_weighted_pred_8_fallback

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=6717224818900992 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioheiffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

OSV-2026-272 Heap-use-after-free in vcardproperty_get_value

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=485932113 Crash type: Heap-use-after-free READ 8 Crash state: vcardpropertygetvalue vcardpropertygetversion parsevcard...

njs:njs_process_script_fuzzer: Crash in njs_string_prototype_replace

Project: http://hg.nginx.org/njs https://github.com/nginx/njs.git Detailed Report: https://oss-fuzz.com/testcase?key=6324980421033984 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

mruby:mruby_fuzzer: Segv on unknown address in mrb_word_boxing_value_float

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5764894741037056 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

ffmpeg:ffmpeg_AV_CODEC_ID_AAC_DEC_fuzzer: Global-buffer-overflow in dequant_scalefactors

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4540415134203904 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAACDECfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

wasm3:fuzzer: Heap-buffer-overflow in PreserveRegisterIfOccupied

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=6662378086531072 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerasanwasm3 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x7e4c0bd00354 Crash...

kimageformats:kimgio_heif_fuzzer: Use-of-uninitialized-value in put_weighted_bipred_8_fallback

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=6427660002852864 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioheiffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_EXR_DEC_fuzzer: Crash in decode_block

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4520520419966976 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDEXRDECfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Cras...

OSV-2026-261 Segv on unknown address in ___interceptor_strtol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=485071710 Crash type: Segv on unknown address Crash state: interceptorstrtol processPASHR nmeaparse...

gpsd:FuzzDrivers: Null-dereference READ in FuzzDrivers

Project: https://gitlab.com/gpsd/gpsd.git Detailed Report: https://oss-fuzz.com/testcase?key=5807553161527296 Project: gpsd Fuzzing Engine: libFuzzer Fuzz Target: FuzzDrivers Job Type: libfuzzermsangpsd Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State...

gpsd:FuzzDrivers: Use-of-uninitialized-value in tsip_parse_input

Project: https://gitlab.com/gpsd/gpsd.git Detailed Report: https://oss-fuzz.com/testcase?key=5753755172929536 Project: gpsd Fuzzing Engine: libFuzzer Fuzz Target: FuzzDrivers Job Type: libfuzzermsangpsd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

grok:grk_decompress_fuzzer: Heap-buffer-overflow in bool grk::GrkImage::apply_palette_clr<int>

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=5457536781451264 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzerasangrok Platform Id...