kde-thumbnailers:gsthumbnail_fuzzer: Index-out-of-bounds in dsc_scan_data

Detailed Report: https://oss-fuzz.com/testcase?key=6110022542360576 Project: kde-thumbnailers Fuzzing Engine: libFuzzer Fuzz Target: gsthumbnailfuzzer Job Type: libfuzzerubsankde-thumbnailers Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: dscscandata...

OSV-2026-244 Use-of-uninitialized-value in ihevcd_fmt_conv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=484466027 Crash type: Use-of-uninitialized-value Crash state: ihevcdfmtconv ihevcdprocessthread...

assimp:assimp_fuzzer: Crash in aiMesh::~aiMesh

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5073201599414272 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzermsanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fba4d7bc020 Crash State...

OSV-2026-242 Use-of-uninitialized-value in ntrip_parse_url

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=483900342 Crash type: Use-of-uninitialized-value Crash state: ntripparseurl FuzzClient.c...

OSV-2026-240 Use-of-uninitialized-value in packet_get1

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=483928517 Crash type: Use-of-uninitialized-value Crash state: packetget1 gpsdpoll FuzzDrivers.c...

GHSA-8H58-W33P-WQ3G rPGP affected by crash in message handling for deeply nested messages

Summary Previous rPGP versions could be caused to crash with a "stack overflow" when parsing messages that contain deeply nested message layers, such as messages with many signatures. rPGP 0.19.0 resolves this issue with a more robust message handling implementation via...

php:php-fuzz-function-jit: Heap-use-after-free in i_zval_ptr_dtor

Detailed Report: https://oss-fuzz.com/testcase?key=6239113555804160 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-function-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x7c4f96217bb1 Crash State: izvalptrdtor concatfunction...

njs:njs_process_script_fuzzer: Heap-buffer-overflow in njs_flathsh_unique_find

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5123106065940480 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7cfe3420203c Crash...

CVE-2020-37104

ASTPP 4.0.1 contains an information disclosure vulnerability that allows unauthenticated attackers to download database backup files by predicting backup filename patterns. Attackers can generate a list of 6-digit PIN combinations and fuzz the backup download URL to exfiltrate sensitive database...

assimp:assimp_fuzzer_glb: Heap-buffer-overflow in Assimp::glTF2Importer::ImportNode

Detailed Report: https://oss-fuzz.com/testcase?key=6480755831406592 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzerglb Job Type: aflasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x7b60fbbe1740 Crash State: Assimp::glTF2Importer::ImportNode...

OSV-2026-229 Segv on unknown address in aiAnimation::~aiAnimation

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=483188619 Crash type: Segv on unknown address Crash state: aiAnimation::aiAnimation aiScene::aiScene Assimp::BaseImporter::ReadFile...

OSV-2026-226 UNKNOWN WRITE in decode_xa2_00

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=482909898 Crash type: UNKNOWN WRITE Crash state: decodexa200 tsipparseinput gpsdpoll...

assimp:assimp_fuzzer_glb: Use-of-uninitialized-value in std::__1::__unordered_map_equal<Assimp::Vertex, std::__1::pair<Assimp::Vertex co

Detailed Report: https://oss-fuzz.com/testcase?key=6403453281959936 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzerglb Job Type: libfuzzermsanassimp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: std::1::unorderedmapequalAssimp::Vertex,...

assimp:assimp_fuzzer_fbx: Container-overflow in Assimp::FBX::FBXConverter::ConvertMeshMultiMaterial

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6379452920823808 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzerfbx Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Container-overflow READ 4 Crash Address:...

assimp:assimp_fuzzer_gltf: Use-of-uninitialized-value in Assimp::FindInvalidDataProcess::ProcessAnimationChannel

Detailed Report: https://oss-fuzz.com/testcase?key=4744940570869760 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzergltf Job Type: libfuzzermsanassimp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

assimp:assimp_fuzzer: Segv on unknown address in Assimp::DeleteImporterInstanceList

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4545068043403264 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzermsanassimp Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

GPU-Fuzz: Finding Memory Errors in Deep Learning Frameworks

GPU memory errors are a critical threat to deep learning DL frameworks, leading to crashes or even security issues. We introduce GPU-Fuzz, a fuzzer locating these issues efficiently by modeling operator parameters as formal constraints. GPU-Fuzz utilizes a constraint solver to generate test cases...

OSV-2026-212 UNKNOWN READ in gpsd_poll

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=482617785 Crash type: UNKNOWN READ Crash state: gpsdpoll FuzzDriversStructured.c...

OSV-2026-209 Use-of-uninitialized-value in ntrip_parse_url

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=482281265 Crash type: Use-of-uninitialized-value Crash state: ntripparseurl FuzzClient.c...

OSV-2026-203 Segv on unknown address in glslang::TIntermediate::addSymbol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=481635421 Crash type: Segv on unknown address Crash state: glslang::TIntermediate::addSymbol glslang::HlslParseContext::handleFunctionCall glslang::HlslParseContext::transformEntryPoint...