hobbes:fuzz-parse-expr: Heap-buffer-overflow in yylex

Project: https://github.com/morganstanley/hobbes.git Detailed Report: https://oss-fuzz.com/testcase?key=5314345710714880 Project: hobbes Fuzzing Engine: libFuzzer Fuzz Target: fuzz-parse-expr Job Type: libfuzzerasanhobbes Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

OSV-2026-1189 Global-buffer-overflow in oidc_cfg_redirect_urls_allowed_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=550474749 Crash type: Global-buffer-overflow READ 8 Crash state: oidccfgredirecturlsallowedget oidcvalidateredirecturl fuzzurl.c...

json-flattener:UnflattenFuzzer: Security exception in com.github.wnameless.json.unflattener.JsonUnflattener.unflattenArray

Project: https://github.com/wnameless/json-flattener.git Detailed Report: https://oss-fuzz.com/testcase?key=5123059544293376 Project: json-flattener Fuzzing Engine: libFuzzer Fuzz Target: UnflattenFuzzer Job Type: libfuzzerasanjson-flattener Platform Id: linux Crash Type: Security exception Crash...

grok:grk_decompress_mercury_fuzzer: Heap-buffer-overflow in bool grk::GrkImage::compositePlanar<int>

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=6270477761576960 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressmercuryfuzzer Job Type: libfuzzerasangrok...

hobbes:fuzz-parse-expr: Stack-buffer-overflow in hobbes::diffRegex

Project: https://github.com/morganstanley/hobbes.git Detailed Report: https://oss-fuzz.com/testcase?key=4831270021693440 Project: hobbes Fuzzing Engine: honggfuzz Fuzz Target: fuzz-parse-expr Job Type: honggfuzzasanhobbes Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

hobbes:fuzz-type-decode: Heap-buffer-overflow in hobbes::MkRecord::operator==

Project: https://github.com/morganstanley/hobbes.git Detailed Report: https://oss-fuzz.com/testcase?key=4688631038803968 Project: hobbes Fuzzing Engine: libFuzzer Fuzz Target: fuzz-type-decode Job Type: libfuzzerasanhobbes Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

clusterfuzz v2.37.1

ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...

ANT-2026-ZRDQDR79 · util-linux · heap-use-after-free

use-after-free medium CVE-2026-13595 GHSA-qpmf-9p9c-455w Severity Claude critical · Security research firm high · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-ZRDQDR79:...

OSV-2026-1161 Heap-buffer-overflow in ppp_tx_frame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=546440470 Crash type: Heap-buffer-overflow WRITE Crash state: ppptxframe ppprx mgtcpiprx...

OSV-2026-1157 Memcpy-param-overlap in zxc_decompress_chunk_wrapper_default

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=546426939 Crash type: Memcpy-param-overlap Crash state: zxcdecompresschunkwrapperdefault zxcdecompressframe fuzzdecompress.c...

zxc:zxc_fuzzer_decompress: Memcpy-param-overlap in zxc_decompress_chunk_wrapper_default

Project: https://github.com/hellobertrand/zxc.git Detailed Report: https://oss-fuzz.com/testcase?key=4590193643159552 Project: zxc Fuzzing Engine: afl Fuzz Target: zxcfuzzerdecompress Job Type: aflasanzxc Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address:...

selinux:selabel_file_text-fuzzer: Segv on unknown address in pcre2_jit_match_8

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=4683859900563456 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: selabelfiletext-fuzzer Job Type: libfuzzermsanselinux Platform Id: linux Crash Type: Segv on unknown address Crash...

tcpreplay:fuzz_fragroute: Heap-buffer-overflow in ip_add_option

Project: https://github.com/appneta/tcpreplay.git Detailed Report: https://oss-fuzz.com/testcase?key=5090327015522304 Project: tcpreplay Fuzzing Engine: libFuzzer Fuzz Target: fuzzfragroute Job Type: libfuzzerasantcpreplay Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address:...

php:php-fuzz-function-jit: Heap-use-after-free in zval_ptr_dtor_nogc

Detailed Report: https://oss-fuzz.com/testcase?key=4584750845853696 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-function-jit Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x7944a94efd30 Crash State: zvalptrdtornogc...

vlc:vlc-demux-dec-libfuzzer-ps: Heap-buffer-overflow in Reassemble

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=4888372232650752 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-ps Job Type: aflasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x797256de0400...

cbor-java:FuzzDec: Security exception in co.nstant.in.cbor.CborDecoder.decodeNext

Detailed Report: https://oss-fuzz.com/testcase?key=5482017228390400 Project: cbor-java Fuzzing Engine: libFuzzer Fuzz Target: FuzzDec Job Type: libfuzzerasancbor-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State: co.nstant.in.cbor.CborDecoder.decodeNext...

OSV-2026-1127 Heap-buffer-overflow in read_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=543583447 Crash type: Heap-buffer-overflow READ 1 Crash state: readdata zipsourcecall zipsourceread...

libzip:zip_read_metadata_fuzzer: Heap-buffer-overflow in read_data

Project: https://github.com/nih-at/libzip.git Detailed Report: https://oss-fuzz.com/testcase?key=5950954642669568 Project: libzip Fuzzing Engine: libFuzzer Fuzz Target: zipreadmetadatafuzzer Job Type: libfuzzerasanlibzip Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

clusterfuzz v2.36.1

ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...

clusterfuzz v2.35.6

ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...