Astra Linux – Vulnerability in jq

jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-bufferoverflow error occurs in the jvstringvfmt function within the jqfuzzexecute harness from oss-fuzz. This error happens at line 1456 of the jv.c file: void p = mallocsz;. As of the time of publication, no patch...

imagemagick:encoder_jxl_fuzzer: Use-of-uninitialized-value in jxl::LowMemoryRenderPipeline::RenderRect

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5144018213470208 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderjxlfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=6460408644042752 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

OSV-2025-865 Heap-buffer-overflow in generic_unpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=456158449 Crash type: Heap-buffer-overflow READ 4 Crash state: genericunpack Imf34::ScanLineInputFile::Data::readPixels Imf34::InputFile::readPixels...

mruby:mruby_fuzzer: Heap-buffer-overflow in mrb_pack_pack

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6462498313404416 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x7a109f6e0191...

OSV-2025-858 Use-of-uninitialized-value in pcpp::byteArrayToHexString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=454944849 Crash type: Use-of-uninitialized-value Crash state: pcpp::byteArrayToHexString pcpp::PacketTrailerLayer::toString FuzzTarget.cpp...

upx:list_packed_file_fuzzer: Heap-buffer-overflow in PackMachBase<N_Mach::MachClass_64<N_BELE_CTP::LEPolicy>>::canUnpack

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=6666275687563264 Project: upx Fuzzing Engine: honggfuzz Fuzz Target: listpackedfilefuzzer Job Type: honggfuzzasanupx Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x771dc6fe7781...

OSV-2025-845 Global-buffer-overflow in icaltime_day_of_year

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=452914686 Crash type: Global-buffer-overflow READ 4 Crash state: icaltimedayofyear expandyeardays iteratorsetstart...

libical:libical_extended_fuzzer: Global-buffer-overflow in icaltime_day_of_year

Project: https://github.com/libical/libical.git Detailed Report: https://oss-fuzz.com/testcase?key=6602960185655296 Project: libical Fuzzing Engine: afl Fuzz Target: libicalextendedfuzzer Job Type: aflasanlibical Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address:...

javaparser:parseFuzzer: Security exception in java.base/java.util.ArrayList.forEach

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=6588791356981248 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

OSV-2025-834 Heap-buffer-overflow in std::__1::pair<int, arrow::util::RleBitPackedParser::ControlFlow> arrow::util::R

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=451150486 Crash type: Heap-buffer-overflow READ 3 Crash state: std::1::pair arrow::util::R arrow::util::RleBitPackedDecoder::GetBatch auto parquet::DictByteArrayDecoderImpl::DecodeArrowDense...

quickjs:fuzz_compile: Heap-use-after-free in JS_DefineProperty

Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=5672558654717952 Project: quickjs Fuzzing Engine: honggfuzz Fuzz Target: fuzzcompile Job Type: honggfuzzasanquickjs Platform Id: linux Crash Type:...

cpython3:fuzz_pycompile: Heap-buffer-overflow in _PyTokenizer_ensure_utf8

Project: https://github.com/python/cpython.git Detailed Report: https://oss-fuzz.com/testcase?key=6597781046493184 Project: cpython3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzpycompile Job Type: libfuzzerasancpython3 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

maven-model:Xpp3ReaderFuzzer: Security exception in java.base/java.lang.AbstractStringBuilder.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=5732178102386688 Project: maven-model Fuzzing Engine: libFuzzer Fuzz Target: Xpp3ReaderFuzzer Job Type: libfuzzerasanmaven-model Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

imagemagick:encoder_jxl_fuzzer: Global-buffer-overflow in void jxl::N_AVX2::WriteToOutputStage::StoreUnsignedRow<unsigned char>

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5958109588946944 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderjxlfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Global-buffer-overflow READ 16...

OSV-2025-825 UNKNOWN WRITE in RescalerImportRowExpand_SSE2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=449781448 Crash type: UNKNOWN WRITE Crash state: RescalerImportRowExpandSSE2 WebPRescalerImport ProcessRows...

OSV-2025-824 Use-of-uninitialized-value in JS_DefineProperty

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=449772271 Crash type: Use-of-uninitialized-value Crash state: JSDefineProperty buildbacktrace JSCallInternal...

EUVD-2003-0256

Malware in sbrugna...

php:php-fuzz-execute: Use-of-uninitialized-value in find_implicit_binds_recursively

Detailed Report: https://oss-fuzz.com/testcase?key=5868110864515072 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzermsanphp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: findimplicitbindsrecursively...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in std::__1::pair<int, arrow::util::RleBitPackedParser::ControlFlow> arrow::util::R

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=4705426173394944 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7b953aee08e8 Crash...