OSV-2025-742 Null-dereference READ in ubsan_GetStackTrace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=444622228 Crash type: Null-dereference READ Crash state: ubsanGetStackTrace...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=5251322908835840 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

envoy:rbac_filter_fuzz_test: Use-after-poison in google::api::expr::runtime::internal::DynamicList::operator

Detailed Report: https://oss-fuzz.com/testcase?key=6326364195323904 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: rbacfilterfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x5190000a65d8 Crash State:...

OSV-2025-723 Heap-buffer-overflow in processClientServerHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=444547710 Crash type: Heap-buffer-overflow READ 2 Crash state: processClientServerHello processtls fuzzquicgetcryptodata.c...

PT-2025-39098

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=444492076 Crash type: UNKNOWN READ Crash state: sam hrecs free tags sam hrecs parse single line sam hdr build from sam file...

hoextdown:hoedown_fuzzer: Segv on unknown address in hoedown_autolink__url

Project: https://github.com/kjdev/hoextdown.git Detailed Report: https://oss-fuzz.com/testcase?key=6317952367656960 Project: hoextdown Fuzzing Engine: afl Fuzz Target: hoedownfuzzer Job Type: aflasanhoextdown Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

ndpi:fuzz_quic_get_crypto_data: Heap-buffer-overflow in processClientServerHello

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4663656190377984 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzquicgetcryptodata Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x77d8f7be00b9 Crash...

joni:RegexMatcherFuzzer: Security exception in org.joni.Parser.parseCharClass

Project: https://github.com/jruby/joni.git Detailed Report: https://oss-fuzz.com/testcase?key=4689623965302784 Project: joni Fuzzing Engine: libFuzzer Fuzz Target: RegexMatcherFuzzer Job Type: libfuzzerasanjoni Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

elfutils:fuzz-libdwfl: Crash in __elf64_getphdr_wrlock

Detailed Report: https://oss-fuzz.com/testcase?key=5817803392483328 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libdwfl Job Type: libfuzzerubsanelfutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x79faf2775000 Crash State: elf64getphdrwrlock gelfgetphdr...

SUSE-SU-2025:20655-1 Security update for jq

This update for jq fixes the following issues: - CVE-2025-48060: Fixed stack-buffer-overflow in jqfuzzexecute jvstringvfmt bsc1244116...

Security update for jq

This update for jq fixes the following issues: CVE-2025-48060: Fixed stack-buffer-overflow in jqfuzzexecute jvstringvfmt bsc1244116. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run th...

ffmpeg:ffmpeg_AV_CODEC_ID_THP_fuzzer: Heap-buffer-overflow in av_vbprintf

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6106885091819520 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDTHPfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow...

binutils:fuzz_as: Use-of-uninitialized-value in get_cie_info

Detailed Report: https://oss-fuzz.com/testcase?key=6393922722267136 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzas Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: getcieinfo checkehframe emitexprwithreloc...

gdal:gdal_translate_fuzzer: Heap-buffer-overflow in CPLErr GDALResampleChunk_ConvolutionInternal<true, true>

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5520703391858688 Project: gdal Fuzzing Engine: honggfuzz Fuzz Target: gdaltranslatefuzzer Job Type: honggfuzzasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

elfutils:fuzz-libdwfl: Heap-buffer-overflow in __libelf_set_data_list_rdlock

Detailed Report: https://oss-fuzz.com/testcase?key=6310572573655040 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libdwfl Job Type: libfuzzerasanelfutils Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x780ce98b6000 Crash State: libelfsetdatalistrdlock...

exiv2:fuzz-read-write: Crash in Exiv2::MemIo::write

Project: https://github.com/Exiv2/exiv2.git Detailed Report: https://oss-fuzz.com/testcase?key=6327346299994112 Project: exiv2 Fuzzing Engine: afl Fuzz Target: fuzz-read-write Job Type: aflasanexiv2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x50610000631f Crash State:...

elfutils:fuzz-libdwfl: Crash in load_shdr_wrlock

Detailed Report: https://oss-fuzz.com/testcase?key=5773761388544000 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libdwfl Job Type: libfuzzerubsanelfutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7e8ec315b9b4 Crash State: loadshdrwrlock gelfgetshdr scndwarftype...

glslang:compile_fuzzer: Crash in glslang::TInfoSinkBase::location

Project: https://github.com/khronosgroup/glslang.git Detailed Report: https://oss-fuzz.com/testcase?key=5107213535608832 Project: glslang Fuzzing Engine: libFuzzer Fuzz Target: compilefuzzer Job Type: libfuzzerasanglslang Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00009fff8000...

Linux Distros Unpatched Vulnerability : CVE-2025-29476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in compresschunkfuzzer with oss-fuzz on commit 16450518afddcb3139de627157208e49bfef6987 in c-blosc2 v.2.17.0 and before...

Linux Distros Unpatched Vulnerability : CVE-2024-53429

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open62541 v1.4.6 is has an assertion failure in fuzzbinarydecode, which leads to a crash. CVE-2024-53429 Note that Nessus relies on the presence of the package ...