OSV-2025-570 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=433311401 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.io.BufferedWriter.write java.base/java.io.Writer.write...

PT-2025-31717 · Git · Checkstyle

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=433311401 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.io.BufferedWriter.write java.base/java.io.Writer.write...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_match_host_subprotocol

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4687656288321536 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x5040000000bc Crash State...

wolfssl:fuzzer-wolfssh-client: Null-dereference READ in DoUserAuthInfoRequest

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6341957800755200 Project: wolfssl Fuzzing Engine: honggfuzz Fuzz Target: fuzzer-wolfssh-client Job Type: honggfuzzasanwolfssl Platform Id: linux Crash Type: Null-dereference READ Crash Address:...

libjxl:streaming_fuzzer: Heap-buffer-overflow in jxl::FindBestPatchDictionary

Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=5409468861186048 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: streamingfuzzer Job Type: libfuzzerasanlibjxl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

qemu:qemu-fuzz-i386-target-generic-fuzz-e1000: Stack-buffer-overflow in eNUMBER_receive_iov

Detailed Report: https://oss-fuzz.com/testcase?key=5959823521021952 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-e1000 Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address: 0x7f029bfab438 Crash State:...

OSV-2025-550 Use-of-uninitialized-value in CFF::cff2_cs_opset_t<cff2_cs_opset_subr_subset_t, CFF::subr_subset_param_t, CFF:

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=431867896 Crash type: Use-of-uninitialized-value Crash state: CFF::cff2csopsettcff2csopsetsubrsubsett, CFF::subrsubsetparamt, CFF: cff2csopsetsubrsubsett::processop CFF::subrsubsettertcff2subrsubsettert,...

PT-2025-31561 · Git · Harfbuzz

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=431867896 Crash type: Use-of-uninitialized-value Crash state: CFF::cff2 cs opset tcff2 cs opset subr subset t, CFF::subr subset param t, CFF: cff2 cs opset subr subset t::process op CFF::subr subsetter tcff2 subr subsetter t,...

OSV-2025-547 Security exception in com.alibaba.fastjson2.JSONReader.readArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=431584944 Crash type: Security exception Crash state: com.alibaba.fastjson2.JSONReader.readArray java.base/java.nio.charset.CharsetEncoder. java.base/java.nio.charset.CharsetEncoder...

llvm:clang-fuzzer: Heap-use-after-free in clang::Parser::ParseCastExpression

Detailed Report: https://oss-fuzz.com/testcase?key=4707380489420800 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x50600000dd20 Crash State: clang::Parser::ParseCastExpression...

gpac:fuzz_parse: Index-out-of-bounds in gf_odf_ac4_cfg_alternative_info

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4529369261604864 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzparse Job Type: libfuzzerubsangpac Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

OSV-2025-544 Heap-buffer-overflow in N_BELE_RTP::LEPolicy::get32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=430110068 Crash type: Heap-buffer-overflow READ 4 Crash state: NBELERTP::LEPolicy::get32 PackLinuxElf32::elflookup PackLinuxElf32::PackLinuxElf32help1...

OSV-2025-542 Use-of-uninitialized-value in httpEncode64_3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=430110066 Crash type: Use-of-uninitialized-value Crash state: httpEncode643 fuzzhttpcore.c fuzzhttpcore.c...

OSV-2025-541 Heap-buffer-overflow in js_create_function

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=430091578 Crash type: Heap-buffer-overflow READ 2 Crash state: jscreatefunction JSEvalInternal JSEvalObject...

OSV-2025-538 Heap-double-free in policydb_destroy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=430091583 Crash type: Heap-double-free Crash state: policydbdestroy checkpolicy-fuzzer.c definegenfscontext...

upx:list_packed_file_fuzzer: Heap-buffer-overflow in N_BELE_RTP::LEPolicy::get32

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=6493481227059200 Project: upx Fuzzing Engine: libFuzzer Fuzz Target: listpackedfilefuzzer Job Type: libfuzzerasanupx Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x51b00000146c...

jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)

A flaw was found in jq, a command line JSON processor. A specially crafted input can cause a heap-based buffer over-read when formatting an empty string because it was not properly null-terminated, causing a crash and resulting in a denial of service...

jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)

A flaw was found in jq, a command line JSON processor. A specially crafted input can cause a heap-based buffer over-read when formatting an empty string because it was not properly null-terminated, causing a crash and resulting in a denial of service...

jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)

A flaw was found in jq, a command line JSON processor. A specially crafted input can cause a heap-based buffer over-read when formatting an empty string because it was not properly null-terminated, causing a crash and resulting in a denial of service...

jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)

A flaw was found in jq, a command line JSON processor. A specially crafted input can cause a heap-based buffer over-read when formatting an empty string because it was not properly null-terminated, causing a crash and resulting in a denial of service...