OSV-2026-1110 Check failed in CheckUnwind

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=541969271 Crash type: Check failed Crash state: CheckUnwind mrbbasicallocfunc pmnodehashinsert...

libyal:libvsgpt_partition_fuzzer: Crash in libvsgpt_partition_entry_read_data

Detailed Report: https://oss-fuzz.com/testcase?key=4850812543893504 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libvsgptpartitionfuzzer Job Type: libfuzzerasani386libyal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x264405c0 Crash State: libvsgptpartitionentryreaddata...

vlc:vlc-demux-dec-libfuzzer-ty: Heap-buffer-overflow in packetizer_PacketizeBlock

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=4765936858234880 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-ty Job Type: aflasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ 9 Crash Address: 0x76d3554e0e00...

libiec61850:fuzz_mms_encode: Heap-buffer-overflow in BerEncoder_encodeBitString

Project: https://github.com/mz-automation/libiec61850.git Detailed Report: https://oss-fuzz.com/testcase?key=4812125491757056 Project: libiec61850 Fuzzing Engine: libFuzzer Fuzz Target: fuzzmmsencode Job Type: libfuzzerasanlibiec61850 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1...

OSV-2026-1095 Heap-buffer-overflow in grk::t1::CodeblockDecompressImpl::parsePacketData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=540111888 Crash type: Heap-buffer-overflow READ 8 Crash state: grk::t1::CodeblockDecompressImpl::parsePacketData grk::PacketParser::readData grk::PacketParser::parsePacketData...

OSV-2026-1092 Security exception in com.github.javaparser.ast.expr.Name.accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=539142495 Crash type: Security exception Crash state: com.github.javaparser.ast.expr.Name.accept com.github.javaparser.ast.visitor.VoidVisitorAdapter.lambda$visit$133 java.base/java.util.Optional.ifPresent...

OSV-2026-1089 Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=537432125 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.RegexInjection.hookInternal com.codeintelligence.jazzer.sanitizers.RegexInjection.patternHook...

OSV-2026-1071 Security exception in com.github.javaparser.ast.expr.FieldAccessExpr.accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=537183300 Crash type: Security exception Crash state: com.github.javaparser.ast.expr.FieldAccessExpr.accept com.github.javaparser.ast.visitor.VoidVisitorAdapter.visit java.base/java.nio.ByteBuffer.position...

PT-2026-103508

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=538179114 Crash type: UNKNOWN READ Crash state: bytes1 char at unicode word left unicode at boundary...

Wapiti Web Application Vulnerability Scanner 3.3.1

Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities. This is the source code release...

libiec61850:fuzz_goose_subscriber: Heap-buffer-overflow in parseGoosePayload

Project: https://github.com/mz-automation/libiec61850.git Detailed Report: https://oss-fuzz.com/testcase?key=6094987193024512 Project: libiec61850 Fuzzing Engine: afl Fuzz Target: fuzzgoosesubscriber Job Type: aflasanlibiec61850 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

SUSE CVE-2026-64326

In the Linux kernel, the following vulnerability has been resolved: block: skip syncblockdev on surprise removal in bdevmarkdead bdevmarkdead's @surprise == true means the device is already gone. The filesystem callback fsbdevmarkdead honours this and skips syncfilesystem, but the bare block devi...

kfilemetadata:mobiextractor_fuzzer: Heap-buffer-overflow in Mobipocket::DocumentPrivate::init

Detailed Report: https://oss-fuzz.com/testcase?key=6018545499308032 Project: kfilemetadata Fuzzing Engine: afl Fuzz Target: mobiextractorfuzzer Job Type: aflasankfilemetadata Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x79c1d2995340 Crash State:...

libredwg:llvmfuzz: Heap-buffer-overflow in dwg_encode_add_object

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5527194965966848 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

clusterfuzz v2.35.1

ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...

mruby:mruby_fuzzer: Crash in bt_match

Detailed Report: https://oss-fuzz.com/testcase?key=5657316167581696 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerubsanmruby Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x55b5f7b6b000 Crash State: btmatch btmatch btmatch Sanitizer: undefined...

jsoncons:fuzz_ubjson_parser_max: Heap-buffer-overflow in jsoncons::ubjson::basic_ubjson_parser<jsoncons::stream_source<unsigned char, std

Project: https://github.com/danielaparker/jsoncons.git Detailed Report: https://oss-fuzz.com/testcase?key=5094934559129600 Project: jsoncons Fuzzing Engine: libFuzzer Fuzz Target: fuzzubjsonparsermax Job Type: libfuzzerasanjsoncons Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

jsoncons:fuzz_cbor: Heap-buffer-overflow in jsoncons::cbor::basic_cbor_parser<jsoncons::stream_source<unsigned char, std::__

Project: https://github.com/danielaparker/jsoncons.git Detailed Report: https://oss-fuzz.com/testcase?key=5082885028380672 Project: jsoncons Fuzzing Engine: libFuzzer Fuzz Target: fuzzcbor Job Type: libfuzzerasanjsoncons Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

clusterfuzz v2.35.0

ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...

clusterfuzz v2.34.0

ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...