CVE-2025-48060: Stack-based Buffer Overflow

jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function jvstringvfmt in the jqfuzzexecute harness from oss-fuzz. This crash happens on file jv.c, line 1456 void p = mallocsz;. As of time of publication, no patched versions are...

CVE-2025-37939

In the Linux kernel, the following vulnerability has been resolved: libbpf: Fix accessing BTF.ext corerelo header Update btfextparseinfo to ensure the corerelo header is present before reading its fields. This avoids a potential buffer read overflow reported by the OSS Fuzz project...

CVE-2025-37939

CVE-2025-37939 affects the Linux kernel in the libbpf component, specifically the BTF.ext core_relo header handling. The issue arises when btf_ext_parse_info() reads fields of the core_relo header without confirming its presence, potentially triggering a buffer read overflow as reported by OSS-Fu...

OSV-2025-384 Segv on unknown address in rtpp_refcnt_decref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=418437591 Crash type: Segv on unknown address Crash state: rtpprefcntdecref hashtablepurge rtppwrefpurge...

PT-2025-22245 · Git +1 · Rtpproxy

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software experiences a segmentation fault Segv on an unknown address during operation. The crash state involves the rtpp refcnt decref, hash table purge,...

CVE-2025-37939: Buffer Copy without Checking Size of Input

In the Linux kernel, the following vulnerability has been resolved: libbpf: Fix accessing BTF.ext corerelo header Update btfextparseinfo to ensure the corerelo header is present before reading its fields. This avoids a potential buffer read overflow reported by the OSS Fuzz project...

PT-2025-22200 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential buffer read overflow issue has been identified in the Linux kernel, specifically in the libbpf component. The issue arises when accessing the BTF.ext core relo header witho...

ffmpeg:ffmpeg_BSF_APV_METADATA_fuzzer: Heap-buffer-overflow in ff_copy_bits

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5773904646045696 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFAPVMETADATAfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

poppler:qt_annot_fuzzer: Heap-use-after-free in Annot::decRefCnt

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=4631275841585152 Project: poppler Fuzzing Engine: honggfuzz Fuzz Target:...

kimageformats:kimgio_heif_fuzzer: Container-overflow in Box_saiz::parse

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5690973256744960 Project: kimageformats Fuzzing Engine: afl Fuzz Target: kimgioheiffuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Container-overflow WRITE 1 Crash Address:...

libconfig:config_read_fuzzer: Heap-buffer-overflow in fuzz_data_path

Detailed Report: https://oss-fuzz.com/testcase?key=5828256958054400 Project: libconfig Fuzzing Engine: libFuzzer Fuzz Target: configreadfuzzer Job Type: libfuzzerasanlibconfig Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x521000003900 Crash State: fuzzdatapath...

libconfig:config_read_fuzzer: Heap-buffer-overflow in LLVMFuzzerCustomMutator

Detailed Report: https://oss-fuzz.com/testcase?key=5194040679399424 Project: libconfig Fuzzing Engine: libFuzzer Fuzz Target: configreadfuzzer Job Type: libfuzzerasanlibconfig Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x52100000c500 Crash State:...

OSV-2025-374 Use-of-uninitialized-value in pcpp::SomeIpSdEntry::SomeIpSdEntry

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=418036603 Crash type: Use-of-uninitialized-value Crash state: pcpp::SomeIpSdEntry::SomeIpSdEntry pcpp::SomeIpSdLayer::getEntries readParsedPacket...

OSV-2025-373 Heap-use-after-free in aiMesh::~aiMesh

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=417905428 Crash type: Heap-use-after-free READ 8 Crash state: aiMesh::aiMesh aiScene::aiScene Assimp::BaseProcess::ExecuteOnScene...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=5360666901020672 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

wamr:wamr_fuzz_fast_interp: Heap-buffer-overflow in wasm_loader_unload

Project: https://github.com/bytecodealliance/wasm-micro-runtime.git Detailed Report: https://oss-fuzz.com/testcase?key=5172242176868352 Project: wamr Fuzzing Engine: libFuzzer Fuzz Target: wamrfuzzfastinterp Job Type: libfuzzerasanwamr Platform Id: linux Crash Type: Heap-buffer-overflow READ 8...

htslib:hts_open_fuzzer: Crash in cram_decode_slice

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=4519689839771648 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerasanhtslib Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000029819008 Crash...

OSV-2025-371 Index-out-of-bounds in tcp_analyze_sequence_number

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=417518224 Crash type: Index-out-of-bounds Crash state: tcpanalyzesequencenumber dissecttcp calldissectorthroughhandle...

assimp:assimp_fuzzer: Heap-use-after-free in aiMesh::~aiMesh

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5639177226223616 Project: assimp Fuzzing Engine: honggfuzz Fuzz Target: assimpfuzzer Job Type: honggfuzzasanassimp Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x51a0000006...

OSV-2025-369 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=417515043 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/sun.nio.cs.UTF8$Encoder.encodeArrayLoop java.base/sun.nio.cs.UTF8$Encoder.encodeLoop...