OSV-2025-6 Heap-buffer-overflow in next_marker

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=387317434 Crash type: Heap-buffer-overflow READ 1 Crash state: nextmarker readmarkers consumemarkers...

mpv:fuzzer_protocol_edl: Heap-use-after-free in mp_decoder_wrapper_reinit

Project: https://github.com/mpv-player/mpv.git Detailed Report: https://oss-fuzz.com/testcase?key=5746627381362688 Project: mpv Fuzzing Engine: libFuzzer Fuzz Target: fuzzerprotocoledl Job Type: libfuzzerasanmpv Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x5160000252...

open62541:fuzz_json_decode: Negative-size-param in removeFieldFromEncoding

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=6046017237090304 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzjsondecode Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash...

OSV-2025-4 Heap-buffer-overflow in ___interceptor_pthread_create

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=386713390 Crash type: Heap-buffer-overflow READ 8 Crash state: interceptorpthreadcreate...

OSV-2025-3 Heap-buffer-overflow in avifImageAddUUIDProperty

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=386713389 Crash type: Heap-buffer-overflow READ 16 Crash state: avifImageAddUUIDProperty avif::testutil::PropsValid...

libvips:matrixsave_buffer_fuzzer: Heap-buffer-overflow in next_marker

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=6578104092393472 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: matrixsavebufferfuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Addres...

libavif:[email protected]: Heap-buffer-overflow in ___interceptor_pthread_create

Project: https://github.com/AOMediaCodec/libavif.git Detailed Report: https://oss-fuzz.com/testcase?key=6220810158669824 Project: libavif Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzerasanlibavif Platform Id: linux Crash Type:...

OSV-2025-1 Segv on unknown address in [email protected]

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=386572864 Crash type: Segv on unknown address Crash state: [email protected]...

libavif:[email protected]: Segv on unknown address in [email protected]

Project: https://github.com/AOMediaCodec/libavif.git Detailed Report: https://oss-fuzz.com/testcase?key=4573834451156992 Project: libavif Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzerasanlibavif Platform Id: linux Crash Type:...

OSV-2024-1417 Heap-buffer-overflow in cv::PngDecoder::read_from_io

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=386688710 Crash type: Heap-buffer-overflow READ 4 Crash state: cv::PngDecoder::readfromio cv::PngDecoder::readchunk cv::PngDecoder::readHeader...

PT-2026-29081

Name of the Vulnerable Software and Affected Versions OpenSC versions prior to 0.27.0 Description OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, providing a crafted input to the fuzz pkcs15 reader harness results in an out-of-bounds heap read within the...

opencv:core_fuzzer: Heap-buffer-overflow in cv::PngDecoder::read_from_io

Project: https://github.com/opencv/opencv.git Detailed Report: https://oss-fuzz.com/testcase?key=6306609613045760 Project: opencv Fuzzing Engine: libFuzzer Fuzz Target: corefuzzer Job Type: libfuzzerasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x50200000023...

OSV-2024-1406 UNKNOWN READ in _TIFFVSetField

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=385406655 Crash type: UNKNOWN READ Crash state: TIFFVSetField TIFFSetField TIFFFetchNormalTag...

archaius-core:DynamicPropertyFuzzer: Security exception in java.base/java.nio.CharBuffer.wrap

Detailed Report: https://oss-fuzz.com/testcase?key=5578789043634176 Project: archaius-core Fuzzing Engine: libFuzzer Fuzz Target: DynamicPropertyFuzzer Job Type: libfuzzerasanarchaius-core Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

butterfly-fuzz (>=0.1.0, <=0.2.2), libafl_frida (>=0.1.0, <=0.3.2) +4 more potentially affected by unknown CVE via libafl (>=0.1.0, <=0.10.1)

libafl CARGO version =0.1.0, =0.1.0, =0.1.0, =0.6.0, =0.6.0, =0.3.1, =0.1.0, =0.10.1 Source cves: unknown CVE Source advisory: GHSA-F7QJ-V3VP-4856...

wamr:wasm_mutator_fuzz_loader: Heap-buffer-overflow in aot_instantiate

Project: https://github.com/bytecodealliance/wasm-micro-runtime.git Detailed Report: https://oss-fuzz.com/testcase?key=5300312985894912 Project: wamr Fuzzing Engine: libFuzzer Fuzz Target: wasmmutatorfuzzloader Job Type: libfuzzerasanwamr Platform Id: linux Crash Type: Heap-buffer-overflow READ 8...

OSV-2024-1397 Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=385326423 Crash type: Security exception Crash state: org.springframework.expression.spel.ast.OpPlus.getValueInternal java.base/java.util.HashMap.get org.springframework.core.convert.TypeDescriptor.valueOf...

wget:wget_options_fuzzer: Heap-use-after-free in hash_table_destroy

Detailed Report: https://oss-fuzz.com/testcase?key=4575131024818176 Project: wget Fuzzing Engine: honggfuzz Fuzz Target: wgetoptionsfuzzer Job Type: honggfuzzasanwget Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x5050000c30d0 Crash State: hashtabledestroy cleanuphtmlu...

OSV-2024-1391 Heap-buffer-overflow in gsicc_create_getv2buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=384972943 Crash type: Heap-buffer-overflow READ 12 Crash state: gsicccreategetv2buffer pdficcbasedcolorspace pdfcolorspacenamed...

kernel: xfrm: fix one more kernel-infoleak in algo dumping

A vulnerability was found in the xfrm module in the Linux Kernel. This issue was discovered during fuzz testing, where uninitialized memory containing potentially sensitive data was inadvertently copied to user-space. This issue occurs when dumping IPsec algorithm data structures, exposing random...