OSV-2026-357 Heap-buffer-overflow in _cupsRasterAddError

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=489911024 Crash type: Heap-buffer-overflow WRITE 3 Crash state: cupsRasterAddError cupsRasterExecPS fuzzcups.c...

stitch-fuzz (0.1.2) potentially affected by CVE-2026-28277 via langgraph (0.2.68)

langgraph PYPI version 0.2.68 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - stitch-fuzz 0.1.2 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

stitch-fuzz (0.1.2) potentially affected by CVE-2026-28277 via langgraph (0.2.68)

langgraph PYPI version 0.2.68 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - stitch-fuzz 0.1.2 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

vlc:vlc-demux-dec-libfuzzer-ts: Heap-buffer-overflow in PESDataChainHandle

Detailed Report: https://oss-fuzz.com/testcase?key=5718058584047616 Project: vlc Fuzzing Engine: honggfuzz Fuzz Target: vlc-demux-dec-libfuzzer-ts Job Type: honggfuzzasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x7b3616536f03 Crash State: PESDataChainHandle...

OSV-2026-356 Security exception in org.apache.lucene.util.ArrayUtil.copyOfSubArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=489370855 Crash type: Security exception Crash state: org.apache.lucene.util.ArrayUtil.copyOfSubArray org.apache.lucene.util.BytesRef.deepCopyOf org.apache.lucene.index.Term...

OSV-2026-354 Use-of-uninitialized-value in pcpp::MplsLayer::toString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=489360236 Crash type: Use-of-uninitialized-value Crash state: pcpp::MplsLayer::toString FuzzTarget.cpp pcpp::RawPacket::RawPacket...

vlc:vlc-demux-dec-libfuzzer-image: Heap-buffer-overflow in IsMxpeg

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=6476597489369088 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-image Job Type: aflasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7c6bcc4e17e...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the decode0x0805 function of the CRW image parser. An attacker can cause the application to read memory outside the bounds of an allocated buffer by providing a specially crafted CRW image file. Remediation A fix w...

OSV-2026-343 Heap-buffer-overflow in pcre2_compile_32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=488713937 Crash type: Heap-buffer-overflow WRITE 4 Crash state: pcre2compile32 pcre2fuzzsupport.c...

OSV-2026-341 Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=488745540 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.RegexInjection.hookInternal com.codeintelligence.jazzer.sanitizers.RegexInjection.patternHook...

OSV-2026-338 Use-of-uninitialized-value in pjsip_auth_clt_init_req

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=488721002 Crash type: Use-of-uninitialized-value Crash state: pjsipauthcltinitreq fuzz-sip.c fuzz-sip.c...

wasmer:universal_llvm: Stack-buffer-overflow in wasmer_vm_memory32_grow

Detailed Report: https://oss-fuzz.com/testcase?key=5686748306014208 Project: wasmer Fuzzing Engine: libFuzzer Fuzz Target: universalllvm Job Type: libfuzzerasanwasmer Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 8 Crash Address: 0x77e629c9dc70 Crash State: wasmervmmemory32grow...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in avi_parse_input_file

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4678488962695168 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x774ecade040c Crash State:...

pcre2:pcre2_fuzzer_32: Heap-buffer-overflow in pcre2_compile_32

Project: svn://vcs.exim.org/pcre2/code/trunk https://github.com/PCRE2Project/pcre2.git Detailed Report: https://oss-fuzz.com/testcase?key=6378939999387648 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer32 Job Type: libfuzzerasani386pcre2 Platform Id: linux Crash Type:...

pjsip:fuzz-sip: Use-of-uninitialized-value in pjsip_auth_clt_init_req

Project: https://github.com/pjsip/pjproject.git Detailed Report: https://oss-fuzz.com/testcase?key=5352060429336576 Project: pjsip Fuzzing Engine: libFuzzer Fuzz Target: fuzz-sip Job Type: libfuzzermsanpjsip Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

wasmer:universal_llvm: Crash in universal_llvm

Detailed Report: https://oss-fuzz.com/testcase?key=5114350968045568 Project: wasmer Fuzzing Engine: libFuzzer Fuzz Target: universalllvm Job Type: libfuzzerasanwasmer Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x75b248d85fdb Crash State: universalllvm Sanitizer: address ASAN...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::BgpLayer::computeCalculateFields

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5932977975787520 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 16 Crash...

OSV-2026-324 Security exception in java.base/java.util.Arrays.copyOfRange

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=488130836 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOfRange java.base/java.lang.StringUTF16.newString java.base/java.lang.StringBuilder.toString...

freerdp:TestFuzzCoreServer: Heap-use-after-free in Stream_EnsureValidity

Project: https://github.com/FreeRDP/FreeRDP.git Detailed Report: https://oss-fuzz.com/testcase?key=4732227727720448 Project: freerdp Fuzzing Engine: centipede Fuzz Target: TestFuzzCoreServer Job Type: centipedeasanfreerdp Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in Box_prfr::write

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4713306517733376 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...