SUSE SLED15 / SLES15 / openSUSE 15 Security Update : jq (SUSE-SU-2025:02915-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02915-1 advisory. - CVE-2025-48060: Fixed stack-buffer-overflow in jqfuzzexecute bsc1244116 Tenable has extracted the...

qemu:qemu-fuzz-i386-target-generic-fuzz-am53c974: Heap-buffer-overflow in scsi_cdb_length

Detailed Report: https://oss-fuzz.com/testcase?key=6329577241903104 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-am53c974 Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x515001dbb8a6 Crash State:...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=5495812689035264 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_PRORES_RAW_DEC_fuzzer: Heap-buffer-overflow in decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5093159807025152 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDPRORESRAWDECfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type:...

SUSE-SU-2025:02915-1 Security update for jq

This update for jq fixes the following issues: - CVE-2025-48060: Fixed stack-buffer-overflow in jqfuzzexecute bsc1244116...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=5915715669655552 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerubsancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

libmicrohttpd2:fuzz_response: Heap-buffer-overflow in response_add_auth_digest_challenge_alg

Detailed Report: https://oss-fuzz.com/testcase?key=6279829306802176 Project: libmicrohttpd2 Fuzzing Engine: libFuzzer Fuzz Target: fuzzresponse Job Type: libfuzzerasanlibmicrohttpd2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 15 Crash Address: 0x5110000003a0 Crash State:...

mruby:mruby_fuzzer: Stack-use-after-return in mrb_bint_as_float

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5378712284758016 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Stack-use-after-return READ 4 Crash Address: 0x7ea20ec040d0...

ffmpeg:ffmpeg_AV_CODEC_ID_SANM_fuzzer: Heap-buffer-overflow in old_codec37

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5383455572819968 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSANMfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

IntruderPayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists...

PT-2025-34835 · Git · Json2Avro

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438873397 Crash type: Security exception Crash state: com.fasterxml.jackson.databind.deser.std.UntypedObjectDeserializer$Vanilla.deser com.fasterxml.jackson.databind.deser.std.UntypedObjectDeserializer$Vanilla.mapOb...

binutils:fuzz_objcopy: Heap-buffer-overflow in bfd_getl32

Detailed Report: https://oss-fuzz.com/testcase?key=6099386087309312 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzobjcopy Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x50b000000704 Crash State: bfdgetl32...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=6434477288259584 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

OSV-2025-633 UNKNOWN WRITE in _lou_handlePassVariableAction

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438413376 Crash type: UNKNOWN WRITE Crash state: louhandlePassVariableAction passDoAction translateString...

Linux Distros Unpatched Vulnerability : CVE-2021-47476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - comedi: niusb6501: fix NULL-deref in command paths The driver uses endpoint-sized USB transfer buffers but had no sanity checks on the sizes. This can lead to...

OSV-2025-628 Null-dereference READ in ubsan_GetStackTrace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438294033 Crash type: Null-dereference READ Crash state: ubsanGetStackTrace...

graphicsmagick:coder_TIFF_fuzzer: Null-dereference READ in ProcessRows

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5564282822787072 Project: graphicsmagick Fuzzing Engine: honggfuzz Fuzz Target: coderTIFFfuzzer Job Type: honggfuzzasangraphicsmagick Platform Id: linux Crash Type: Null-dereference READ Crash...

imagemagick:encoder_webp_fuzzer: Null-dereference READ in ProcessRows

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5081898805428224 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderwebpfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Null-dereference READ Crash...

OSV-2025-620 Heap-buffer-overflow in FragPrepareChunk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437694938 Crash type: Heap-buffer-overflow WRITE 8 Crash state: FragPrepareChunk DemuxFrag demuxprocessstream...

OSV-2025-619 Heap-buffer-overflow in webvtt_domnode_SelectNodesInTree

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437537868 Crash type: Heap-buffer-overflow READ 1 Crash state: webvttdomnodeSelectNodesInTree webvttdomnodeSelectNodesInTree webvttdomnodeSelectNodesInTree...