OSV-2025-618 Heap-buffer-overflow in iTUNTripletCallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437731214 Crash type: Heap-buffer-overflow READ 3 Crash state: iTUNTripletCallback SetupMeta MP4LoadMeta...

OSV-2025-617 UNKNOWN WRITE in MP4_BoxFree

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437783630 Crash type: UNKNOWN WRITE Crash state: MP4BoxFree MP4ReadBoxContainerChildrenIndexed MP4ReadBoxContainer...

OSV-2025-616 Heap-buffer-overflow in Open

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437593508 Crash type: Heap-buffer-overflow READ 7 Crash state: Open demuxProbe vlcmoduleload...

OSV-2025-615 Index-out-of-bounds in hevc_get_picture_size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437760137 Crash type: Index-out-of-bounds Crash state: hevcgetpicturesize ParseNALBlock PacketizeParse...

Linux Distros Unpatched Vulnerability : CVE-2025-37773

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtiofs: add filesystem context source name check In certain scenarios, for example, during fuzz testing, the source name may be NULL, which could lead to a...

Linux Distros Unpatched Vulnerability : CVE-2024-39510

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in cachefilesondemanddaemonread We got the following iss...

vlc:vlc-demux-dec-libfuzzer-mp4: Heap-buffer-overflow in iTUNTripletCallback

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=5161820828794880 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-mp4 Job Type: aflasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address: 0x503000009da2...

vlc:vlc-demux-dec-libfuzzer-mp4: Crash in MP4_BoxFree

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=5061052809412608 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-mp4 Job Type: aflasanvlc Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fbb0d0f47f0 Crash State:...

vlc:vlc-demux-dec-libfuzzer-wav: Heap-buffer-overflow in Open

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=4604660222853120 Project: vlc Fuzzing Engine: libFuzzer Fuzz Target: vlc-demux-dec-libfuzzer-wav Job Type: libfuzzerasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ 7 Crash Address:...

SUSE-SU-2025:20591-1 Security update for jq

This update for jq fixes the following issues: - CVE-2025-48060: Fixed stack-buffer-overflow in jqfuzzexecute jvstringvfmt bsc1244116 - CVE-2024-23337: Fixed signed integer overflow in jv.c:jvparraywrite bsc1243450 - CVE-2024-53427: Fixed stack-buffer-overflow in the decNumberCopy function in...

Security update for jq

This update for jq fixes the following issues: CVE-2025-48060: Fixed stack-buffer-overflow in jqfuzzexecute jvstringvfmt bsc1244116 CVE-2024-23337: Fixed signed integer overflow in jv.c:jvparraywrite bsc1243450 CVE-2024-53427: Fixed stack-buffer-overflow in the decNumberCopy function in decNumber...

libdwarf:fuzz_globals: Heap-buffer-overflow in _dwarf_memcpy_noswap_bytes

Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=4771320878661632 Project: libdwarf Fuzzing Engine: libFuzzer Fuzz Target: fuzzglobals Job Type: libfuzzerasanlibdwarf Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_NOTCHLC_fuzzer: Use-of-uninitialized-value in decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5597015691296768 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDNOTCHLCfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

libigl:igl_fuzzer: Invalid-free in std::__1::vector<double, std::__1::allocator<double>>::__append

Detailed Report: https://oss-fuzz.com/testcase?key=5389665642545152 Project: libigl Fuzzing Engine: afl Fuzz Target: iglfuzzer Job Type: aflasanlibigl Platform Id: linux Crash Type: Invalid-free Crash Address: 0x504000001260 Crash State: std::1::vector::append igl::MshLoader::parsenodes...

OSV-2025-591 UNKNOWN READ in mov_read_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=435536867 Crash type: UNKNOWN READ Crash state: movreadheader avformatopeninput demuxopenlavf...

PT-2025-32599 · Git · Mpv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=435536867 Crash type: UNKNOWN READ Crash state: mov read header avformat open input demux open lavf...

ffmpeg:ffmpeg_AV_CODEC_ID_APV_fuzzer: Crash in ff_apv_decode_transquant_avx2

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6194885205229568 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDAPVfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: UNKNOWN WRITE Crash...

OSV-2025-589 Heap-buffer-overflow in isvcd_decode_recon_tfr_nmb_base_lyr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=435086517 Crash type: Heap-buffer-overflow READ 1 Crash state: isvcddecoderecontfrnmbbaselyr isvcdparseinterslicedatacabac isvcdparsepslice...

PT-2025-32500 · Git · Libavc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=435086517 Crash type: Heap-buffer-overflow READ 1 Crash state: isvcd decode recon tfr nmb base lyr isvcd parse inter slice data cabac isvcd parse pslice...

OSV-2025-584 Heap-buffer-overflow in isvcd_mark_err_slice_skip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=434978682 Crash type: Heap-buffer-overflow READ 2 Crash state: isvcdmarkerrsliceskip isvcdvideodecode Codec::decodeFrame...