OSV-2025-541 Heap-buffer-overflow in js_create_function

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=430091578 Crash type: Heap-buffer-overflow READ 2 Crash state: jscreatefunction JSEvalInternal JSEvalObject...

OSV-2025-538 Heap-double-free in policydb_destroy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=430091583 Crash type: Heap-double-free Crash state: policydbdestroy checkpolicy-fuzzer.c definegenfscontext...

upx:list_packed_file_fuzzer: Heap-buffer-overflow in N_BELE_RTP::LEPolicy::get32

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=6493481227059200 Project: upx Fuzzing Engine: libFuzzer Fuzz Target: listpackedfilefuzzer Job Type: libfuzzerasanupx Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x51b00000146c...

jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)

A flaw was found in jq, a command line JSON processor. A specially crafted input can cause a heap-based buffer over-read when formatting an empty string because it was not properly null-terminated, causing a crash and resulting in a denial of service...

jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)

A flaw was found in jq, a command line JSON processor. A specially crafted input can cause a heap-based buffer over-read when formatting an empty string because it was not properly null-terminated, causing a crash and resulting in a denial of service...

jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)

A flaw was found in jq, a command line JSON processor. A specially crafted input can cause a heap-based buffer over-read when formatting an empty string because it was not properly null-terminated, causing a crash and resulting in a denial of service...

jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)

A flaw was found in jq, a command line JSON processor. A specially crafted input can cause a heap-based buffer over-read when formatting an empty string because it was not properly null-terminated, causing a crash and resulting in a denial of service...

OSV-2025-534 Heap-use-after-free in ih264_inter_pred_luma_horz_ssse3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=428771938 Crash type: Heap-use-after-free READ 16 Crash state: ih264interpredlumahorzssse3 ih264dmotioncompensatemp isvcddecoderecontfrnmbnonbaselyr...

OSV-2025-528 Heap-buffer-overflow in xmlnode_parser_structural_error_libxml

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=429429092 Crash type: Heap-buffer-overflow WRITE 4 Crash state: xmlnodeparserstructuralerrorlibxml xmlRaiseError xmlParseAttValueInternal...

libavc:svc_dec_fuzzer: Heap-use-after-free in ih264_inter_pred_luma_horz_ssse3

Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=5156989342908416 Project: libavc Fuzzing Engine: afl Fuzz Target: svcdecfuzzer Job Type: aflasanlibavc Platform Id: linux Crash Type:...

mruby:mruby_fuzzer: Segv on unknown address in mod_compare_hierarchy

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5238507620859904 Project: mruby Fuzzing Engine: honggfuzz Fuzz Target: mrubyfuzzer Job Type: honggfuzzasanmruby Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

OSV-2025-525 UNKNOWN READ in std::__1::__function::__func<cv::PngDecoder::compose_frame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=429429085 Crash type: UNKNOWN READ Crash state: std::1::function::funccv::PngDecoder::composeframe cv::ParallelLoopBodyWrapper::operator cv::ThreadPool::run...

vulkan-loader:instance_enumerate_fuzzer: Null-dereference READ in ubsan_GetStackTrace

Project: https://github.com/khronosgroup/Vulkan-Loader.git Detailed Report: https://oss-fuzz.com/testcase?key=6483717088673792 Project: vulkan-loader Fuzzing Engine: libFuzzer Fuzz Target: instanceenumeratefuzzer Job Type: libfuzzerubsanvulkan-loader Platform Id: linux Crash Type: Null-dereferenc...

pidgin:pidgin_xml_fuzzer: Heap-buffer-overflow in xmlnode_parser_structural_error_libxml

Detailed Report: https://oss-fuzz.com/testcase?key=5589985933983744 Project: pidgin Fuzzing Engine: libFuzzer Fuzz Target: pidginxmlfuzzer Job Type: libfuzzerasanpidgin Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x602000000009 Crash State:...

ndpi:fuzz_filecfg_protocols: Heap-buffer-overflow in load_protocols_file_fd

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4685996853886976 Project: ndpi Fuzzing Engine: honggfuzz Fuzz Target: fuzzfilecfgprotocols Job Type: honggfuzzasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_JPEG2000_DEC_fuzzer: Use-of-uninitialized-value in jpegNUMBER_bitbuf_refill_backwards

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5736930522497024 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDJPEG2000DECfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...

PT-2025-34466 · Git · Clamav

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=428754704 Crash type: Invalid-free Crash state: pdf decodestream pdf extract obj cli pdf...

dnsmasq:fuzz_rfc1035: Heap-buffer-overflow in resize_packet

Detailed Report: https://oss-fuzz.com/testcase?key=4968052573929472 Project: dnsmasq Fuzzing Engine: afl Fuzz Target: fuzzrfc1035 Job Type: aflasandnsmasq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x621000002718 Crash State: resizepacket fuzzrfc1035.c Sanitizer:...

llvm:clang-fuzzer: Use-after-poison in GetFullTypeForDeclarator

Detailed Report: https://oss-fuzz.com/testcase?key=6543921859854336 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Use-after-poison WRITE 16 Crash Address: 0x52100009b160 Crash State: GetFullTypeForDeclarator...

matio:matio_fuzzer: Use-of-uninitialized-value in Mat_VarDuplicate

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=5481694054645760 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzermsanmatio Platform Id: linux Crash Type: Use-of-uninitialized-val...