CVE-2022-40159

DISPUTED This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA...

OSV-2025-396 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=419059436 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/sun.nio.cs.UTF8$Encoder.encodeArrayLoop java.base/sun.nio.cs.UTF8$Encoder.encodeLoop...

PT-2025-23420 · Git +1 · Checkstyle

Name of the Vulnerable Software and Affected Versions: Checkstyle affected versions not specified Description: The software experiences a security exception during parsing of Java expressions within the com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr component. The crash stat...

CVE-2003-0261

fuzz 0.6 and earlier creates temporary files insecurely, which could allow local users to gain root privileges...

AZL-61974 CVE-2025-48060 affecting package jq for versions less than 1.6-4

jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function jvstringvfmt in the jqfuzzexecute harness from oss-fuzz. This crash happens on file jv.c, line 1456 void p = mallocsz;. As of time of publication, no patched versions are...

ALPINE-CVE-2025-48060

jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function jvstringvfmt in the jqfuzzexecute harness from oss-fuzz. This crash happens on file jv.c, line 1456 void p = mallocsz;. As of time of publication, no patched versions are...

DEBIAN-CVE-2025-48060

jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function jvstringvfmt in the jqfuzzexecute harness from oss-fuzz. This crash happens on file jv.c, line 1456 void p = mallocsz;. As of time of publication, no patched versions are...

AZL-61968 CVE-2025-48060 affecting package jq for versions less than 1.7.1-4

jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function jvstringvfmt in the jqfuzzexecute harness from oss-fuzz. This crash happens on file jv.c, line 1456 void p = mallocsz;. As of time of publication, no patched versions are...

CVE-2025-48060: Stack-based Buffer Overflow

jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function jvstringvfmt in the jqfuzzexecute harness from oss-fuzz. This crash happens on file jv.c, line 1456 void p = mallocsz;. As of time of publication, no patched versions are...

CVE-2025-37939

In the Linux kernel, the following vulnerability has been resolved: libbpf: Fix accessing BTF.ext corerelo header Update btfextparseinfo to ensure the corerelo header is present before reading its fields. This avoids a potential buffer read overflow reported by the OSS Fuzz project...

CVE-2025-37939

CVE-2025-37939 affects the Linux kernel in the libbpf component, specifically the BTF.ext core_relo header handling. The issue arises when btf_ext_parse_info() reads fields of the core_relo header without confirming its presence, potentially triggering a buffer read overflow as reported by OSS-Fu...

OSV-2025-384 Segv on unknown address in rtpp_refcnt_decref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=418437591 Crash type: Segv on unknown address Crash state: rtpprefcntdecref hashtablepurge rtppwrefpurge...

CVE-2025-37939: Buffer Copy without Checking Size of Input

In the Linux kernel, the following vulnerability has been resolved: libbpf: Fix accessing BTF.ext corerelo header Update btfextparseinfo to ensure the corerelo header is present before reading its fields. This avoids a potential buffer read overflow reported by the OSS Fuzz project...

PT-2025-22245 · Git +1 · Rtpproxy

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software experiences a segmentation fault Segv on an unknown address during operation. The crash state involves the rtpp refcnt decref, hash table purge,...

PT-2025-22200 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential buffer read overflow issue has been identified in the Linux kernel, specifically in the libbpf component. The issue arises when accessing the BTF.ext core relo header witho...

ffmpeg:ffmpeg_BSF_APV_METADATA_fuzzer: Heap-buffer-overflow in ff_copy_bits

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5773904646045696 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFAPVMETADATAfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

poppler:qt_annot_fuzzer: Heap-use-after-free in Annot::decRefCnt

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=4631275841585152 Project: poppler Fuzzing Engine: honggfuzz Fuzz Target:...

kimageformats:kimgio_heif_fuzzer: Container-overflow in Box_saiz::parse

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5690973256744960 Project: kimageformats Fuzzing Engine: afl Fuzz Target: kimgioheiffuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Container-overflow WRITE 1 Crash Address:...

libconfig:config_read_fuzzer: Heap-buffer-overflow in fuzz_data_path

Detailed Report: https://oss-fuzz.com/testcase?key=5828256958054400 Project: libconfig Fuzzing Engine: libFuzzer Fuzz Target: configreadfuzzer Job Type: libfuzzerasanlibconfig Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x521000003900 Crash State: fuzzdatapath...

libconfig:config_read_fuzzer: Heap-buffer-overflow in LLVMFuzzerCustomMutator

Detailed Report: https://oss-fuzz.com/testcase?key=5194040679399424 Project: libconfig Fuzzing Engine: libFuzzer Fuzz Target: configreadfuzzer Job Type: libfuzzerasanlibconfig Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x52100000c500 Crash State:...