opensc:fuzz_pkcs15init: Heap-buffer-overflow in epassNUMBER_pkcs15_generate_key

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5766060984631296 Project: opensc Fuzzing Engine: afl Fuzz Target: fuzzpkcs15init Job Type: aflasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x60600000065c Crash...

lua:luaL_loadbuffer_proto_test: Heap-buffer-overflow in luaC_newobj

Detailed Report: https://oss-fuzz.com/testcase?key=5024199630258176 Project: lua Fuzzing Engine: libFuzzer Fuzz Target: luaLloadbufferprototest Job Type: libfuzzerasani386lua Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0xf58215f5 Crash State: luaCnewobj...

Afuzz - Automated Web Path Fuzzing Tool For The Bug Bounty Projects

Afuzz is an automated web path fuzzing tool for the Bug Bounty projects. Afuzz is being actively developed by @rapiddns Features Afuzz automatically detects the development language used by the website, and generates extensions according to the language Uses blacklist to filter invalid pages Uses...

apache-poi:POIHSSFFuzzer: Security exception in org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.isNeverEncryptedRecord

Detailed Report: https://oss-fuzz.com/testcase?key=4899950806564864 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHSSFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-commons-jxpath:JXPathFuzzer: Security exception in java.base/java.lang.StringBuilder.append

Detailed Report: https://oss-fuzz.com/testcase?key=5456662135439360 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

kernel: io-wq: Fix memory leak in worker creation

In the Linux kernel, the following vulnerability has been resolved: io-wq: Fix memory leak in worker creation If the CPU mask allocation for a node fails, then the memory allocated for the 'iowqe' struct of the current node doesn't get freed on the error handling path, since it has not yet been...

CVE-2023-44398

creationtimestamp| type| source ---|---|--- 2023-11-06 20:25:50+00:00| seen| https://t.me/cibsecurity/73620 2025-02-26 21:25:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5613 2025-12-29 21:01:14+00:00| seen|...

spring-data-mongodb:ParameterBindingJsonReaderFuzzer: Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

Detailed Report: https://oss-fuzz.com/testcase?key=5855929710804992 Project: spring-data-mongodb Fuzzing Engine: libFuzzer Fuzz Target: ParameterBindingJsonReaderFuzzer Job Type: libfuzzerasanspring-data-mongodb Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-poi:POIHSSFFuzzer: Security exception in org.apache.poi.poifs.crypt.binaryrc4.BinaryRC4Decryptor.initCipherForBlock

Detailed Report: https://oss-fuzz.com/testcase?key=6613016111874048 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHSSFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

imagemagick:encoder_png00_fuzzer: Heap-buffer-overflow in cmsMLUsetWide

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5097161997811712 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderpng00fuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 4...

jsqlparser:JSqlParserFuzzer: Security exception in net.sf.jsqlparser.parser.CCJSqlParser.jj_3R_ParenthesedSelect_NUMBER_5_115

Detailed Report: https://oss-fuzz.com/testcase?key=6595265616019456 Project: jsqlparser Fuzzing Engine: libFuzzer Fuzz Target: JSqlParserFuzzer Job Type: libfuzzerasanjsqlparser Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

hdf5:h5_extended_fuzzer: Heap-buffer-overflow in H5F_addr_decode

Detailed Report: https://oss-fuzz.com/testcase?key=5344906979442688 Project: hdf5 Fuzzing Engine: afl Fuzz Target: h5extendedfuzzer Job Type: aflasanhdf5 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x612000027460 Crash State: H5Faddrdecode H5Oshareddecode...

wireshark:fuzzshark_ip_proto-udp: Global-buffer-overflow in dissect_rf4ce_profile_common

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=6244305964236800 Project: wireshark Fuzzing Engine: libFuzzer Fuzz Target: fuzzsharkipproto-udp Job Type: libfuzzerasanwireshark Platform Id: linux...

arrow:arrow-ipc-stream-fuzz: Heap-buffer-overflow in arrow::Status arrow::Result<std::__1::unique_ptr<arrow::Buffer, std::__1::defaul

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=6522701499727872 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address:...

imagemagick:encoder_heic_fuzzer: Index-out-of-bounds in derive_collocated_motion_vectors

Detailed Report: https://oss-fuzz.com/testcase?key=5268697004244992 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: derivecollocatedmotionvectors...

imagemagick:enhance_fuzzer: Use-of-uninitialized-value in EnhanceImage

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4821509203689472 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: enhancefuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

Snapshot fuzzing direct composition with WTF

Cisco Talos has developed a custom fuzzer using the popular snapshot fuzzer "WTF" which targets Direct Composition in Windows. Talos vulnerability research team used Protocol Buffers developed by Google to serialize and deserialize test cases. The Bochscpu backend of WTF was patched and other...

mariadb-connector-j:MariaDbPoolDataSourceFuzzer: Security exception with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6542447536373760 Project: mariadb-connector-j Fuzzing Engine: libFuzzer Fuzz Target: MariaDbPoolDataSourceFuzzer Job Type: libfuzzerasanmariadb-connector-j Platform Id: linux Crash Type: Security exception Crash Address: Crash State: NULL...

bitcoin-core:autofile: Crash in FuzzedFileProvider::seek

Detailed Report: https://oss-fuzz.com/testcase?key=4569342472486912 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: autofile Job Type: libfuzzerasani386bitcoin-core Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffe52d Crash State: FuzzedFileProvider::seek IOdowrite...

ndpi:fuzz_serialization: Heap-buffer-overflow in ndpi_snprintf

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4517948733390848 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzserialization Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 11 Crash Address: 0x619000001324 Crash...