3371 matches found
EUVD-2023-30090
Malicious code in bioql PyPI...
EUVD-2021-34671
Malicious code in bioql PyPI...
EUVD-2022-55191
Malicious code in bioql PyPI...
EUVD-2023-31340
Malicious code in bioql PyPI...
libssh:ssh_bind_config_fuzzer_nalloc: Heap-double-free in local_parse_glob
Project: https://git.libssh.org/projects/libssh.git Detailed Report: https://oss-fuzz.com/testcase?key=5282664610594816 Project: libssh Fuzzing Engine: afl Fuzz Target: sshbindconfigfuzzernalloc Job Type: aflasanlibssh Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x78a8f92e0360...
MALF: A Multi-Agent LLM Framework for Intelligent Fuzzing of Industrial Control Protocols
Industrial control systems ICS are vital to modern infrastructure but increasingly vulnerable to cybersecurity threats, particularly through weaknesses in their communication protocols. This paper presents MALF Multi-Agent LLM Fuzzing Framework, an advanced fuzzing solution that integrates large...
FalseCrashReducer: Mitigating False Positive Crashes in OSS-Fuzz-Gen Using Agentic AI
Fuzz testing has become a cornerstone technique for identifying software bugs and security vulnerabilities, with broad adoption in both industry and open-source communities. Directly fuzzing a function requires fuzz drivers, which translate random fuzzer inputs into valid arguments for the target...
opensc:fuzz_pkcs15init: Stack-buffer-underflow in sc_append_path_id
Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=4934997510520832 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15init Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Stack-buffer-underflow WRITE 2 Crash Address:...
opencv:core_fuzzer: Heap-buffer-overflow in png_combine_row
Project: https://github.com/opencv/opencv.git Detailed Report: https://oss-fuzz.com/testcase?key=4764649309667328 Project: opencv Fuzzing Engine: afl Fuzz Target: corefuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x75b3e66e2cc8 Crash State...
HFuzzer: Testing Large Language Models for Package Hallucinations Via Phrase-Based Fuzzing
Large Language Models LLMs are widely used for code generation, but they face critical security risks when applied to practical production due to package hallucinations, in which LLMs recommend non-existent packages. These hallucinations can be exploited in software supply chain attacks, where...
Red Teaming Quantum-Resistant Cryptographic Standards: A Penetration Testing Framework Integrating AI and Quantum Security
This study presents a structured approach to evaluating vulnerabilities within quantum cryptographic protocols, focusing on the BB84 quantum key distribution method and National Institute of Standards and Technology NIST approved quantum-resistant algorithms. By integrating AI-driven red teaming,...
Intelligent Graybox Fuzzing Via ATPG-Guided Seed Generation and Submodule Analysis
Hardware Fuzzing emerged as one of the crucial techniques for finding security flaws in modern hardware designs by testing a wide range of input scenarios. One of the main challenges is creating high-quality input seeds that maximize coverage and speed up verification. Coverage-Guided Fuzzing CGF...
llvm:llvm-opt-fuzzer--x86_64-loop_vectorize: Use-of-uninitialized-value in llvm::InterleavedAccessInfo::analyzeInterleaving
Detailed Report: https://oss-fuzz.com/testcase?key=4575997300375552 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-opt-fuzzer--x8664-loopvectorize Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
freetype2:cff-render-ftengine: New-delete-type-mismatch in performanceCheck
Detailed Report: https://oss-fuzz.com/testcase?key=4510338591817728 Project: freetype2 Fuzzing Engine: honggfuzz Fuzz Target: cff-render-ftengine Job Type: honggfuzzasanfreetype2 Platform Id: linux Crash Type: New-delete-type-mismatch Crash Address: 0x7ceff70e0350 Crash State: performanceCheck...
Semantic-Aware Fuzzing: an Empirical Framework for LLM-Guided, Reasoning-Driven Input Mutation
Security vulnerabilities in Internet-of-Things devices, mobile platforms, and autonomous systems remain critical. Traditional mutation-based fuzzers -- while effectively explore code paths -- primarily perform byte- or bit-level edits without semantic reasoning. Coverage-guided tools such as AFL+...
Exploit for Heap-based Buffer Overflow in Google Android
This is a PoC exploit for CVE-2020-8899, a memory corruption vulnerability in the Samsung Qmage codec. The exploit targets a Samsung Galaxy Note 10+ phone running Android 10 via MMS. The exploit code is written in Python and requires the following software to be locally installed: Python 3, Netwi...
OSV-2025-767 UNKNOWN READ in dcd_int_handler
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=445845231 Crash type: UNKNOWN READ Crash state: dcdinthandler fuzz.cc...
OSV-2025-766 Heap-buffer-overflow in Open
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=446027676 Crash type: Heap-buffer-overflow READ 4 Crash state: Open demuxProbe vlcmoduleload...
CVE-2023-53439 net: skb_partial_csum_set() fix against transport header magic value
In the Linux kernel, the following vulnerability has been resolved: net: skbpartialcsumset fix against transport header magic value skb-transportheader uses the special 0xFFFF value to mark if the transport header was set or not. We must prevent callers to accidentaly set skb-transportheader to...
CVE-2023-53439 net: skb_partial_csum_set() fix against transport header magic value
In the Linux kernel, the following vulnerability has been resolved: net: skbpartialcsumset fix against transport header magic value skb-transportheader uses the special 0xFFFF value to mark if the transport header was set or not. We must prevent callers to accidentaly set skb-transportheader to...