PT-2025-25453 · Undefined · Undefined

CVE-2025-46169 JSTargetFuzzer-V2 JSTargetFuzzer-v2.0 is a fuzzing approach that incorporates novel history-based guidance, using tailored seeds and custom mutation operators. It is built on top of the Fuzzilli fra... https://t.co/3dWy3uR39j...

libprotobuf-mutator:libxml2_example: Heap-buffer-overflow in xmlParsePubidLiteral

Project: https://github.com/google/libprotobuf-mutator.git Detailed Report: https://oss-fuzz.com/testcase?key=4840438660136960 Project: libprotobuf-mutator Fuzzing Engine: libFuzzer Fuzz Target: libxml2example Job Type: libfuzzerasanlibprotobuf-mutator Platform Id: linux Crash Type:...

kamailio:fuzz_parse_msg: Crash in extract_sess_version

Detailed Report: https://oss-fuzz.com/testcase?key=4669553287692288 Project: kamailio Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsemsg Job Type: libfuzzerasankamailio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x5180000c0000 Crash State: extractsessversion parsesdpsession...

ELFuzz: Efficient Input Generation Via LLM-Driven Synthesis over Fuzzer Space

Generation-based fuzzing produces appropriate testing cases according to specifications of input grammars and semantic constraints to test systems and software. However, these specifications require significant manual efforts to construct. This paper proposes a new approach, ELFuzz Evolution...

ZTaint-Havoc: from Havoc Mode to Zero-Execution Fuzzing-Driven Taint Inference

Fuzzing is a widely used technique for discovering software vulnerabilities, but identifying hot bytes that influence program behavior remains challenging. Traditional taint analysis can track such bytes white-box, but suffers from scalability issue. Fuzzing-Driven Taint Inference FTI offers a...

cups:fuzz_ppd_gen_1: Use-of-uninitialized-value in _cups_strcasecmp

Detailed Report: https://oss-fuzz.com/testcase?key=5658185702899712 Project: cups Fuzzing Engine: libFuzzer Fuzz Target: fuzzppdgen1 Job Type: libfuzzermsancups Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cupsstrcasecmp ppdloadconstraints ppdConflicts...

OSV-2025-436 Security exception in graphql.parser.GraphqlAntlrToLanguage.createNonNullType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=422217211 Crash type: Security exception Crash state: graphql.parser.GraphqlAntlrToLanguage.createNonNullType graphql.parser.GraphqlAntlrToLanguage.createType graphql.parser.GraphqlAntlrToLanguage.createListType...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=5454459029487616 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerubsancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

nss:pkcs12: Heap-use-after-free in SEC_PKCS7DecoderUpdate

Project: https://hg.mozilla.org/projects/nss Detailed Report: https://oss-fuzz.com/testcase?key=4806668708020224 Project: nss Fuzzing Engine: afl Fuzz Target: pkcs12 Job Type: aflasannss Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x50c0000010c8 Crash State:...

cbor-java:FuzzDec: Security exception in co.nstant.in.cbor.CborDecoder.decodeNext

Detailed Report: https://oss-fuzz.com/testcase?key=6452966716669952 Project: cbor-java Fuzzing Engine: libFuzzer Fuzz Target: FuzzDec Job Type: libfuzzerasancbor-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State: co.nstant.in.cbor.CborDecoder.decodeNext...

opensc:fuzz_pkcs15_reader: Stack-buffer-overflow in fuzz_reader_transmit

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5536331575132160 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

Bridging the Gap between Hardware Fuzzing and Industrial Verification

As hardware design complexity increases, hardware fuzzing emerges as a promising tool for automating the verification process. However, a significant gap still exists before it can be applied in industry. This paper aims to summarize the current progress of hardware fuzzing from an industry-use...

wamr:wamr_fuzz_classic_interp: Crash in load_init_data_section

Project: https://github.com/bytecodealliance/wasm-micro-runtime.git Detailed Report: https://oss-fuzz.com/testcase?key=6593826544484352 Project: wamr Fuzzing Engine: libFuzzer Fuzz Target: wamrfuzzclassicinterp Job Type: libfuzzerasanwamr Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in m2tsdmx_declare_pid

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6010650625376256 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address: 0x5070000309e8 Crash State:...

ndpi:fuzz_config: Stack-buffer-overflow in ndpi_init_packet

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5376783270871040 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzconfig Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 3 Crash Address: 0x79f5875146a3 Cras...

A Comparative Study of Fuzzers and Static Analysis Tools for Finding Memory Unsafety in C and C++

Even today, over 70% of security vulnerabilities in critical software systems result from memory safety violations. To address this challenge, fuzzing and static analysis are widely used automated methods to discover such vulnerabilities. Fuzzing generates random program inputs to identify faults...

CVE-2025-5203

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as problematic. Affected by this issue is the function SkipSpaces in the library assimp/include/assimp/ParsingUtils.h. The manipulation leads to out-of-bounds read. Local access is required to approach this...

libxml2:api: Heap-use-after-free in dropNode

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=6115184517382144 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: api Job Type: libfuzzerasanlibxml2 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x50b00000006...

CVE-2025-5165

A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function MDCImporter::ValidateSurfaceHeader of the file assimp/code/AssetLib/MDC/MDCLoader.cpp. The manipulation of the argument pcSurface2 leads to out-of-bounds read...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=4748688327245824 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerubsancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...