1535 matches found
CVE-2025-9464
ArmorStart® LT is affected by a denial-of-service vulnerability triggered during fuzzing of multiple CIP classes, which can render the CIP port unresponsive. The issue is documented across multiple sources (NVD, Red Hat, CISA ICS, CVE listings) and is associated with DoS conditions described in R...
PT-2026-3567
Name of the Vulnerable Software and Affected Versions ArmorStart® LT affected versions not specified Description A security issue exists that can lead to a denial-of-service condition. The issue is triggered during fuzzing of multiple Common Industrial Protocol CIP classes, causing the CIP port t...
PT-2026-3563
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. Fuzzing performed using Defensics causes the device to become unresponsive, requiring a reboot...
Rockwell Automation ArmorStart LT 安全漏洞
Rockwell Automation ArmorStart LT is a distributed motor controller from Rockwell Automation. A denial of service vulnerability exists in the Rockwell Automation ArmorStart LT, which stems from the device being unresponsive during fuzzing tests using Defensics, and can be exploited by an attacker...
SimFuzz: Similarity-Guided Block-Level Mutation for RISC-V Processor Fuzzing
The Instruction Set Architecture ISA defines processor operations and serves as the interface between hardware and software. As an open ISA, RISC-V lowers the barriers to processor design and encourages widespread adoption, but also exposes processors to security risks such as functional bugs...
OSV-2026-54 Heap-use-after-free in _dwarf_exec_frame_instr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=475563464 Crash type: Heap-use-after-free READ 8 Crash state: dwarfexecframeinstr dwarfgetfdeinfoforapcrow dwarfgetfdeinfoforallregs3b...
Astra Linux – Vulnerability in openexr
OpenEXR provides the specification and reference implementation of the EXR file format, a image storage format for the motion picture industry. In versions 3.3.0 through 3.3.5 and 3.4.0 through 3.4.2, when using openexrexrcheckfuzzer, Valgrind reported a conditional branch that depends on...
Realworld-for-Application_FUGIO_FirstFrameworkFuzzingDetectPOI
FUGIO Production Guide Introduction FUGIO is the firs...
CVE-2023-43515
Memory corruption in HLOS while running kernel address sanitizers syzkaller on tmecom with DEBUGFS enabled...
MalwareAnalysisProject
MalwareAnalysisProject Introduction to exploit development wit...
Malware-Analysis-Project-SLMAIL-5.5-BOF-
Malware Analysis Project Introduction to exploit development w...
Exploit for Off-by-one Error in Sudo_Project Sudo
ExploitForge - AI-Powered Automatic Exploit Generation !Pyt...
OSV-2026-6 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=472785101 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.primary...
CuFuzz: Hardening CUDA Programs through Transformation and Fuzzing
GPUs have gained significant popularity over the past decade, extending beyond their original role in graphics rendering. This evolution has brought GPU security and reliability to the forefront of concerns. Prior research has shown that CUDA's lack of memory safety can lead to serious...
PT-2026-2246
Name of the Vulnerable Software and Affected Versions HarfBuzz versions prior to 12.3.0 Description HarfBuzz is a text shaping engine. A null pointer dereference issue exists in the SubtableUnicodesCache::create function, located in src/hb-ot-cmap-table.hh. The function does not verify if hb mall...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993035)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993035 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: arm64/poly1305 - fix a read out-of-bound A kasan error was reported during fuzzing: BUG:...
Linux Distros Unpatched Vulnerability : CVE-2022-50880
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath10k: add peer map clean up for peer delete in ath10kstastate When peer delete failed in a disconnect operation, use-after-free detected by KFENCE in...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992378)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992378 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: arm64/poly1305 - fix a read out-of-bound A kasan error was reported during fuzzing: BUG:...
Bugs that survive the heat of continuous fuzzing
Even when a project has been intensively fuzzed for years, bugs can still survive. OSS-Fuzz is one of the most impactful security initiatives in open source. In collaboration with the OpenSSF Foundation, it has helped to find thousands of bugs in open-source software. Today, OSS-Fuzz fuzzes mor...
