3375 matches found
clusterfuzz v2.33.14
ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...
ANT-2026-TNXYTAEH · libreoffice · Stack-buffer-overflow
stack-buffer-overflow medium CVE-2026-8356 Severity Claude critical · Security research firm high · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-TNXYTAEH:...
PYSEC-2026-2843 OpenEXR Makes Use of Uninitialized Memory
Summary While fuzzing openexrexrcheckfuzzer, Valgrind reports a conditional branch depending on uninitialized data inside genericunpack. This indicates a use of uninitialized memory CWE-457. The issue is reproducible with the current OSS-Fuzz harness and a single-file PoC. Details Environment: -...
OpenEXR Makes Use of Uninitialized Memory
SummaryWhile fuzzing openexrexrcheckfuzzer, Valgrind reports a conditional branch depending on uninitialized data inside genericunpack. This indicates a use of uninitialized memory CWE-457. The issue is reproducible with the current OSS-Fuzz harness and a single-file PoC. DetailsEnvironment:-...
Invalid char to bool conversion when printing a tensor
ImpactWhen printing a tensor, we get it's data as a const char array since that's the underlying storage and then we typecast it to the element type. However, conversions from char to bool are undefined if the char is not 0 or 1, so sanitizers/fuzzers will crash. PatchesWe have patched the issue ...
Out of bounds read in Tensorflow
ImpactThe TFG dialect of TensorFlow MLIR makes several assumptions about the incoming GraphDef before converting it to the MLIR-based dialect.If an attacker changes the SavedModel format on disk to invalidate these assumptions and the GraphDef is then converted to MLIR-based IR then they can caus...
PYSEC-2026-3157 Out of bounds read in Tensorflow
Impact The TFG dialect of TensorFlow MLIR makes several assumptions about the incoming GraphDef before converting it to the MLIR-based dialect. If an attacker changes the SavedModel format on disk to invalidate these assumptions and the GraphDef is then converted to MLIR-based IR then they can...
PYSEC-2026-3309 Out of bounds read in Tensorflow
Impact The TFG dialect of TensorFlow MLIR makes several assumptions about the incoming GraphDef before converting it to the MLIR-based dialect. If an attacker changes the SavedModel format on disk to invalidate these assumptions and the GraphDef is then converted to MLIR-based IR then they can...
javaparser:parseFuzzer: Security exception in com.github.javaparser.ast.expr.FieldAccessExpr.accept
Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=4854995984646144 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...
exploitarium
https://discord.gg/WytKH65ZR join up for research, help, documen...
SeedSmith: LLM-Driven Seed Synthesis for Directed Fuzzing
Directed fuzzing steers fuzzers toward user-defined sink functions to identify vulnerabilities, but it frequently fails to trigger crashes even after long campaigns. We identify two challenges that prevent directed fuzzers from exposing crashes: incomplete static analysis of indirect calls, which...
PYSEC-2026-1954 Invalid char to bool conversion when printing a tensor
Impact When printing a tensor, we get it's data as a const char array since that's the underlying storage and then we typecast it to the element type. However, conversions from char to bool are undefined if the char is not 0 or 1, so sanitizers/fuzzers will crash. Patches We have patched the issu...
Exploit-Chain-Suggester
Exploit Chain Suggester v2.0.0 A CLI tool for penetration tes...
Exploit-Chain-Suggestor
Exploit Chain Suggestor A CLI tool for penetration testers an...
mruby:mruby_fuzzer: Crash in mrb_vm_exec
Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6212427713413120 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0002dfff8004 Crash State: mrbvmexec...
bak-exploitarium
https://discord.gg/WytKH65ZR join up for research, help, documen...
json-flattener:AdvancedFuzzer: Security exception in com.github.wnameless.json.base.JsonValueUtils.toMap
Project: https://github.com/wnameless/json-flattener.git Detailed Report: https://oss-fuzz.com/testcase?key=4619821543915520 Project: json-flattener Fuzzing Engine: libFuzzer Fuzz Target: AdvancedFuzzer Job Type: libfuzzerasanjson-flattener Platform Id: linux Crash Type: Security exception Crash...
libyal:libqcow_file_fuzzer: Heap-buffer-overflow in libqcow_internal_file_read_buffer_from_file_io_handle
Detailed Report: https://oss-fuzz.com/testcase?key=6523664565338112 Project: libyal Fuzzing Engine: afl Fuzz Target: libqcowfilefuzzer Job Type: aflasanlibyal Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x77469d0e06d3 Crash State:...
ntopng:fuzz_dissect_packet: Heap-buffer-overflow in NetworkInterface::dissectPacket
Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=4533762395013120 Project: ntopng Fuzzing Engine: afl Fuzz Target: fuzzdissectpacket Job Type: aflasanntopng Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7c20b8453da9 Crash...