Agentic Fuzzing: Opportunities and Challenges

Fuzzers and static analyzers find many bugs but struggle with logic bugs in mature codebases. Triggering such a bug often requires multi-step reasoning that produces no distinctive execution feedback, and variants can appear across implementations too different for a single pattern to match. Rece...

kernel-exploit-intelligence

🐧 Kernel Exploit Intelligence KEI !KEI Logo./assets/logo...

Position: AI Security Policy Should Target Systems, Not Models

We present swarm-attack, an open-source adversarial testing framework in which multiple lightweight LLM agents coordinate through shared memory, parallel exploration, and evolutionary optimization. Together, our results demonstrate that both safety bypass of frontier models and software...

matio:matio_fuzzer: Heap-use-after-free in H5T__bit_find

Detailed Report: https://oss-fuzz.com/testcase?key=5566795263311872 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x78d4f63cd6b3 Crash State: H5Tbitfind H5Tconvfiloop H5Tconvfi Sanitizer:...

openjph:ojph_expand_fuzz_target: Crash in ojph::local::precinct::parse

Project: https://github.com/aous72/OpenJPH.git Detailed Report: https://oss-fuzz.com/testcase?key=4595064797200384 Project: openjph Fuzzing Engine: libFuzzer Fuzz Target: ojphexpandfuzztarget Job Type: libfuzzerasanopenjph Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7ad7ba71f800...

OrchJail: Jailbreaking Tool-Calling Text-To-Image Agents by Orchestration-Guided Fuzzing

Tool-calling text-to-image T2I agents can plan and execute multi-step tool chains to accomplish complex generation and editing queries. However, this capability introduces a new safety attack surface: harmful outputs may arise from tool orchestration, where individually benign steps combine into...

PT-2026-38982

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the x86 architecture, the load segments function modifies segment registers, which invalidates the GS base used by KCOV for per-cpu data. When CONFIG KCOV is enabled, any subsequent...

mruby:mruby_fuzzer: Heap-buffer-overflow in bt_match

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5474946829844480 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7b7aae4e20f8 Crash State:...

kimageformats:kimgio_jxr_fuzzer: Use-of-uninitialized-value in JXRHandler::read

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=4598919865892864 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgiojxrfuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

ExploitMind

ExploitMind Overview ExploitMind is an en...

AFL-ICP: Enhancing Industrial Control Protocol Reliability Via Specification-Guided Fuzzing

Industrial Control Protocols ICPs are critical to the reliability and stability of industrial infrastructure, yet their security is fundamentally compromised by a specification-blindness bottleneck. Modern fuzzers, constrained by observation-driven inference, struggle to penetrate deep protocol...

OSV-2026-678 UNKNOWN WRITE in ___interceptor_strncpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=508899220 Crash type: UNKNOWN WRITE Crash state: interceptorstrncpy concathashstring ndpisearchsshtcp...

FunFuzz: An LLM-Powered Evolutionary Fuzzing Framework

Modern fuzzers increasingly use Large Language Models LLMs to generate structured inputs, but LLM-driven fuzzing is sensitive to prompt initialization and sampling variance, which can reduce exploration efficiency and lead to redundant inputs. We present FunFuzz, a multi-island evolutionary fuzzi...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in parse_sps_for_hvcC_configuration

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5894093938163712 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

suricata:fuzz_sigpcap_aware: Heap-buffer-overflow in PrefilterSetupRuleGroup

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=5056731813314560 Project: suricata Fuzzing Engine: afl Fuzz Target: fuzzsigpcapaware Job Type: aflasansuricata Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7a4c28afde18...

angle:fuzz_spirv_transform: Crash in rx::ShaderInterfaceVariableInfoMap::add

Detailed Report: https://oss-fuzz.com/testcase?key=6086141119102976 Project: angle Fuzzing Engine: libFuzzer Fuzz Target: fuzzspirvtransform Job Type: libfuzzerasanangle Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x77fb0d8d019c Crash State: rx::ShaderInterfaceVariableInfoMap::add...

angle:fuzz_spirv_parser: Crash in angle::spirv::ParseTypeFloat

Detailed Report: https://oss-fuzz.com/testcase?key=5471310913536000 Project: angle Fuzzing Engine: libFuzzer Fuzz Target: fuzzspirvparser Job Type: libfuzzerasanangle Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7bcb36320000 Crash State: angle::spirv::ParseTypeFloat...

ffmpeg:ffmpeg_dem_WTV_fuzzer: Heap-buffer-overflow in parse_mpeg2_extension_descriptor

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6219535958212608 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegdemWTVfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type:...

openexr:openexr_exrcorecheck_fuzzer: Heap-buffer-overflow in DwaCompressor_uncompress

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=6091314944081920 Project: openexr Fuzzing Engine: afl Fuzz Target: openexrexrcorecheckfuzzer Job Type: aflasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Cras...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Detailed Report: https://oss-fuzz.com/testcase?key=5749729551253504 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...