3376 matches found
catbyte-toolkit
cb - Binary Analysis Toolkit for macOS/iOS Security Research...
matio:matio_fuzzer: Use-of-uninitialized-value in Mat_PrintNumber
Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=5015833842876416 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzermsanmatio Platform Id: linux Crash Type: Use-of-uninitialized-val...
mruby:mruby_fuzzer: Heap-buffer-overflow in mrb_vformat
Detailed Report: https://oss-fuzz.com/testcase?key=5605604055121920 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x747fd4ee5ccd Crash State: mrbvformat errorva mrbraisef Sanitizer: addres...
TEMPLATEFUZZ: Fine-Grained Chat Template Fuzzing for Jailbreaking and Red Teaming LLMs
Large Language Models LLMs are increasingly deployed across diverse domains, yet their vulnerability to jailbreak attacks, where adversarial inputs bypass safety mechanisms to elicit harmful outputs, poses significant security risks. While prior work has primarily focused on prompt injection...
imagemagick:encoder_psd_fuzzer: Use-of-uninitialized-value in ExportPixelChannel
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4881574373163008 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...
binutils:fuzz_as: Heap-buffer-overflow in operand
Detailed Report: https://oss-fuzz.com/testcase?key=5084963757424640 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzas Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7ae2b56e0172 Crash State: operand expr...
OpenEXR Makes Use of Uninitialized Memory
Summary While fuzzing openexrexrcheckfuzzer, Valgrind reports a conditional branch depending on uninitialized data inside genericunpack. This indicates a use of uninitialized memory CWE-457. The issue is reproducible with the current OSS-Fuzz harness and a single-file PoC. Details Environment: -...
GHSA-3H9H-QFVW-98HQ OpenEXR Makes Use of Uninitialized Memory
Summary While fuzzing openexrexrcheckfuzzer, Valgrind reports a conditional branch depending on uninitialized data inside genericunpack. This indicates a use of uninitialized memory CWE-457. The issue is reproducible with the current OSS-Fuzz harness and a single-file PoC. Details Environment: -...
OSV-2026-534 Heap-buffer-overflow in cram_encode_container
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=499447432 Crash type: Heap-buffer-overflow READ 1 Crash state: cramencodecontainer cramflushcontainermt cramclose...
Triggering and Detecting Exploitable Library Vulnerability from the Client by Directed Greybox Fuzzing
Developers utilize third-party libraries to improve productivity, which also introduces potential security risks. Existing approaches generate tests for public functions to trigger library vulnerabilities from client programs, yet they depend on proof-of-concepts PoCs, which are often unavailable...
htmlunit:HtmlParserFuzzer: Security exception in org.htmlunit.cyberneko.HTMLTagBalancer.endElement
Project: https://github.com/HtmlUnit/htmlunit.git Detailed Report: https://oss-fuzz.com/testcase?key=5387673824198656 Project: htmlunit Fuzzing Engine: libFuzzer Fuzz Target: HtmlParserFuzzer Job Type: libfuzzerasanhtmlunit Platform Id: linux Crash Type: Security exception Crash Address: Crash...
checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement
Detailed Report: https://oss-fuzz.com/testcase?key=4893279333449728 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
OSV-2026-518 Use-of-uninitialized-value in ne_read_block
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=498498500 Crash type: Use-of-uninitialized-value Crash state: nereadblock nesteggreadpacket fuzz.cc...
nestegg:fuzz: Use-of-uninitialized-value in ne_read_block
Project: https://github.com/kinetiknz/nestegg.git Detailed Report: https://oss-fuzz.com/testcase?key=6705140546732032 Project: nestegg Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzermsannestegg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
glib:fuzz_markup_escape_text: Heap-buffer-overflow in g_utf8_get_char
Project: https://gitlab.gnome.org/GNOME/glib.git Detailed Report: https://oss-fuzz.com/testcase?key=5150018775613440 Project: glib Fuzzing Engine: afl Fuzz Target: fuzzmarkupescapetext Job Type: aflasanglib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7bd2ef4e00b1...
Enhancing REST API Fuzzing with Access Policy Violation Checks and Injection Attacks
Due to their widespread use in industry, several techniques have been proposed in the literature to fuzz REST APIs. Existing fuzzers for REST APIs have been focusing on detecting crashes e.g., 500 HTTP server error status code. However, security vulnerabilities can have major drastic consequences...
assimp:assimp_fuzzer: Crash in unsigned int Assimp::StreamReader<true, true>::Get<unsigned int>
Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6341109587705856 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzer Job Type: aflasanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f689b4f0270 Crash State: unsigned i...
ogre:ogre_deep_fuzz: Object-size in Ogre::SkeletonSerializer::readAnimationTrack
Project: https://github.com/OGRECave/ogre.git Detailed Report: https://oss-fuzz.com/testcase?key=5858244936663040 Project: ogre Fuzzing Engine: libFuzzer Fuzz Target: ogredeepfuzz Job Type: libfuzzerubsanogre Platform Id: linux Crash Type: Object-size Crash Address: Crash State:...
ogre:ogre_deep_fuzz: Negative-size-param in Ogre::MemoryDataStream::read
Project: https://github.com/OGRECave/ogre.git Detailed Report: https://oss-fuzz.com/testcase?key=5793583520350208 Project: ogre Fuzzing Engine: afl Fuzz Target: ogredeepfuzz Job Type: aflasanogre Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...