3376 matches found
Vulnserver-Buffer-Overflow-Automation
Vulnserver-Buffer-Overflow-Automation A modular Python 3 autom...
Vulnserver-Buffer-Overflow-Automation
Vulnserver-Buffer-Overflow-Automation A modular Python 3 autom...
gdal:gdal_fuzzer: Heap-buffer-overflow in m_zero_block
Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5868964264869888 Project: gdal Fuzzing Engine: afl Fuzz Target: gdalfuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x79534a0e7410 Crash State:...
PatchIsland: Orchestration of LLM Agents for Continuous Vulnerability Repair
Continuous fuzzing platforms such as OSS-Fuzz uncover large numbers of vulnerabilities, yet the subsequent repair process remains largely manual. Unfortunately, existing Automated Vulnerability Repair AVR techniques -- including recent LLM-based systems -- are not directly applicable to continuou...
thrift-java:RoundtripCompactFuzzer: Security exception in org.apache.thrift.protocol.TProtocolUtil.skip
Detailed Report: https://oss-fuzz.com/testcase?key=5277598270947328 Project: thrift-java Fuzzing Engine: libFuzzer Fuzz Target: RoundtripCompactFuzzer Job Type: libfuzzerasanthrift-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
thrift-java:RoundtripJSONFuzzer: Security exception in org.apache.thrift.fuzz.RecursiveStruct$RecursiveStructStandardScheme.read
Detailed Report: https://oss-fuzz.com/testcase?key=4785352874459136 Project: thrift-java Fuzzing Engine: libFuzzer Fuzz Target: RoundtripJSONFuzzer Job Type: libfuzzerasanthrift-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
libjpeg-turbo:libjpeg_turbo_fuzzer_dev: Use-of-uninitialized-value in decompress.cc
Detailed Report: https://oss-fuzz.com/testcase?key=6429829011668992 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: libjpegturbofuzzerdev Job Type: libfuzzermsanlibjpeg-turbo Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: decompress.cc...
harfbuzz:hb-subset-fuzzer: Use-of-uninitialized-value in trySubset
Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5920156651159552 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...
OSV-2026-105 Use-of-uninitialized-value in pcpp::SSLServerHelloMessage::ServerHelloTLSFingerprint::toString
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=476187680 Crash type: Use-of-uninitialized-value Crash state: pcpp::SSLServerHelloMessage::ServerHelloTLSFingerprint::toString pcpp::SSLServerHelloMessage::ServerHelloTLSFingerprint::toStringAndMD5...
FirmReBugger: A Benchmark Framework for Monolithic Firmware Fuzzers
Monolithic Firmware is widespread. Unsurprisingly, fuzz testing firmware is an active research field with new advances addressing the unique challenges in the domain. However, understanding and evaluating improvements by deriving metrics such as code coverage and unique crashes are problematic,...
CVE-2025-9280
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. Fuzzing performed using Defensics causes the device to become unresponsive, requiring a reboot...
CVE-2025-9464
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. This vulnerability is triggered during fuzzing of multiple CIP classes, which causes the CIP port to become unresponsive...
openssl:pkcs12: Stack-buffer-overflow in kdf_pbkdf2_derive
Project: https://github.com/openssl/openssl.git Detailed Report: https://oss-fuzz.com/testcase?key=4546542626471936 Project: openssl Fuzzing Engine: libFuzzer Fuzz Target: pkcs12 Job Type: libfuzzerasani386openssl Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 5 Crash Address:...
ImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load
Summary NULL pointer dereference in MSL Magick Scripting Language parser when processing tag before any image is loaded. Version - ImageMagick 7.x tested on current main branch - Commit: HEAD Steps to Reproduce Method 1: Using ImageMagick directly bash magick MSL:poc.msl out.png Method 2: Using...
CVE-2025-9464
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. This vulnerability is triggered during fuzzing of multiple CIP classes, which causes the CIP port to become unresponsive...
CVE-2025-9464
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. This vulnerability is triggered during fuzzing of multiple CIP classes, which causes the CIP port to become unresponsive...
CVE-2025-9280
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. Fuzzing performed using Defensics causes the device to become unresponsive, requiring a reboot...
CVE-2025-9280
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. Fuzzing performed using Defensics causes the device to become unresponsive, requiring a reboot...
CVE-2025-9280
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. Fuzzing performed using Defensics causes the device to become unresponsive, requiring a reboot...
CVE-2025-9280 ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. Fuzzing performed using Defensics causes the device to become unresponsive, requiring a reboot...