wpantund:wpantund-fuzz: Non-positive-vla-bound-value in any_to_data

Detailed Report: https://oss-fuzz.com/testcase?key=4913995862835200 Project: wpantund Fuzzing Engine: libFuzzer Fuzz Target: wpantund-fuzz Job Type: libfuzzerubsanwpantund Platform Id: linux Crash Type: Non-positive-vla-bound-value Crash Address: Crash State: anytodata nl::wpantund::SpinelAppendA...

wasm3:fuzzer: Index-out-of-bounds in CompileCallArgsAndReturn

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=6184114127699968 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerubsanwasm3 Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

net-snmp:snmp_parse_trap_fuzzer: Stack-buffer-overflow in snmp_input

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5715782303809536 Project: net-snmp Fuzzing Engine: afl Fuzz Target: snmpparsetrapfuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type:...

libconfig:config_read_fuzzer: Stack-buffer-overflow in fuzz_data_path

Project: https://github.com/hyperrealm/libconfig.git Detailed Report: https://oss-fuzz.com/testcase?key=5566875317895168 Project: libconfig Fuzzing Engine: libFuzzer Fuzz Target: configreadfuzzer Job Type: libfuzzerasanlibconfig Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash...

sleuthkit:sleuthkit_fls_hfs_fuzzer: Crash in hfs_load_extended_attrs

Detailed Report: https://oss-fuzz.com/testcase?key=5442328178524160 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflshfsfuzzer Job Type: libfuzzerubsansleuthkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x555f8ef2f4d3 Crash State: hfsloadextendedattrs...

readstat:fuzz_format_sav: Heap-buffer-overflow in extract_mr_data

Detailed Report: https://oss-fuzz.com/testcase?key=5286501211766784 Project: readstat Fuzzing Engine: honggfuzz Fuzz Target: fuzzformatsav Job Type: honggfuzzasanreadstat Platform Id: linux Crash Type: Heap-buffer-overflow READ 7 Crash Address: 0x74cc33ae01d8 Crash State: extractmrdata...

openbabel:fuzz_convert: Global-buffer-overflow in OpenBabel::generate_sequence

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=4776893862969344 Project: openbabel Fuzzing Engine: afl Fuzz Target: fuzzconvert Job Type: aflasanopenbabel Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

pcapplusplus:FuzzTargetNg: Heap-buffer-overflow in pcpp::Asn1BooleanRecord::decodeValue

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4653943981670400 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTargetNg Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

ntopng:fuzz_dissect_packet: Heap-buffer-overflow in NetworkInterface::dissectPacket

Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=4646285518110720 Project: ntopng Fuzzing Engine: afl Fuzz Target: fuzzdissectpacket Job Type: aflasanntopng Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7af7ae90d2a0 Crash...

wpantund:wpantund-fuzz: Non-positive-vla-bound-value in any_to_data

Detailed Report: https://oss-fuzz.com/testcase?key=4622880966246400 Project: wpantund Fuzzing Engine: libFuzzer Fuzz Target: wpantund-fuzz Job Type: libfuzzerubsanwpantund Platform Id: linux Crash Type: Non-positive-vla-bound-value Crash Address: Crash State: anytodata...

openbabel:fuzz_obconversion_sdf: Heap-buffer-overflow in OpenBabel::MDLFormat::ReadV3000Block

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=4554638784528384 Project: openbabel Fuzzing Engine: honggfuzz Fuzz Target: fuzzobconversionsdf Job Type: honggfuzzasanopenbabel Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

wasm3:fuzzer: Crash in m3_FreeRuntime

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=4521823875432448 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzermsanwasm3 Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000101010009 Crash State:...

PT-2025-53119

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc4 Description The Linux kernel contains a flaw within the f2fs file system related to sanity checks on summary information. This issue can lead to a use-after-free condition, specifically triggered by...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=5575190240362496 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

Anota: Identifying Business Logic Vulnerabilities Via Annotation-Based Sanitization

Detecting business logic vulnerabilities is a critical challenge in software security. These flaws come from mistakes in an application's design or implementation and allow attackers to trigger unintended application behavior. Traditional fuzzing sanitizers for dynamic analysis excel at finding...

libarchive:libarchive_fuzzer: Crash in archive_read_format_7zip_bid

Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=4618069663350784 Project: libarchive Fuzzing Engine: afl Fuzz Target: libarchivefuzzer Job Type: aflasanlibarchive Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7d70990dfff4 Cra...

flyway:LocationFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Project: https://github.com/flyway/flyway.git Detailed Report: https://oss-fuzz.com/testcase?key=6482464316129280 Project: flyway Fuzzing Engine: libFuzzer Fuzz Target: LocationFuzzer Job Type: libfuzzerasanflyway Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

WuppieFuzz: Coverage-Guided, Stateful REST API Fuzzing

Many business processes currently depend on web services, often using REST APIs for communication. REST APIs expose web service functionality through endpoints, allowing easy client interaction over the Internet. To reduce the security risk resulting from exposed endpoints, thorough testing is...

CVE-2025-13824

A security issue exists due to improper handling of malformed CIP packets during fuzzing. The controller enters a hard fault with solid red Fault LED and becomes unresponsive. Upon power cycle, the controller will enter recoverable fault where the MS LED and Fault LED become flashing red and...

CVE-2025-13823

A security issue was found in the IPv6 stack in the Micro850 and Micro870 controllers when the controllers received multiple malformed packets during fuzzing. The controllers will go into recoverable fault with fault code 0xFE60. To recover the controller, clear the fault...