Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989089)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989089 advisory. In the Linux kernel, the following vulnerability has been resolved: ath5k: fix OOB in ath5keepromreadpcalinfo5111 The bug was found during fuzzing. Stacktrace locate...

OSV-2025-876 Stack-buffer-overflow in snmp_input

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=457106694 Crash type: Stack-buffer-overflow READ 8 Crash state: snmpinput snmpparsetrapfuzzer.c...

opensc:fuzz_pkcs15_encode: Null-dereference READ in ubsan_GetStackTrace

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5970178929393664 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15encode Job Type: libfuzzerubsanopensc Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x0000000000...

Security Audit of Intel ICE Driver for E810 Network Interface Card

The security of enterprise-grade networking hardware and software is critical to ensuring the integrity, availability, and confidentiality of data in modern cloud and data center environments. Network interface controllers NICs play a pivotal role in high-performance computing and virtualization,...

mruby:mruby_fuzzer: Segv on unknown address in mrb_bint_mod

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5080376998690816 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: mrbbintmod...

OpenEXR < 3.4.3 -- multiple vulnerabilities

Cary Phillips reports: Patch release that addresses several bugs, primarily involving properly rejecting corrupt input data. He goes on to report various relevant items including heap buffer overflows, use-after-free, use of uninitialized memory and other bugs, several of them found by OSS-fuzz,...

OpenJPH < 0.24.5 -- multiple vulnerabilities

Aous Naman reports several vulnerabilities fixed in OpenJPH versions up to 0.24.5 and credits Cary Phillips for reporting them from the OSS-fuzz project. 0.24.5 Addresses OpenEXR OSS-fuzz issue 5747129672073216 that can cause heap corruption. 0.24.4... we now check that the ATK marker segment...

OWASP-Lite-Scanner

OWASP-Lite-Scanner OWASP-Lite Scanner: A Flask-ba...

Wapiti Web Application Vulnerability Scanner 3.2.8

Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities. This is the binary release...

Wapiti Web Application Vulnerability Scanner 3.2.8 Source Code

Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities. This is the source code release...

openssl:x509: Heap-buffer-overflow in ossl_x509_check_cert_time

Project: https://github.com/openssl/openssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5880369384849408 Project: openssl Fuzzing Engine: libFuzzer Fuzz Target: x509 Job Type: libfuzzerasanopenssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 14 Crash Address: 0x7b72ac1e049d...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in std::__1::pair<int, arrow::util::RleBitPackedParser::ControlFlow> arrow::util::R

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5831656524283904 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987581)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987581 advisory. In the Linux kernel, the following vulnerability has been resolved: ath5k: fix OOB in ath5keepromreadpcalinfo5111 The bug was found during fuzzing. Stacktrace locate...

opensc:fuzz_pkcs15_crypt: Global-buffer-overflow in sc_pkcs15emu_pteid_init

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6372063414910976 Project: opensc Fuzzing Engine: afl Fuzz Target: fuzzpkcs15crypt Job Type: aflasanopensc Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x5691a8cec658 Cra...

In-Browser LLM-Guided Fuzzing for Real-Time Prompt Injection Testing in Agentic AI Browsers

Large Language Model LLM based agents integrated into web browsers often called agentic AI browsers offer powerful automation of web tasks. However, they are vulnerable to indirect prompt injection attacks, where malicious instructions hidden in a webpage deceive the agent into unwanted actions...

arrow:arrow-csv-fuzz: Heap-buffer-overflow in arrow_vendored::fast_float::from_chars_result arrow_vendored::fast_float::detail

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5003506164760576 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-csv-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x79848e1e51...

OSV-2025-835 Heap-use-after-free in JS_DefineProperty

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=451334094 Crash type: Heap-use-after-free READ 8 Crash state: JSDefineProperty buildbacktrace JSCallInternal...

Wapiti Web Application Vulnerability Scanner 3.2.7

Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities. This is the binary release...

Wapiti Web Application Vulnerability Scanner 3.2.7 Source Code

Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities. This is the source code release...

Clutch Control: An Attention-Based Combinatorial Bandit for Efficient Mutation in JavaScript Engine Fuzzing

JavaScript engines are widely used in web browsers, PDF readers, and server-side applications. The rise in concern over their security has led to the development of several targeted fuzzing techniques. However, existing approaches use random selection to determine where to perform mutations in...