OSV-2025-767 UNKNOWN READ in dcd_int_handler

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=445845231 Crash type: UNKNOWN READ Crash state: dcdinthandler fuzz.cc...

OSV-2025-766 Heap-buffer-overflow in Open

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=446027676 Crash type: Heap-buffer-overflow READ 4 Crash state: Open demuxProbe vlcmoduleload...

CVE-2023-53439 net: skb_partial_csum_set() fix against transport header magic value

In the Linux kernel, the following vulnerability has been resolved: net: skbpartialcsumset fix against transport header magic value skb-transportheader uses the special 0xFFFF value to mark if the transport header was set or not. We must prevent callers to accidentaly set skb-transportheader to...

CVE-2023-53439 net: skb_partial_csum_set() fix against transport header magic value

In the Linux kernel, the following vulnerability has been resolved: net: skbpartialcsumset fix against transport header magic value skb-transportheader uses the special 0xFFFF value to mark if the transport header was set or not. We must prevent callers to accidentaly set skb-transportheader to...

vlc:vlc-demux-dec-libfuzzer-ogg: Global-buffer-overflow in Ogg_CreateES

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=6007898074578944 Project: vlc Fuzzing Engine: honggfuzz Fuzz Target: vlc-demux-dec-libfuzzer-ogg Job Type: honggfuzzasanvlc Platform Id: linux Crash Type: Global-buffer-overflow READ 11 Crash Address:...

Orion: Fuzzing Workflow Automation

Fuzz testing is one of the most effective techniques for finding software vulnerabilities. While modern fuzzers can generate inputs and monitor executions automatically, the overall workflow, from analyzing a codebase, to configuring harnesses, to triaging results, still requires substantial manu...

ATLANTIS: AI-Driven Threat Localization, Analysis, and Triage Intelligence System

We present ATLANTIS, the cyber reasoning system developed by Team Atlanta that won 1st place in the Final Competition of DARPA's AI Cyber Challenge AIxCC at DEF CON 33 August 2025. AIxCC 2023-2025 challenged teams to build autonomous cyber reasoning systems capable of discovering and patching...

imagemagick:encoder_jxl_fuzzer: Use-of-uninitialized-value in jxl::FindBestPatchDictionary

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4775784700248064 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderjxlfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

envoy:rbac_filter_fuzz_test: Use-after-poison in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Detailed Report: https://oss-fuzz.com/testcase?key=5862908165947392 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: rbacfilterfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Use-after-poison READ 1 Crash Address: 0x51d0000378f8 Crash State: std::1::basicstring,...

mruby:mruby_fuzzer: Heap-buffer-overflow in uadd

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5701176541904896 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7b84ec3e0354 Crash State:...

mruby:mruby_fuzzer: Stack-use-after-return in mrb_bint_add_n

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4842348304728064 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: Stack-use-after-return READ 4 Crash Address: 0x78a8199d2020 Crash State...

maven-model:Xpp3ReaderFuzzer: Security exception in org.apache.maven.internal.xml.DefaultXmlService.doBuild

Detailed Report: https://oss-fuzz.com/testcase?key=5665324168183808 Project: maven-model Fuzzing Engine: libFuzzer Fuzz Target: Xpp3ReaderFuzzer Job Type: libfuzzerasanmaven-model Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

libredwg:llvmfuzz: Crash in dwg_ref_object

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4789903063056384 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerubsanlibredwg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffc59e901b689...

php:php-fuzz-exif: Crash in exif_scan_HEIF_header

Detailed Report: https://oss-fuzz.com/testcase?key=5471686708494336 Project: php Fuzzing Engine: afl Fuzz Target: php-fuzz-exif Job Type: aflasanphp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7bc0c03cc320 Crash State: exifscanHEIFheader exifreadfromstream zifexifreaddata...

IoTFuzzSentry: a Protocol Guided Mutation Based Fuzzer for Automatic Vulnerability Testing in Commercial IoT Devices

Protocol fuzzing is a scalable and cost-effective technique for identifying security vulnerabilities in deployed Internet of Things devices. During their operational phase, IoT devices often run lightweight servers to handle user interactions, such as video streaming or image capture in smart...

OSV-2025-718 Heap-buffer-overflow in pcpp::ArpLayer::toString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=443832078 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::ArpLayer::toString pcpp::Packet::toStringList pcpp::Packet::toString...

Cross-Service Token: Finding Attacks in 5G Core Networks

5G marks a major departure from previous cellular architectures, by transitioning from a monolithic design of the core network to a Service-Based Architecture SBA where services are modularized as Network Functions NFs which communicate with each other via standard-defined HTTP-based APIs called...

FuzzBox: Blending Fuzzing into Emulation for Binary-Only Embedded Targets

Coverage-guided fuzzing has been widely applied to address zero-day vulnerabilities in general-purpose software and operating systems. This approach relies on instrumenting the target code at compile time. However, applying it to industrial systems remains challenging, due to proprietary and...

Wapiti Web Application Vulnerability Scanner 3.2.5 Source Code

Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities. This is the source code release...

Wapiti Web Application Vulnerability Scanner 3.2.5

Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities. This is the binary release...