CVE-2026-22184: Out-of-bounds Write

zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under contrib/untgz. The vulnerability is limited to the standalone demonstration utility and does not affect the core zlib compression library. The flaw occurs when a user executes the untgz...

openbabel:fuzz_convert: Global-buffer-overflow in OpenBabel::OBChainsParser::SetResidueInformation

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=4754939701428224 Project: openbabel Fuzzing Engine: libFuzzer Fuzz Target: fuzzconvert Job Type: libfuzzerasanopenbabel Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993239)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993239 advisory. In the Linux kernel, the following vulnerability has been resolved: orangefs: Fix kmemleak in orangefskernel,clientdebuginit When insert and remove the orangefs...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992226)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992226 advisory. In the Linux kernel, the following vulnerability has been resolved: orangefs: Fix kmemleak in orangefskernel,clientdebuginit When insert and remove the orangefs...

openbabel:fuzz_convert: Global-buffer-overflow in OpenBabel::generate_sequence

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=4776893862969344 Project: openbabel Fuzzing Engine: afl Fuzz Target: fuzzconvert Job Type: aflasanopenbabel Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

CVE-2025-34449

Genymobile/scrcpy versions up to and including 3.3.3, prior to commit 3e40b24, contain a buffer overflow vulnerability in the scdevicemsgdeserialize function. A compromised device can send crafted messages that cause out-of-bounds reads, which may result in memory corruption or a denial-of-servic...

CVE-2025-34449

Genymobile/scrcpy

CVE-2025-34449 Genymobile/scrcpy <= 3.3.3 Global Buffer Overflow

Genymobile/scrcpy versions up to and including 3.3.3, prior to commit 3e40b24, contain a buffer overflow vulnerability in the scdevicemsgdeserialize function. A compromised device can send crafted messages that cause out-of-bounds reads, which may result in memory corruption or a denial-of-servic...

CVE-2025-34449 Genymobile/scrcpy <= 3.3.3 Global Buffer Overflow

Genymobile/scrcpy versions up to and including 3.3.3, prior to commit 3e40b24, contain a buffer overflow vulnerability in the scdevicemsgdeserialize function. A compromised device can send crafted messages that cause out-of-bounds reads, which may result in memory corruption or a denial-of-servic...

OSV-2025-857 Global-buffer-overflow in void jxl::N_AVX2::WriteToOutputStage::StoreUnsignedRow<unsigned char>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=454749502 Crash type: Global-buffer-overflow READ 16 Crash state: void jxl::NAVX2::WriteToOutputStage::StoreUnsignedRow jxl::NAVX2::WriteToOutputStage::OutputBuffers jxl::NAVX2::WriteToOutputStage::ProcessRow...

PT-2025-46096

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=454749502 Crash type: Global-buffer-overflow READ 16 Crash state: void jxl::N AVX2::WriteToOutputStage::StoreUnsignedRow jxl::N AVX2::WriteToOutputStage::OutputBuffers jxl::N AVX2::WriteToOutputStage::ProcessRow...

libjxl:djxl_fuzzer: Global-buffer-overflow in void jxl::N_AVX2::WriteToOutputStage::StoreUnsignedRow<unsigned char>

Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=5167703985029120 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: djxlfuzzer Job Type: libfuzzerasanlibjxl Platform Id: linux Crash Type: Global-buffer-overflow READ 16 Crash Address:...

OSV-2025-845 Global-buffer-overflow in icaltime_day_of_year

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=452914686 Crash type: Global-buffer-overflow READ 4 Crash state: icaltimedayofyear expandyeardays iteratorsetstart...

PT-2025-46092

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=452914686 Crash type: Global-buffer-overflow READ 4 Crash state: icaltime day of year expand year days iterator set start...

libical:libical_extended_fuzzer: Global-buffer-overflow in icaltime_day_of_year

Project: https://github.com/libical/libical.git Detailed Report: https://oss-fuzz.com/testcase?key=6602960185655296 Project: libical Fuzzing Engine: afl Fuzz Target: libicalextendedfuzzer Job Type: aflasanlibical Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address:...

opensc:fuzz_pkcs15_crypt: Global-buffer-overflow in sc_pkcs15emu_pteid_init

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6372063414910976 Project: opensc Fuzzing Engine: afl Fuzz Target: fuzzpkcs15crypt Job Type: aflasanopensc Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x5691a8cec658 Cra...

graphicsmagick:coder_MVG_fuzzer: Global-buffer-overflow in void jxl::N_AVX2::WriteToOutputStage::StoreUnsignedRow<unsigned char>

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6397769050030080 Project: graphicsmagick Fuzzing Engine: afl Fuzz Target: coderMVGfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Global-buffer-overflow READ 16 Crash...

imagemagick:encoder_jxl_fuzzer: Global-buffer-overflow in void jxl::N_AVX2::WriteToOutputStage::StoreUnsignedRow<unsigned char>

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5958109588946944 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderjxlfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Global-buffer-overflow READ 16...

PT-2025-43661

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=450328034 Crash type: Global-buffer-overflow READ 16 Crash state: void jxl::N SSE4::WriteToOutputStage::StoreUnsignedRow jxl::N SSE4::WriteToOutputStage::OutputBuffers jxl::N SSE4::WriteToOutputStage::ProcessRow...

libjxl:djxl_fuzzer: Global-buffer-overflow in void jxl::N_SSE4::WriteToOutputStage::StoreUnsignedRow<unsigned char>

Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=5327810488238080 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: djxlfuzzer Job Type: libfuzzerasanlibjxl Platform Id: linux Crash Type: Global-buffer-overflow READ 16 Crash Address:...