CVE-2026-41992

GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across the LZ77, LZW, and LZH decompression...

CVE-2026-41992

GNU gzip is affected by a global buffer overflow in the LZH decompression logic caused by reusing a shared global state across LZ77/LZW/LZH within a single run. The vulnerability arises from a global array not reinitialized between files, enabling an attacker to deplete or poison the shared state...

CVE-2026-41992 Global Buffer Overflow in GNU gzip

GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across the LZ77, LZW, and LZH decompression...

wasm3:fuzzer: Global-buffer-overflow in CopyStackSlotsR

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=5169294477164544 Project: wasm3 Fuzzing Engine: afl Fuzz Target: fuzzer Job Type: aflasanwasm3 Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x5ac6f62cf448 Crash State:...

dropbear:fuzzer-postauth_nomaths: Global-buffer-overflow in wrapfd_new_fuzzinput

Detailed Report: https://oss-fuzz.com/testcase?key=5358753208926208 Project: dropbear Fuzzing Engine: honggfuzz Fuzz Target: fuzzer-postauthnomaths Job Type: honggfuzzasandropbear Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x55555610a4b4 Crash State:...

graphicsmagick:coder_HEIF_fuzzer: Global-buffer-overflow in vvdec::Quant::dequant

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5009928086683648 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderHEIFfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type: Global-buffer-overflow READ ...

OSV-2026-863 Global-buffer-overflow in cram_decoder_init

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=519841736 Crash type: Global-buffer-overflow READ 8 Crash state: cramdecoderinit cramdecodecompressionheader cramnextslice...

PT-2026-49602

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=519841736 Crash type: Global-buffer-overflow READ 8 Crash state: cram decoder init cram decode compression header cram next slice...

htslib:hts_open_fuzzer: Global-buffer-overflow in cram_decoder_init

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=6304419888300032 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerasanhtslib Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address:...

vlc:vlc-demux-dec-libfuzzer-gme: Global-buffer-overflow in Classic_Emu::mute_voices_

Detailed Report: https://oss-fuzz.com/testcase?key=6663518983356416 Project: vlc Fuzzing Engine: libFuzzer Fuzz Target: vlc-demux-dec-libfuzzer-gme Job Type: libfuzzerasanvlc Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x56f68be81ad0 Crash State:...

php: global buffer over-read in mb_convert_encoding() with attacker-supplied encoding

A flaw was found in PHP. When an encoding name containing an embedded NUL byte is passed to mbconvertencoding or related mbstring functions, an out-of-bounds read of only 1 byte can occur due to the incorrect processing of string lengths. This issue can cause a denial of service or limited...

AZL-89190 CVE-2026-42250 affecting package kata-containers-cc for versions less than 3.15.0.aks0-15

bzip2 contains an off‑by‑one error in the bzip2recover utility. When processing a specially crafted file, the application performs an out‑of‑bounds write to a global buffer, resulting in memory corruption and a crash denial of service. This issue was fixed in bzip2...

freeradius:fuzzer_xlat: Global-buffer-overflow in tokenize_field

Detailed Report: https://oss-fuzz.com/testcase?key=5900948294926336 Project: freeradius Fuzzing Engine: libFuzzer Fuzz Target: fuzzerxlat Job Type: libfuzzerasanfreeradius Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x7bce01f17a48 Crash State: tokenizefield...

gpac:fuzz_probe_analyze: Global-buffer-overflow in fs_check_filter_is_source

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5533128369438720 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x56bfcf73a95...

openbabel:fuzz_convert: Global-buffer-overflow in OpenBabel::OBMol::ConvertZeroBonds

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=4790758942244864 Project: openbabel Fuzzing Engine: libFuzzer Fuzz Target: fuzzconvert Job Type: libfuzzerasanopenbabel Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address...

WS-2020-0378

HarfBuzz in versions 2.3.0 to 2.7.0 is vulnerable to global-buffer-overflow in OT::VarData::getscalars, related to src/hb-cff2-interp-cs.hh...

tdengine:sql-fuzzer: Global-buffer-overflow in tGetToken

Detailed Report: https://oss-fuzz.com/testcase?key=4570542010335232 Project: tdengine Fuzzing Engine: libFuzzer Fuzz Target: sql-fuzzer Job Type: libfuzzerasantdengine Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x593d27421655 Crash State: tGetToken...

OSV-2026-727 Global-buffer-overflow in md_start_new_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=512429152 Crash type: Global-buffer-overflow READ 4 Crash state: mdstartnewblock mdparse mdhtml...

PT-2026-42896

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=512429152 Crash type: Global-buffer-overflow READ 4 Crash state: md start new block md parse md html...

gpac:fuzz_probe_analyze: Global-buffer-overflow in fs_check_filter_is_source

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6419327325896704 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x5746037a0690 Crash Stat...