md4c:fuzz-mdhtml: Global-buffer-overflow in md_start_new_block

Project: https://github.com/mity/md4c.git Detailed Report: https://oss-fuzz.com/testcase?key=4861355655233536 Project: md4c Fuzzing Engine: libFuzzer Fuzz Target: fuzz-mdhtml Job Type: libfuzzerasanmd4c Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x5b1d3cb65e20 Cra...

BIT-PHP-MIN-2026-6104 Global buffer over-read in mb_convert_encoding() with attacker-supplied encoding

In PHP versions 8.4. before 8.4.21 and 8.5. before 8.5.6, when an encoding name containing an embedded NUL byte is passed to mbconvertencoding or related mbstring functions, the code incorrectly assumes that when strncasecmp returns 0 it means the strings have the same length. This can lead to...

open62541:fuzz_mdns_message: Global-buffer-overflow in _rrparse

Detailed Report: https://oss-fuzz.com/testcase?key=6381930617831424 Project: open62541 Fuzzing Engine: afl Fuzz Target: fuzzmdnsmessage Job Type: aflasanopen62541 Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x593b174336df Crash State: rrparse messageparse...

CVE-2026-6104 Global buffer over-read in mb_convert_encoding() with attacker-supplied encoding

In PHP versions 8.4. before 8.4.21 and 8.5. before 8.5.6, when an encoding name containing an embedded NUL byte is passed to mbconvertencoding or related mbstring functions, the code incorrectly assumes that when strncasecmp returns 0 it means the strings have the same length. This can lead to...

OSV-2026-707 Global-buffer-overflow in txt2sd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=511056140 Crash type: Global-buffer-overflow READ 1 Crash state: txt2sd fuzzmdnsxht.cc...

PT-2026-55279

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=511056140 Crash type: Global-buffer-overflow READ 1 Crash state: txt2sd fuzz mdns xht.cc...

open62541:fuzz_mdns_xht_15: Global-buffer-overflow in txt2sd

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=6738070941794304 Project: open62541 Fuzzing Engine: afl Fuzz Target: fuzzmdnsxht15 Job Type: aflasanopen62541 Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

JLSEC-2026-408

A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doi...

PT-2026-41002

A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doi...

libheif:encoder_fuzzer: Global-buffer-overflow in svt_aom_get_blk_var_map

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5042418566365184 Project: libheif Fuzzing Engine: afl Fuzz Target: encoderfuzzer Job Type: aflasanlibheif Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x5988b570c04...

JLSEC-2026-204

NASM v2.16 was discovered to contain a global buffer overflow in the component dbgdbgtypevalue at /output/outdbg.c...

Security update for freerdp

This update for freerdp fixes the following issues: CVE-2026-25941: Out-of-Bounds Read in client RDPGFX channel via crafted WIRETOSURFACE2 PDU bsc1258919. CVE-2026-25942: Global-buffer-overflow in xfrailserverexecuteresult bsc1258920. CVE-2026-25952: Heap-use-after-free in xfSetWindowMinMaxInfo...

Security update for freerdp

This update for freerdp fixes the following issues: CVE-2026-25941: Out-of-Bounds Read in client RDPGFX channel via crafted WIRETOSURFACE2 PDU bsc1258919. CVE-2026-25942: Global-buffer-overflow in xfrailserverexecuteresult bsc1258920. CVE-2026-25952: Heap-use-after-free in xfSetWindowMinMaxInfo...

SUSE-SU-2026:1633-1 Security update for freerdp

This update for freerdp fixes the following issues: - CVE-2026-25941: Out-of-Bounds Read in client RDPGFX channel via crafted WIRETOSURFACE2 PDU bsc1258919. - CVE-2026-25942: Global-buffer-overflow in xfrailserverexecuteresult bsc1258920. - CVE-2026-25952: Heap-use-after-free in...

Security update for freerdp

This update for freerdp fixes the following issues: CVE-2026-25941: Out-of-Bounds Read in client RDPGFX channel via crafted WIRETOSURFACE2 PDU bsc1258919. CVE-2026-25942: Global-buffer-overflow in xfrailserverexecuteresult bsc1258920. CVE-2026-25952: Heap-use-after-free in xfSetWindowMinMaxInfo...

mruby:mruby_fuzzer: Global-buffer-overflow in fixed_width

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5180852039647232 Project: mruby Fuzzing Engine: honggfuzz Fuzz Target: mrubyfuzzer Job Type: honggfuzzasanmruby Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x5c3ba5fdf538...

vlc:vlc-demux-dec-libfuzzer-mpc: Global-buffer-overflow in mpc_decoder_decode_frame

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=6691885153583104 Project: vlc Fuzzing Engine: libFuzzer Fuzz Target: vlc-demux-dec-libfuzzer-mpc Job Type: libfuzzerasanvlc Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address:...

tdengine:sql-fuzzer: Global-buffer-overflow in tGetToken

Detailed Report: https://oss-fuzz.com/testcase?key=4807015468957696 Project: tdengine Fuzzing Engine: afl Fuzz Target: sql-fuzzer Job Type: aflasantdengine Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x563c8298c4e8 Crash State: tGetToken parse qParseSqlSyntax...

OSV-2026-561 Global-buffer-overflow in nameMatch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=500975977 Crash type: Global-buffer-overflow READ 1 Crash state: nameMatch QStringConverter::QStringConverter KMime::HeaderParsing::parseEncodedWord...

PT-2026-36870

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=500975977 Crash type: Global-buffer-overflow READ 1 Crash state: nameMatch QStringConverter::QStringConverter KMime::HeaderParsing::parseEncodedWord...