REFramework security vulnerabilities

REFramework is a scripting platform developed by PrayDog, the individual developer of the game. Versions of REFramework prior to 1.5.5 contained security vulnerabilities. These vulnerabilities stemmed from a heap buffer overflow in the Lua debugging component ldebug.c, which could allow arbitrary...

EUVD-2026-4701

A Heap-based Buffer Overflow vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS 2025 through Release SOLIDWORKS 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in avi_parse_input_file

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5633939695009792 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x766d11f17dcc Crash State:...

PT-2026-21384

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=478301105 Crash type: Heap-buffer-overflow WRITE 4 Crash state: pcre2 compile 32 pcre2 fuzzsupport.c...

GIMP: Arbitrary Code Execution

Background GIMP is the GNU Image Manipulation Program. XCF is the native image file format used by GIMP. Description A vulnerability has been discovered in GIMP. Please review the CVE identifier referenced below for details. Impact This vulnerability allows remote attackers to execute arbitrary...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::VrrpLayer::getIPAddresses

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5074377262825472 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::TLVRecordReader<pcpp::DhcpOption>::getTLVRecord

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4874193132126208 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::TelnetLayer::getFieldLen

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4519261329752064 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 7 Crash...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::SipResponseFirstLine::parseFirstLine

Detailed Report: https://oss-fuzz.com/testcase?key=5939270128041984 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x79434f6e0ec9 Crash State:...

pcre2:pcre2_fuzzer_32: Heap-buffer-overflow in pcre2_compile_32

Detailed Report: https://oss-fuzz.com/testcase?key=5127933625958400 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer32 Job Type: libfuzzerasani386pcre2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0xf4a02b78 Crash State: pcre2compile32...

curl: Integer Underflow in src/var.c

Summary: A potential Integer Underflow vulnerability was identified in the setvariable function within src/var.c. the flaw occurs during the calculation of the variable content length clen when a byte range is specified. specifically, the code fails to validate if startoffset is greater than...

libheif:file_fuzzer: Heap-buffer-overflow in HeifPixelImage::scale_nearest_neighbor

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=6362761889382400 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: filefuzzer Job Type: libfuzzerasani386libheif Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

gdal:gdal_fuzzer: Heap-buffer-overflow in m_zero_block

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5868964264869888 Project: gdal Fuzzing Engine: afl Fuzz Target: gdalfuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x79534a0e7410 Crash State:...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::MplsLayer::toString

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5635714925789184 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

CVE-2026-24406

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have a Heap Buffer Overflow vulnerability in CIccTagNamedColor2::SetSize. This occurs when user-controllable input is unsafely incorporated into ICC profi...

CVE-2026-24406: Improper Input Validation

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have a Heap Buffer Overflow vulnerability in CIccTagNamedColor2::SetSize. This occurs when user-controllable input is unsafely incorporated into ICC profi...

CVE-2026-24405: Improper Input Validation

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have a Heap Buffer Overflow vulnerability in CIccMpeCalculator::Read. This occurs when user-controllable input is unsafely incorporated into ICC profile...

CVE-2026-24412: Improper Input Validation

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have aHeap Buffer Overflow vulnerability in the CIccTagXmlSegmentedCurve::ToXml function. This occurs when user-controllable input is unsafely incorporate...

qemu:qemu-fuzz-i386-target-generic-fuzz-virtio-9p-synth: Heap-buffer-overflow in synth_name_to_path

Detailed Report: https://oss-fuzz.com/testcase?key=4847338748444672 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-virtio-9p-synth Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x798d434f9570 Crash...

CVE-2026-0793

ALGO 8180 IP Audio Alerter InformaCast Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this vulnerability...