vlc:vlc-demux-dec-libfuzzer: Heap-buffer-overflow in lzokay::decompress

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=4802672541892608 Project: vlc Fuzzing Engine: libFuzzer Fuzz Target: vlc-demux-dec-libfuzzer Job Type: libfuzzerasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

SUSE-SU-2025:4494-1 Security update for libpng16

This update for libpng16 fixes the following issues: - CVE-2025-65018: Fixed heap buffer overflow in pngcombinerow triggered via pngimagefinishread bsc1254160 - CVE-2025-66293: Fixed LIBPNG out-of-bounds read in pngimagereadcomposite bsc1254480 - CVE-2025-64506: Fixed heap buffer over-read in...

jq:jq_fuzz_compile: Heap-buffer-overflow in jvp_string_append

Project: https://github.com/jqlang/jq.git Detailed Report: https://oss-fuzz.com/testcase?key=5819063130718208 Project: jq Fuzzing Engine: libFuzzer Fuzz Target: jqfuzzcompile Job Type: libfuzzerasanjq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x7ce57e6ff0a5 Crash...

Sokol 安全漏洞

Sokol is a platform interface for Andre Weissflog Personal Developer. A security vulnerability exists in Sokol that stems from a misbehavior of the function sgpipelinecommoninit, which could lead to a heap buffer overflow...

Foxit PDF Reader 安全漏洞

Foxit PDF Reader is a PDF reader from the Chinese company Foxit Foxit. A security vulnerability exists in Foxit PDF Reader that originates from a heap buffer overflow when processing specially crafted JBIG2 data, which could lead to the execution of arbitrary code...

CVE-2025-68469 ImageMagick vulnerable to heap-buffer-overflow

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.1-14, ImageMagick crashes when processing a crafted TIFF file. Version 7.1.1-14 fixes the issue...

CVE-2025-68469

CVE-2025-68469 affects ImageMagick prior to 7.1.1-14, where processing a specially crafted TIFF file causes a crash. The issue is fixed in 7.1.1-14. For administrators, remediation is to upgrade ImageMagick to 7.1.1-14 or later (per the initial description and connected advisories referencing the...

mongoose:fuzz: Heap-buffer-overflow in rx_icmp

Project: https://github.com/cesanta/mongoose.git Detailed Report: https://oss-fuzz.com/testcase?key=4595733568487424 Project: mongoose Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasanmongoose Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x77da6a8e03...

GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2 files. The...

Capstone 安全漏洞

Capstone is a cross-platform disassembly framework from Capstone, Inc. that supports use for binary analysis and reverse engineering of secure communications, among other things. A security vulnerability exists in Capstone 6.0.0-Alpha5 and earlier versions, which stems from Skipdata length not...

hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM_memcpyvv function.

...

Adobe DNG Software Development Kit (SDK) Heap Buffer Overflow Vulnerability

Adobe DNG Software Development Kit SDK is a software development kit from the American company Audobee Adobe. The Adobe DNG Software Development Kit SDK contains a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code on a system or cause an application...

ffmpeg:ffmpeg_dem_IAMF_fuzzer: Heap-buffer-overflow in scalable_channel_layout_config

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6687125346254848 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemIAMFfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRIT...

inchi:inchi_input_fuzzer: Heap-buffer-overflow in ParseSegmentMobileH

Detailed Report: https://oss-fuzz.com/testcase?key=6112068266950656 Project: inchi Fuzzing Engine: afl Fuzz Target: inchiinputfuzzer Job Type: aflasaninchi Platform Id: linux Crash Type: Heap-buffer-overflow READ 15 Crash Address: 0x5020000003f8 Crash State: ParseSegmentMobileH InChILine2Data...

Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow

...

nettle:fuzz_dsa_signature_from_sexp: Heap-buffer-overflow in sexp_iterator_parse

Detailed Report: https://oss-fuzz.com/testcase?key=4710148410245120 Project: nettle Fuzzing Engine: libFuzzer Fuzz Target: fuzzdsasignaturefromsexp Job Type: libfuzzerasannettle Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x609000000354 Crash State: sexpiteratorparse...

CVE-2025-36923

In NrmmDecoder::DecodeSORTransparentContext of cnNrmmDecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

EUVD-2025-202851

In NrmmDecoder::DecodeSORTransparentContext of cnNrmmDecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

radare2:ia_fuzz: Heap-buffer-overflow in dotnet_parse_version_info

Project: https://github.com/radare/radare2.git https://github.com/radareorg/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=6530590062215168 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type:...

CVE-2025-14512

CVE-2025-14512 affects GLib2 (glib2) in IBM Netezza Appliance. The IBM security bulletin confirms a vulnerability in GLib’s GIO escape_byte_string() that can cause a heap-based buffer overflow leading to DoS when processing certain file or remote filesystem attribute values. Remediation: upgrade ...