libyaml:libyaml_dumper_fuzzer: Use-of-uninitialized-value in yaml_document_delete

Detailed Report: https://oss-fuzz.com/testcase?key=6038420582629376 Project: libyaml Fuzzing Engine: libFuzzer Fuzz Target: libyamldumperfuzzer Job Type: libfuzzermsanlibyaml Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: yamldocumentdelete...

WordPress Plugin Optimizer plugin <= 1.3.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Plugin Optimizer versions = 1.3.7...

wasm3:fuzzer: Index-out-of-bounds in CompileCallArgsAndReturn

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=6184114127699968 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerubsanwasm3 Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

selinux:binpolicy-fuzzer: Crash in range_to_str

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=4966488214929408 Project: selinux Fuzzing Engine: honggfuzz Fuzz Target: binpolicy-fuzzer Job Type: honggfuzzasanselinux Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

graphicsmagick:coder_AVIF_fuzzer: Heap-buffer-overflow in Chunk::Chunk

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5916046629601280 Project: graphicsmagick Fuzzing Engine: afl Fuzz Target: coderAVIFfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Addres...

libssh2:ssh2_client_fuzzer: Heap-buffer-overflow in session_startup

Project: https://github.com/cmeister2/libssh2.git https://github.com/libssh2/libssh2.git Detailed Report: https://oss-fuzz.com/testcase?key=5961610008264704 Project: libssh2 Fuzzing Engine: afl Fuzz Target: ssh2clientfuzzer Job Type: aflasanlibssh2 Platform Id: linux Crash Type:...

SUSE: Security Advisory (SUSE-SU-2025:4491-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 42 : cef (2025-7605ca0d7d)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-7605ca0d7d advisory. Update to cef-143.0.10+g8aed01b + chromium-143.0.7499.146 rhbz2423482 High CVE-2025-14765: Use after free in WebGPU High CVE-2025-14766: Out of boun...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in put_weighted_pred_8_fallback

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4677893541396480 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

open62541:fuzz_xml_decode_encode: Crash in cfree

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5788278952624128 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzxmldecodeencode Job Type: libfuzzerubsanopen62541 Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

selinux:binpolicy-fuzzer: Object-size in level_to_str

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=4630600918302720 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: binpolicy-fuzzer Job Type: libfuzzerubsanselinux Platform Id: linux Crash Type: Object-size Crash Address: Crash State...

kimageformats:kimgio_heif_fuzzer: Use-of-uninitialized-value in put_weighted_pred_8_fallback

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=4652958001463296 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioheiffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

CVE-2025-14372

Use after free in Password Manager in Google Chrome prior to 143.0.7499.110 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

WordPress Flow-Flow Social Feed Stream plugin 3.0.0-4.7.5 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting

Missing Authorization to Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by kr0d in WordPress Plugin Flow-Flow Social Stream versions 3.0.0-4.7.5...

WordPress Like DisLike Voting plugin <= 1.0.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF'] vulnerability

Reflected Cross-Site Scripting via $SERVER'PHPSELF' vulnerability discovered by Abdulsamad Yusuf 0xVenus - Envorasec in WordPress Plugin Like DisLike Voting versions = 1.0.1...

radare2:ia_fuzz: Heap-buffer-overflow in dotnet_parse_version_info

Project: https://github.com/radare/radare2.git https://github.com/radareorg/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=6530590062215168 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type:...

libvpx:vpx_dec_fuzzer_vp8: Use-of-uninitialized-value in vp8_multiframe_quality_enhance

Project: https://chromium.googlesource.com/webm/libvpx Detailed Report: https://oss-fuzz.com/testcase?key=5346190351990784 Project: libvpx Fuzzing Engine: libFuzzer Fuzz Target: vpxdecfuzzervp8 Job Type: libfuzzermsanlibvpx Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

chromium -- multiple security fixes

Chrome Releases reports: This update includes 3 security fixes: 466192044 High: Under coordination. 460599518 Medium CVE-2025-14372: Use after free in Password Manager. Reported by Weipeng Jiang @Krace of VRI on 2025-11-14 461532432 Medium CVE-2025-14373: Inappropriate implementation in Toolbar...

opensc:fuzz_pkcs15init: Index-out-of-bounds in cflex_create_pin_file

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5641925089886208 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15init Job Type: libfuzzerubsanopensc Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

CVE-2025-13721

Race in v8 in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...