oss-fuzz-gen

A Framework for Fuzz Target Generation and Evaluation This framework generates fuzz targets for real-world C/C++/Java/Python projects with various Large Language Models LLM and benchmarks them via the OSS-Fuzz platform. More details available in AI-Powered Fuzzing: Breaking the Bug Hunting Barrie...

tmux-fuzzing

Fuzzing Lab: Enhancing Fuzzing for tmux Software Security @ EPFL, Spring 2025 Abstract In this lab, we enhanced the fuzzing efforts for the tmux terminal multiplexer within Google's OSS-Fuzz infrastructure. We first established a baseline by evaluating the line coverage of the existing input-fuzz...

clusterfuzz

ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...

LibPNG_OSS-Fuzz

Fuzzing and Vulnerability Analysis of libpng Group Security Research Project About Fuzzing: Fuzzing is an automated software testing technique that provides invalid, unexpected, or random data as inputs to a program to discover bugs and vulnerabilities. Coverage-guided fuzzing uses code coverage...

fuzzbench

FuzzBench: Fuzzer Benchmarking As a Service FuzzBench is a free service that evaluates fuzzers on a wide variety of real-world benchmarks, at Google scale. The goal of FuzzBench is to make it painless to rigorously evaluate fuzzing research and make fuzzing research easier for the community to...

clusterfuzz

ClusterFuzz ClusterFuzz es una infraestructura de fuzzing escalable que encuentra problemas de seguridad y estabilidad en software. Google utiliza ClusterFuzz para fuzzear todos los productos de Google y como backend de fuzzing para OSS-Fuzz. ClusterFuzz proporciona muchas características que...

oss-fuzz

OSS-Fuzz: Fuzzing Continuo per Software Open Source Il fuzz testing è una tecnica ben nota per scoprire errori di programmazione nel software. Molti di questi errori rilevabili, come il buffer overflow, possono avere serie implicazioni per la sicurezza. Google ha trovato migliaia di vulnerabilità...

OSV-2026-1314 Heap-buffer-overflow in vacm_getAccessEntry

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=564017938 Crash type: Heap-buffer-overflow READ 3 Crash state: vacmgetAccessEntry snmpsecmodelsfuzzer.c...

clusterfuzz v2.40.2

ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...

readstat:fuzz_format_sas7bdat: Heap-buffer-overflow in sas7bdat_parse_all_pages_pass2

Project: https://github.com/WizardMac/ReadStat.git Detailed Report: https://oss-fuzz.com/testcase?key=6263848727019520 Project: readstat Fuzzing Engine: libFuzzer Fuzz Target: fuzzformatsas7bdat Job Type: libfuzzerasanreadstat Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

OSV-2026-1294 UNKNOWN WRITE in av1_cdef_mse_calc_frame_mt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=562150738 Crash type: UNKNOWN WRITE Crash state: av1cdefmsecalcframemt av1cdefsearch encodewithrecodeloopandfilter...

suricata suricata-8.0.7

Suricata Introduction Suricata is a network IDS, IPS and NSM engine developed by the OISF and the Suricata community. Resources Home Page Bug Tracker User Guide Dev Guide Installation Guide User Support Forum Contributing We're happily taking patches and other contributions. Please see our...

OSV-2026-1293 UNKNOWN READ in md_is_link_title

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=561822522 Crash type: UNKNOWN READ Crash state: mdislinktitle mdanalyzeinlines mdprocessnormalblockcontents...

OSV-2026-1274 Heap-buffer-overflow in md_analyze_inlines

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=560657993 Crash type: Heap-buffer-overflow READ 4 Crash state: mdanalyzeinlines mdprocessnormalblockcontents mdprocessallblocks...

OSV-2026-1239 Security exception in org.apache.lucene.util.ArrayUtil.copyOfSubArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=557292360 Crash type: Security exception Crash state: org.apache.lucene.util.ArrayUtil.copyOfSubArray org.apache.lucene.util.BytesRef.deepCopyOf org.apache.lucene.index.Term...

OSV-2026-1235 UNKNOWN READ in renumber_by_map

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=557283672 Crash type: UNKNOWN READ Crash state: renumberbymap renumberbymap disablenonamegroupcapture...

clusterfuzz v2.39.2

ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...

hostap:eapol-key-auth: Crash in eapol-key-auth.c

Project: git://w1.fi/srv/git/hostap.git Detailed Report: https://oss-fuzz.com/testcase?key=4938556997697536 Project: hostap Fuzzing Engine: libFuzzer Fuzz Target: eapol-key-auth Job Type: libfuzzerubsanhostap Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x5c31428362c0 Crash State:...

OSV-2026-1220 Use-of-uninitialized-value in str_escape

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=554268877 Crash type: Use-of-uninitialized-value Crash state: strescape mrbvmexec yieldwithattr...

vlc:vlc-demux-dec-libfuzzer-aac: Global-buffer-overflow in DecodeBlock

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=6155966759632896 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-aac Job Type: aflasanvlc Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x5b19c24c2c2...