clusterfuzz

ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...

oss-fuzz-gen

A Framework for Fuzz Target Generation and Evaluation This framework generates fuzz targets for real-world C/C++/Java/Python projects with various Large Language Models LLM and benchmarks them via the OSS-Fuzz platform. More details available in AI-Powered Fuzzing: Breaking the Bug Hunting Barrie...

oss-fuzz

OSS-Fuzz: オープンソースソフトウェアのための継続的ファジング ファズテストは、ソフトウェアのプログラミングエラーを発見するためのよく知られた手法です。検出可能なエラーの多くは、バッファオーバーフローのように、深刻なセキュリティ上の影響を及ぼす可能性があります。Googleは、Chromeコンポーネントのガイド付きインプロセスファジングを展開することで、数千件のセキュリティ脆弱性と安定性バグを発見してきました。そして、このサービスをオープンソースコミュニティと共有したいと考えています。 Core Infrastructure...

clusterfuzz

ClusterFuzz ClusterFuzzは、ソフトウェアのセキュリティおよび安定性の問題を見つけるスケーラブルなファジング基盤です。 Googleは、すべてのGoogle製品をファジングするためにClusterFuzzを使用しており、OSS-Fuzzのファジングバックエンドとしても使用しています。 ClusterFuzzは、ファジングをソフトウェアプロジェクトの開発プロセスにシームレスに統合する多くの機能を提供します。 高度にスケーラブル。任意のサイズのクラスターで実行可能（例：OSS-Fuzzのインスタンスは100,000VMで動作）。 クラッシュの正確な重複排除。...

tmux-fuzzing

Fuzzing Lab: Enhancing Fuzzing for tmux Software Security @ EPFL, Spring 2025 Abstract In this lab, we enhanced the fuzzing efforts for the tmux terminal multiplexer within Google's OSS-Fuzz infrastructure. We first established a baseline by evaluating the line coverage of the existing input-fuzz...

fuzzing

Fuzzing Forum This project aims at hosting tutorials, examples, discussions, research proposals, and other resources related to fuzzing. External contributions are welcome, please see CONTRIBUTING file for more info. Documentation Why fuzz? Introduction to fuzzing What makes a good fuzz target Ho...

LibPNG_OSS-Fuzz

Fuzzing and Vulnerability Analysis of libpng Group Security Research Project About Fuzzing: Fuzzing is an automated software testing technique that provides invalid, unexpected, or random data as inputs to a program to discover bugs and vulnerabilities. Coverage-guided fuzzing uses code coverage...

clusterfuzz v2.40.2

ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...

suricata suricata-8.0.7

Suricata Introduction Suricata is a network IDS, IPS and NSM engine developed by the OISF and the Suricata community. Resources Home Page Bug Tracker User Guide Dev Guide Installation Guide User Support Forum Contributing We're happily taking patches and other contributions. Please see our...

OSV-2026-1239 Security exception in org.apache.lucene.util.ArrayUtil.copyOfSubArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=557292360 Crash type: Security exception Crash state: org.apache.lucene.util.ArrayUtil.copyOfSubArray org.apache.lucene.util.BytesRef.deepCopyOf org.apache.lucene.index.Term...

clusterfuzz v2.39.2

ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...

OSV-2026-1220 Use-of-uninitialized-value in str_escape

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=554268877 Crash type: Use-of-uninitialized-value Crash state: strescape mrbvmexec yieldwithattr...

OSV-2026-1210 Heap-buffer-overflow in decode_get_histogram_format_resp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=553267079 Crash type: Heap-buffer-overflow READ 1 Crash state: decodegethistogramformatresp decodegethistogramformatrespfuzzer.cc...

OSV-2026-1189 Global-buffer-overflow in oidc_cfg_redirect_urls_allowed_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=550474749 Crash type: Global-buffer-overflow READ 8 Crash state: oidccfgredirecturlsallowedget oidcvalidateredirecturl fuzzurl.c...

ANT-2026-ZRDQDR79 · util-linux · heap-use-after-free

use-after-free medium CVE-2026-13595 GHSA-qpmf-9p9c-455w Severity Claude critical · Security research firm high · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-ZRDQDR79:...

OSV-2026-1157 Memcpy-param-overlap in zxc_decompress_chunk_wrapper_default

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=546426939 Crash type: Memcpy-param-overlap Crash state: zxcdecompresschunkwrapperdefault zxcdecompressframe fuzzdecompress.c...

php:php-fuzz-function-jit: Heap-use-after-free in zval_ptr_dtor_nogc

Detailed Report: https://oss-fuzz.com/testcase?key=4584750845853696 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-function-jit Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x7944a94efd30 Crash State: zvalptrdtornogc...

OSV-2026-1127 Heap-buffer-overflow in read_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=543583447 Crash type: Heap-buffer-overflow READ 1 Crash state: readdata zipsourcecall zipsourceread...

OSV-2026-1110 Check failed in CheckUnwind

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=541969271 Crash type: Check failed Crash state: CheckUnwind mrbbasicallocfunc pmnodehashinsert...

OSV-2026-1095 Heap-buffer-overflow in grk::t1::CodeblockDecompressImpl::parsePacketData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=540111888 Crash type: Heap-buffer-overflow READ 8 Crash state: grk::t1::CodeblockDecompressImpl::parsePacketData grk::PacketParser::readData grk::PacketParser::parsePacketData...