6066 matches found
fuzzbench
FuzzBench: Fuzzer Benchmarking As a Service FuzzBench is a free service that evaluates fuzzers on a wide variety of real-world benchmarks, at Google scale. The goal of FuzzBench is to make it painless to rigorously evaluate fuzzing research and make fuzzing research easier for the community to...
clusterfuzz
ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...
oss-fuzz-gen
A Framework for Fuzz Target Generation and Evaluation This framework generates fuzz targets for real-world C/C++/Java/Python projects with various Large Language Models LLM and benchmarks them via the OSS-Fuzz platform. More details available in AI-Powered Fuzzing: Breaking the Bug Hunting Barrie...
oss-fuzz
OSS-Fuzz: Fuzzing Continuo para Software de Código Abierto Fuzz testing es una técnica bien conocida para descubrir errores de programación en el software. Muchos de estos errores detectables, como buffer overflow, pueden tener graves implicaciones de seguridad. Google ha encontrado miles de...
clusterfuzz
ClusterFuzz ClusterFuzz es una infraestructura de fuzzing escalable que encuentra problemas de seguridad y estabilidad en software. Google utiliza ClusterFuzz para fuzzear todos los productos de Google y como backend de fuzzing para OSS-Fuzz. ClusterFuzz proporciona muchas características que...
tmux-fuzzing
Laboratorio de Fuzzing: Mejorando el Fuzzing para tmux Seguridad de Software @ EPFL, Primavera 2025 Resumen En este laboratorio, mejoramos los esfuerzos de fuzzing para el multiplexor de terminal tmux dentro de la infraestructura OSS-Fuzz de Google. Primero establecimos una línea base evaluando l...
LibPNG_OSS-Fuzz
Fuzzing y Análisis de Vulnerabilidades de libpng Proyecto de Investigación en Seguridad Grupal Acerca del Fuzzing: El fuzzing es una técnica automatizada de pruebas de software que proporciona datos inválidos, inesperados o aleatorios como entrada a un programa para descubrir errores y...
OSV-2026-1239 Security exception in org.apache.lucene.util.ArrayUtil.copyOfSubArray
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=557292360 Crash type: Security exception Crash state: org.apache.lucene.util.ArrayUtil.copyOfSubArray org.apache.lucene.util.BytesRef.deepCopyOf org.apache.lucene.index.Term...
OSV-2026-1220 Use-of-uninitialized-value in str_escape
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=554268877 Crash type: Use-of-uninitialized-value Crash state: strescape mrbvmexec yieldwithattr...
Astra Linux – Vulnerability in jq
jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-bufferoverflow error occurs in the jvstringvfmt function within the jqfuzzexecute harness from oss-fuzz. This error happens at line 1456 of the jv.c file: void p = mallocsz;. As of the time of publication, no patch...
OSV-2026-1189 Global-buffer-overflow in oidc_cfg_redirect_urls_allowed_get
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=550474749 Crash type: Global-buffer-overflow READ 8 Crash state: oidccfgredirecturlsallowedget oidcvalidateredirecturl fuzzurl.c...
ANT-2026-ZRDQDR79 · util-linux · heap-use-after-free
use-after-free medium CVE-2026-13595 GHSA-qpmf-9p9c-455w Severity Claude critical · Security research firm high · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-ZRDQDR79:...
OSV-2026-1157 Memcpy-param-overlap in zxc_decompress_chunk_wrapper_default
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=546426939 Crash type: Memcpy-param-overlap Crash state: zxcdecompresschunkwrapperdefault zxcdecompressframe fuzzdecompress.c...
OSV-2026-1127 Heap-buffer-overflow in read_data
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=543583447 Crash type: Heap-buffer-overflow READ 1 Crash state: readdata zipsourcecall zipsourceread...
OSV-2026-1110 Check failed in CheckUnwind
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=541969271 Crash type: Check failed Crash state: CheckUnwind mrbbasicallocfunc pmnodehashinsert...
OSV-2026-1095 Heap-buffer-overflow in grk::t1::CodeblockDecompressImpl::parsePacketData
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=540111888 Crash type: Heap-buffer-overflow READ 8 Crash state: grk::t1::CodeblockDecompressImpl::parsePacketData grk::PacketParser::readData grk::PacketParser::parsePacketData...
OSV-2026-1092 Security exception in com.github.javaparser.ast.expr.Name.accept
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=539142495 Crash type: Security exception Crash state: com.github.javaparser.ast.expr.Name.accept com.github.javaparser.ast.visitor.VoidVisitorAdapter.lambda$visit$133 java.base/java.util.Optional.ifPresent...
OSV-2026-1071 Security exception in com.github.javaparser.ast.expr.FieldAccessExpr.accept
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=537183300 Crash type: Security exception Crash state: com.github.javaparser.ast.expr.FieldAccessExpr.accept com.github.javaparser.ast.visitor.VoidVisitorAdapter.visit java.base/java.nio.ByteBuffer.position...
Open Babel has heap buffer overflow in ChemKin ChemKinFormat::CheckSpecies
SummaryA memory-safety vulnerability in Open Babel's ChemKin parser causeda heap buffer overflow when reading a crafted input file. DetailsThe flaw was in ChemKinFormat::CheckSpecies. A malformed speciesrecord caused the parser to write past the end of a heap-allocatedbuffer. ImpactOpen Babel is ...