CVE-2026-17054

CVE-2026-17054 affects the Espressif ESP-hosted Wi-Fi driver (drivers/wifi/esp_hosted/) in Zephyr RTOS . The 16-bit TLV data_length field is read from SPI frames without bounds-checking against the receive buffer, allowing an adjacent, unauthenticated attacker to trigger an out-of-bounds read of ...

OSV-2020-2042 UNKNOWN WRITE in pb_release_single_field

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22329 Crash type: UNKNOWN WRITE Crash state: pbreleasesinglefield pbrelease pbdecode...

firestore:firestore_serializer_fuzzer: Crash in pb_release_single_field

Detailed Report: https://oss-fuzz.com/testcase?key=5691535105720320 Project: firestore Fuzzing Engine: afl Fuzz Target: serializerfuzzer Job Type: aflasanfirestore Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0xfffffffffffffff1 Crash State: pbreleasesinglefield pbrelease pbdecode...

firestore:serializer_fuzzer: Crash in pb_release_single_field

Detailed Report: https://oss-fuzz.com/testcase?key=5650431242141696 Project: firestore Fuzzing Engine: libFuzzer Fuzz Target: serializerfuzzer Job Type: libfuzzerasanfirestore Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000000187eef Crash State: pbreleasesinglefield pbrelease...