CVE-2026-54354

CVE-2026-54354 is a SQL injection vulnerability in MapServer prior to version 8.6.4 , affecting the PostGIS runtime filter translation in src/mappostgis.cpp and msPostGISLayerTranslateFilter(). When a connection type of POSTGIS is configured with metadata such as gml__type=Integer, the code treat...

OSV-2020-902 Index-out-of-bounds in QUnicodeTables::qGetProp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24266 Crash type: Index-out-of-bounds Crash state: QUnicodeTables::qGetProp QString QUnicodeTables::convertCase QString::toLowerhelper...

kimageformats/kimgio_kra_fuzzer: Use-of-uninitialized-value in QString::vasprintf

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5763219051773952 Project: kimageformats Fuzzer: libFuzzerkimageformatskimgiokrafuzzer Fuzz target binary: kimgiokrafuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type:...

kimageformats/kimgio_kra_fuzzer: Use-of-uninitialized-value in QString::vasprintf

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5710491000766464 Project: kimageformats Fuzzer: libFuzzerkimageformatskimgiokrafuzzer Fuzz target binary: kimgiokrafuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type:...

karchive/karchive_fuzzer: Stack-buffer-overflow in QString::fromLocal8Bit

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5661125477138432 Project: karchive Fuzzer: aflkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: aflasankarchive Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address:...