PT-2026-118411

gx binres theme load and gx binres font load take the resource as a bare GX UBYTE with no length, and GX BINRES DATA INFO has no field to carry one. Every read is therefore performed at an offset the file itself chose, against a buffer whose extent the loader does not know. A resource that declar...

PT-2026-113955

The GUIX binary resource theme loader sizes its arena and populates it in two separate passes that traverse the resource file with independent cursor arithmetic. Because gx page header data size is never validated against the glyph data a page actually contains, the two passes can read different...

PT-2026-102795

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The gx binres theme load function incorrectly sizes its theme buffer for the requested theme and performs allocation even if the resource contains no theme with...

irssi/theme-load-fuzz: Heap-buffer-overflow in theme_format_expand_abstract

Project: https://github.com/irssi/irssi.git Detailed report: https://oss-fuzz.com/testcase?key=5860683188011008 Project: irssi Fuzzer: aflirssitheme-load-fuzz Fuzz target binary: theme-load-fuzz Job Type: aflasanirssi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

irssi/theme-load-fuzz: Heap-buffer-overflow in theme_format_expand_abstract

Project: https://github.com/irssi/irssi.git Detailed report: https://oss-fuzz.com/testcase?key=5060418910289920 Project: irssi Fuzzer: aflirssitheme-load-fuzz Fuzz target binary: theme-load-fuzz Job Type: aflasanirssi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...