pcre2:pcre2_fuzzer_32: Heap-buffer-overflow in pcre2_compile_32

Detailed Report: https://oss-fuzz.com/testcase?key=5127933625958400 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer32 Job Type: libfuzzerasani386pcre2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0xf4a02b78 Crash State: pcre2compile32...

OESA-2026-1225 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdfwritecmap in...

SUSE-SU-2026:0234-1 Security update for libpng16

This update for libpng16 fixes the following issues: - CVE-2026-22695: Fixed heap buffer over-read in pngimagefinishread bsc1256525 - CVE-2026-22801: Fixed integer truncation causing heap buffer over-read in pngimagewrite bsc1256526...

Amazon Linux 2 : ImageMagick, --advisory ALAS2-2026-3123 (ALAS-2026-3123)

The version of ImageMagick installed on the remote host is prior to 6.9.10.97-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3123 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version...

ffmpeg:ffmpeg_dem_IAMF_fuzzer: Heap-buffer-overflow in scalable_channel_layout_config

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4854192536879104 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemIAMFfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRIT...

wasm3:fuzzer: Heap-buffer-overflow in CompileBlock

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=4589599130451968 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerasanwasm3 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x773f7b0f0528 Crash...

gdal:gtiff_fuzzer: Heap-buffer-overflow in gdal_TIFFReadScanline

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6022671491203072 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gtifffuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 7 Crash Address: 0x796dbe1e3d93 Cra...

EulerOS Virtualization 2.13.0 : libarchive (EulerOS-SA-2025-2583)

According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdta...

ffmpeg:ffmpeg_dem_IAMF_fuzzer: Heap-buffer-overflow in scalable_channel_layout_config

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6687125346254848 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemIAMFfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRIT...

JLSEC-2025-247 A vulnerability has been identified in the libarchive library

A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to...

libical:libical_extended_fuzzer: Heap-buffer-overflow in icalmemory_tmp_copy

Project: https://github.com/libical/libical.git Detailed Report: https://oss-fuzz.com/testcase?key=4905384176582656 Project: libical Fuzzing Engine: libFuzzer Fuzz Target: libicalextendedfuzzer Job Type: libfuzzerasanlibical Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Addres...

mruby:mruby_fuzzer: Heap-buffer-overflow in mrb_pack_pack

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6462498313404416 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x7a109f6e0191...

EUVD-2017-2616

Malware in sbrugna...

RockyLinux 10 : grub2 (RLSA-2025:16154)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:16154 advisory. grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write and Read. CVE-2024-45776 grub2: fs/ufs: OOB write in the heap CVE-2024-45781 grub2:...

EUVD-2025-17574

Malicious code in bioql PyPI...

EUVD-2022-55363

Malicious code in bioql PyPI...

libwebp:[email protected]: Heap-buffer-overflow in ProcessRows

Project: https://chromium.googlesource.com/webm/libwebp Detailed Report: https://oss-fuzz.com/testcase?key=5345813414084608 Project: libwebp Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzerasanlibwebp Platform Id: linux Crash Type:...

libdwarf:fuzz_crc_32: Heap-buffer-overflow in _dwarf_macho_load_dwarf_sections

Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=4931308642172928 Project: libdwarf Fuzzing Engine: libFuzzer Fuzz Target: fuzzcrc32 Job Type: libfuzzerasanlibdwarf Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address:...

EulerOS 2.0 SP13 : libarchive (EulerOS-SA-2025-2135)

According to the versions of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially...

Linux Distros Unpatched Vulnerability : CVE-2018-12115

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding recognized by Node.js under the names 'ucs2', 'ucs-2', 'utf16le' and...