4507 matches found
OSV-2026-1481 Heap-buffer-overflow in ndpi_search_l2tp
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=580370355 Crash type: Heap-buffer-overflow READ 2 Crash state: ndpisearchl2tp checkndpidetectionfunc ndpidetectionprocesspacket...
OSV-2026-1440 Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=576816438 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.RegexInjection.hookInternal com.codeintelligence.jazzer.sanitizers.RegexInjection.patternHook...
OSV-2026-1437 Use-of-uninitialized-value in processHandshakeTLSBlock
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=576341612 Crash type: Use-of-uninitialized-value Crash state: processHandshakeTLSBlock ndpisearchtlstcpinternal ndpidetectionprocesspacket...
OSV-2026-1429 Use-of-uninitialized-value in nlohmann::json_abi_v3_12_0::detail::binary_reader<nlohmann::json_abi_v3_12_0::ba
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=575915982 Crash type: Use-of-uninitialized-value Crash state: nlohmann::jsonabiv3120::detail::binaryreadernlohmann::jsonabiv3120::ba nlohmann::jsonabiv3120::detail::binaryreadernlohmann::jsonabiv3120::ba...
OSV-2026-1408 UNKNOWN READ in hobbes::castexp::apply
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=573787443 Crash type: UNKNOWN READ Crash state: hobbes::castexp::apply hobbes::compileExpF::with llvm::Value hobbes::switchOfF co...
OSV-2025-1097 Security exception in org.htmlunit.cyberneko.HTMLTagBalancer.reopenFormattingElements
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=571721880 Crash type: Security exception Crash state: org.htmlunit.cyberneko.HTMLTagBalancer.reopenFormattingElements org.htmlunit.cyberneko.HTMLTagBalancer.startElement org.htmlunit.cyberneko.HTMLTagBalancer.forceStartElement...
OSV-2026-1381 Use-of-uninitialized-value in processHandshakeTLSBlock
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=571356131 Crash type: Use-of-uninitialized-value Crash state: processHandshakeTLSBlock ndpisearchtlstcpinternal ndpisearchtlswrapper...
OSV-2026-1361 Bad parameters to --sanitizer-annotate-contiguous-container in jsoncons::cbor::basic_cbor_parser<jsoncons::stream_source<unsigned char, std::__
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=568595812 Crash type: Bad parameters to --sanitizer-annotate-contiguous-container Crash state: jsoncons::cbor::basiccborparserjsoncons::streamsourceunsigned char, std:: void...
OSV-2026-1356 Use-of-uninitialized-value in jxl::RenderPipeline::InputReady
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=568295899 Crash type: Use-of-uninitialized-value Crash state: jxl::RenderPipeline::InputReady jxl::RenderPipelineInput::Done jxl::FrameDecoder::ProcessACGroup...
OSV-2026-1355 UNKNOWN READ in std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<Imf_4_0::Name, I
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=568469733 Crash type: UNKNOWN READ Crash state: std::1::pairstd::1::treeiteratorstd::1::valuetypeImf40::Name, I Imf40::Header::insert Imf40::initialize...
OSV-2026-1345 Heap-buffer-overflow in load_u64
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=567611282 Crash type: Heap-buffer-overflow WRITE 8 Crash state: loadu64 datetimeunpack luampdecodewithctx...
OSV-2026-1332 Heap-buffer-overflow in screen_resize_cursor
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=566549189 Crash type: Heap-buffer-overflow READ 1 Crash state: screenresizecursor windowpaneresize layoutfixpanes...
OSV-2026-1314 Heap-buffer-overflow in vacm_getAccessEntry
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=564017938 Crash type: Heap-buffer-overflow READ 3 Crash state: vacmgetAccessEntry snmpsecmodelsfuzzer.c...
OSV-2026-1309 Heap-buffer-overflow in janet_bytecode_movopt_basic_block
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=563659412 Crash type: Heap-buffer-overflow READ 4 Crash state: janetbytecodemovoptbasicblock janetbytecodemovoptfull janetbytecodeoptimize...
OSV-2026-1303 Heap-buffer-overflow in sas7bdat_parse_all_pages_pass2
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=562985572 Crash type: Heap-buffer-overflow READ 1 Crash state: sas7bdatparseallpagespass2 readstatparsesas7bdat fuzzformatsas7bdat.c...
OSV-2026-1302 Heap-use-after-free in unregister_sysORTable_by_session
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=563134244 Crash type: Heap-use-after-free READ 8 Crash state: unregistersysORTablebysession closeagentxsession handlemasteragentxpacket...
OSV-2026-1297 UNKNOWN READ in janet_to_string_b
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=562551214 Crash type: UNKNOWN READ Crash state: janettostringb janetformatbv janetpanicf...
OSV-2026-1294 UNKNOWN WRITE in av1_cdef_mse_calc_frame_mt
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=562150738 Crash type: UNKNOWN WRITE Crash state: av1cdefmsecalcframemt av1cdefsearch encodewithrecodeloopandfilter...
OSV-2026-1293 UNKNOWN READ in md_is_link_title
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=561822522 Crash type: UNKNOWN READ Crash state: mdislinktitle mdanalyzeinlines mdprocessnormalblockcontents...
OSV-2026-1281 Heap-buffer-overflow in md_decode_utf8__
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=560854538 Crash type: Heap-buffer-overflow READ 1 Crash state: mddecodeutf8 mdlabelhash mdlookuplabelhashtable...
OSV-2026-1279 Heap-buffer-overflow in H5T__bit_find
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=560740865 Crash type: Heap-buffer-overflow READ 1 Crash state: H5Tbitfind H5Tconvfiloop H5Tconvfi...
OSV-2026-1274 Heap-buffer-overflow in md_analyze_inlines
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=560657993 Crash type: Heap-buffer-overflow READ 4 Crash state: mdanalyzeinlines mdprocessnormalblockcontents mdprocessallblocks...
OSV-2026-1267 Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=560242604 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.RegexInjection.hookInternal com.codeintelligence.jazzer.sanitizers.RegexInjection.patternHook...
OSV-2026-1239 Security exception in org.apache.lucene.util.ArrayUtil.copyOfSubArray
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=557292360 Crash type: Security exception Crash state: org.apache.lucene.util.ArrayUtil.copyOfSubArray org.apache.lucene.util.BytesRef.deepCopyOf org.apache.lucene.index.Term...
OSV-2026-1235 UNKNOWN READ in renumber_by_map
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=557283672 Crash type: UNKNOWN READ Crash state: renumberbymap renumberbymap disablenonamegroupcapture...
OSV-2026-1224 Heap-buffer-overflow in mp_load_float
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=555347939 Crash type: Heap-buffer-overflow WRITE 4 Crash state: mploadfloat mpdecodefloat luampdecodewithctx...
OSV-2026-1220 Use-of-uninitialized-value in str_escape
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=554268877 Crash type: Use-of-uninitialized-value Crash state: strescape mrbvmexec yieldwithattr...
OSV-2026-1210 Heap-buffer-overflow in decode_get_histogram_format_resp
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=553267079 Crash type: Heap-buffer-overflow READ 1 Crash state: decodegethistogramformatresp decodegethistogramformatrespfuzzer.cc...
OSV-2026-1205 Heap-buffer-overflow in decode_get_fpga_diagnostics_settings_resp
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=553148335 Crash type: Heap-buffer-overflow READ 13 Crash state: decodegetfpgadiagnosticssettingsresp decodegetfpgadiagnosticssettingsrespfuzzer.cc...
OSV-2026-1198 Stack-buffer-overflow in msLayoutTextSymbol
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=551099259 Crash type: Stack-buffer-overflow READ 4 Crash state: msLayoutTextSymbol msWriteErrorImage msWMSException...
OSV-2026-1196 Heap-buffer-overflow in yylex
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=551147457 Crash type: Heap-buffer-overflow WRITE 4 Crash state: yylex yyparse hobbes::runParserOnBuffer...
OSV-2026-1195 Heap-buffer-overflow in lua_error
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=551047529 Crash type: Heap-buffer-overflow WRITE Crash state: luaerror luaTerrorat luaTerror...
OSV-2026-1189 Global-buffer-overflow in oidc_cfg_redirect_urls_allowed_get
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=550474749 Crash type: Global-buffer-overflow READ 8 Crash state: oidccfgredirecturlsallowedget oidcvalidateredirecturl fuzzurl.c...
OSV-2026-1161 Heap-buffer-overflow in ppp_tx_frame
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=546440470 Crash type: Heap-buffer-overflow WRITE Crash state: ppptxframe ppprx mgtcpiprx...
OSV-2026-1157 Memcpy-param-overlap in zxc_decompress_chunk_wrapper_default
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=546426939 Crash type: Memcpy-param-overlap Crash state: zxcdecompresschunkwrapperdefault zxcdecompressframe fuzzdecompress.c...
OSV-2026-1127 Heap-buffer-overflow in read_data
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=543583447 Crash type: Heap-buffer-overflow READ 1 Crash state: readdata zipsourcecall zipsourceread...
OSV-2026-1126 Heap-buffer-overflow in isvcd_nal_byte_swap_emulation
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=543374000 Crash type: Heap-buffer-overflow WRITE 4 Crash state: isvcdnalbyteswapemulation isvcdnalparsevclnalpartial isvcdpreparserefineau...
OSV-2026-1125 Segv on unknown address in match_many_CHARACTER_REV
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=543352138 Crash type: Segv on unknown address Crash state: matchmanyCHARACTERREV countone basicmatch...
OSV-2026-1121 Heap-buffer-overflow in cairo_type1_font_subset_for_each_glyph
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=542872505 Crash type: Heap-buffer-overflow READ 1 Crash state: cairotype1fontsubsetforeachglyph cairotype1subsetinit cairopdfsurfaceemitunscaledfontsubset...
OSV-2026-1120 UNKNOWN READ in ExtractString
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=542893697 Crash type: UNKNOWN READ Crash state: ExtractString SetMeta SetupMeta...
OSV-2026-1114 Heap-buffer-overflow in Assimp::LWOImporter::LoadLWO2TextureHeader
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=541870963 Crash type: Heap-buffer-overflow READ 4 Crash state: Assimp::LWOImporter::LoadLWO2TextureHeader Assimp::LWOImporter::LoadLWO2TextureBlock Assimp::LWOImporter::LoadLWO2Surface...
OSV-2026-1113 Heap-buffer-overflow in Assimp::MD5::MD5MeshParser::MD5MeshParser
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=541854675 Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::MD5::MD5MeshParser::MD5MeshParser Assimp::MD5Importer::LoadMD5MeshFile Assimp::MD5Importer::InternReadFile...
OSV-2026-1110 Check failed in CheckUnwind
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=541969271 Crash type: Check failed Crash state: CheckUnwind mrbbasicallocfunc pmnodehashinsert...
OSV-2026-1109 UNKNOWN READ in sens_to_cil
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=541965633 Crash type: UNKNOWN READ Crash state: senstocil additivescopestocilmap hashtabmap...
OSV-2026-1108 Bad-cast to typename shared_ptr<Assimp::Blender::CollectionChild>::element_type' (aka 'Assimp::Blender::CollectionChild') from Assimp::Blender::CollectionObject
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=541987703 Crash type: Bad-cast Crash state: Bad-cast to typename sharedptr::elementtype' aka 'Assimp::Blender::CollectionChild' from Assimp::Blender::CollectionObject Assimp::BlenderImporter::ParseSubCollection...
OSV-2026-1101 Security exception in com.google.re2j.Machine$Queue.<init>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=540908715 Crash type: Security exception Crash state: com.google.re2j.Machine$Queue. com.google.re2j.Machine. com.google.re2j.RE2.doExecute...
OSV-2026-1095 Heap-buffer-overflow in grk::t1::CodeblockDecompressImpl::parsePacketData
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=540111888 Crash type: Heap-buffer-overflow READ 8 Crash state: grk::t1::CodeblockDecompressImpl::parsePacketData grk::PacketParser::readData grk::PacketParser::parsePacketData...
OSV-2026-1092 Security exception in com.github.javaparser.ast.expr.Name.accept
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=539142495 Crash type: Security exception Crash state: com.github.javaparser.ast.expr.Name.accept com.github.javaparser.ast.visitor.VoidVisitorAdapter.lambda$visit$133 java.base/java.util.Optional.ifPresent...
OSV-2026-1089 Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=537432125 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.RegexInjection.hookInternal com.codeintelligence.jazzer.sanitizers.RegexInjection.patternHook...