OSV-2025-619 Heap-buffer-overflow in webvtt_domnode_SelectNodesInTree

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437537868 Crash type: Heap-buffer-overflow READ 1 Crash state: webvttdomnodeSelectNodesInTree webvttdomnodeSelectNodesInTree webvttdomnodeSelectNodesInTree...

OSV-2025-491 Heap-buffer-overflow in libssl.soNUMBER

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=427814448 Crash type: Heap-buffer-overflow READ 5 Crash state: libssl.soNUMBER libssl.soNUMBER SSLCTXsetcipherlist...

OSV-2025-469 Use-of-uninitialized-value in ndpi_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=424653416 Crash type: Use-of-uninitialized-value Crash state: ndpistrdup ndpidetectionprocesspacket fuzzconfig.cpp...

OSV-2025-255 Security exception in com.github.javaparser.GeneratedJavaParser.Expression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=407817254 Crash type: Security exception Crash state: com.github.javaparser.GeneratedJavaParser.Expression java.base/java.lang.String.equals com.github.javaparser.utils.LineSeparator.lookup...

OSV-2025-253 Security exception in org.apache.lucene.analysis.ckb.SoraniNormalizer.normalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=407477665 Crash type: Security exception Crash state: org.apache.lucene.analysis.ckb.SoraniNormalizer.normalize org.apache.lucene.analysis.ckb.SoraniNormalizationFilter.incrementToken...

OSV-2025-63 Stack-buffer-underflow in gs_type1_interpret

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=391934080 Crash type: Stack-buffer-underflow READ 4 Crash state: gstype1interpret copiedtype1glyphoutline gsdefaultglyphinfo...

OSV-2025-51 Heap-buffer-overflow in std::__1::__function::__func<cv::PngDecoder::compose_frame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=390788198 Crash type: Heap-buffer-overflow WRITE Crash state: std::1::function::funccv::PngDecoder::composeframe cv::ParallelLoopBodyWrapper::operator cv::ThreadPool::run...

OSV-2024-1330 Heap-buffer-overflow in zoom_search_again

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379072455 Crash type: Heap-buffer-overflow READ 1 Crash state: zoomsearchagain ndpidetectionprocesspacket ndpiworkflowprocesspacket...

OSV-2024-1261 Stack-buffer-overflow in _pcre2_compile_class_not_nested_16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376515526 Crash type: Stack-buffer-overflow WRITE 2 Crash state: pcre2compileclassnotnested16 compileclassoperand pcre2compileclassnested16...

OSV-2024-1041 UNKNOWN READ in chunk_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71296 Crash type: UNKNOWN READ Crash state: chunkfreeobject sfclose pdficlosefile...

OSV-2024-1031 Use-of-uninitialized-value in Http3FrameFactory::create

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42537939 Crash type: Use-of-uninitialized-value Crash state: Http3FrameFactory::create Http3FrameFactory::fastcreate fuzzhttp3frame.cc...

OSV-2024-867 Use-of-uninitialized-value in std::__1::ostreambuf_iterator<char, std::__1::char_traits<char>> std::__1::__pad

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68801 Crash type: Use-of-uninitialized-value Crash state: std::1::ostreambufiterator std::1::pad std::1::basicostream& std::1::putchar ostream...

OSV-2024-847 Null-dereference READ in _libssh2_packet_add

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69234 Crash type: Null-dereference READ Crash state: libssh2packetadd fullpacket libssh2transportread...

OSV-2024-833 UNKNOWN READ in chunk_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70998 Crash type: UNKNOWN READ Crash state: chunkfreeobject sclose sfclose...

OSV-2024-832 UNKNOWN READ in Pistache::Http::Header::Expect::parseRaw

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69151 Crash type: UNKNOWN READ Crash state: Pistache::Http::Header::Expect::parseRaw Pistache::Http::Private::HeadersStep::apply Pistache::Http::Private::ParserBase::parse...

OSV-2024-793 Heap-buffer-overflow in H5HL__fl_deserialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68740 Crash type: Heap-buffer-overflow READ 1 Crash state: H5HLfldeserialize H5HLcachedatablockdeserialize H5Cprotect...

OSV-2024-518 Security exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69307 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.Objects.equals com.github.javaparser.Position.equals...

OSV-2024-456 Heap-buffer-overflow in ih264d_read_coeff4x4_cabac

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66989 Crash type: Heap-buffer-overflow READ 4 Crash state: ih264dreadcoeff4x4cabac ih264dparseresidual4x4cabac ih264dparseimbcabac...

OSV-2024-449 Use-of-uninitialized-value in YAML::Stream::Stream

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68461 Crash type: Use-of-uninitialized-value Crash state: YAML::Stream::Stream YAML::Scanner::Scanner YAML::Parser::Load...

OSV-2024-423 Use-of-uninitialized-value in Lexer::Error

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68680 Crash type: Use-of-uninitialized-value Crash state: Lexer::Error Parser::ExpectToken ManifestParser::ParseLet...

OSV-2024-340 Heap-buffer-overflow in Exiv2::AsfVideo::GUIDTag::GUIDTag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68210 Crash type: Heap-buffer-overflow READ 8 Crash state: Exiv2::AsfVideo::GUIDTag::GUIDTag Exiv2::AsfVideo::streamProperties Exiv2::AsfVideo::decodeBlock...

OSV-2024-239 Use-of-uninitialized-value in H5G__ent_to_link

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67794 Crash type: Use-of-uninitialized-value Crash state: H5Genttolink H5Gnodeiterate H5Biteratehelper...

OSV-2024-156 Stack-buffer-overflow in rtpin_satip_get_server_ip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67263 Crash type: Stack-buffer-overflow WRITE 1 Crash state: rtpinsatipgetserverip rtpininitialize gffilternewfinalize...

OSV-2024-123 Heap-use-after-free in dxf_tables_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66835 Crash type: Heap-use-after-free READ 8 Crash state: dxftablesread dwgreaddxf llvmfuzz.c...

OSV-2024-85 Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66357 Crash type: Security exception Crash state: com.github.javaparser.ast.validator.TreeVisitorValidator.accept com.github.javaparser.ast.expr.FieldAccessExpr.getMetaModel...

OSV-2024-79 Heap-double-free in supported_features

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66398 Crash type: Heap-double-free Crash state: supportedfeatures handleatcommand handleatcommandfortest...

OSV-2023-1365 Heap-use-after-free in xmlStaticCopyNode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65363 Crash type: Heap-use-after-free READ 8 Crash state: xmlStaticCopyNode xmlDocCopyNode xmlParseReference...

OSV-2023-1311 Heap-buffer-overflow in ih264d_format_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65057 Crash type: Heap-buffer-overflow WRITE Crash state: ih264dformatconvert ih264ddecodepicturethread...

OSV-2023-1272 Heap-buffer-overflow in OT::cff2::accelerator_templ_t<CFF::cff2_private_dict_opset_t, CFF::cff2_private_

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64859 Crash type: Heap-buffer-overflow READ 2 Crash state: OT::cff2::acceleratortempltCFF::cff2privatedictopsett, CFF::cff2private hbotdrawglyph hbfontdrawglyph...

OSV-2023-1186 Heap-use-after-free in dxf_tables_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64318 Crash type: Heap-use-after-free READ 8 Crash state: dxftablesread dwgreaddxf llvmfuzz.c...

OSV-2023-1160 Heap-buffer-overflow in IEC104Stats::processPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64147 Crash type: Heap-buffer-overflow READ 1 Crash state: IEC104Stats::processPacket Flow::processIEC60870Packet NetworkInterface::processPacket...

OSV-2023-1153 Heap-buffer-overflow in pcpp::SSLClientHelloMessage::getCipherSuite

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64124 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::SSLClientHelloMessage::getCipherSuite readParsedPacket FuzzTarget.cpp...

OSV-2023-1062 Heap-buffer-overflow in H5MM_xstrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63566 Crash type: Heap-buffer-overflow READ Crash state: H5MMxstrdup H5Genttolink H5Gnodeiterate...

OSV-2023-1048 Heap-buffer-overflow in decode_preR13_entities

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63463 Crash type: Heap-buffer-overflow READ 1 Crash state: decodepreR13entities decodepreR13 dwgdecode...

OSV-2023-1000 Heap-use-after-free in xmlParserPrintFileContextInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63157 Crash type: Heap-use-after-free READ 1 Crash state: xmlParserPrintFileContextInternal xmlReportError xmlRaiseError...

OSV-2023-936 Heap-buffer-overflow in Gfx::decode_bmp_pixel_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62782 Crash type: Heap-buffer-overflow READ 1 Crash state: Gfx::decodebmppixeldata Gfx::BMPImageDecoderPlugin::frame Gfx::ICOImageDecoderPlugin::loadicobitmap...

OSV-2023-750 Security exception in org.antlr.v4.runtime.atn.PredictionContext.fromRuleContext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61786 Crash type: Security exception Crash state: org.antlr.v4.runtime.atn.PredictionContext.fromRuleContext java.base/jdk.internal.misc.Unsafe.weakCompareAndSetInt java.base/jdk.internal.misc.Unsafe.getAndAddInt...

OSV-2023-726 Heap-buffer-overflow in Flow::dissectNetBIOS

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61648 Crash type: Heap-buffer-overflow READ 1 Crash state: Flow::dissectNetBIOS NetworkInterface::processPacket NetworkInterface::dissectPacket...

OSV-2023-543 Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60355 Crash type: Security exception Crash state: com.github.javaparser.ast.validator.TreeVisitorValidator.accept com.github.javaparser.ast.expr.FieldAccessExpr.getMetaModel...

OSV-2023-510 Heap-buffer-overflow in uofs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60056 Crash type: Heap-buffer-overflow READ 1 Crash state: uofs pdfifindcffindex pdfireadcfffont...

OSV-2022-1276 Stack-buffer-overflow in ntlm_phase_3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59818 Crash type: Stack-buffer-overflow WRITE 1 Crash state: ntlmphase3 establishhttpproxypassthru fuzzproxy.c...

OSV-2023-477 Global-buffer-overflow in htmlParseHTMLAttribute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59718 Crash type: Global-buffer-overflow READ 1 Crash state: htmlParseHTMLAttribute htmlParseStartTag htmlParseContentInternal...

OSV-2023-385 Bad-cast to Assimp::BaseImporter from invalid vptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58724 Crash type: Bad-cast Crash state: Bad-cast to Assimp::BaseImporter from invalid vptr Assimp::Importer::ReadFile Assimp::BatchLoader::LoadAll...

OSV-2023-371 Memcpy-param-overlap in repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58625 Crash type: Memcpy-param-overlap Crash state: repeat pere cliregcompreal...

OSV-2023-326 Heap-use-after-free in dynsec_clients__find

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58108 Crash type: Heap-use-after-free READ 8 Crash state: dynsecclientsfind clientfreeitem dynsecclientscleanup...

OSV-2023-298 UNKNOWN READ in active_edges

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57884 Crash type: UNKNOWN READ Crash state: activeedges intersect cairoboxesintersect...

OSV-2023-269 Heap-buffer-overflow in bit_utf8_to_TU

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57586 Crash type: Heap-buffer-overflow READ 1 Crash state: bitutf8toTU dynapisethelper dwgdynapientitysetvalue...

OSV-2023-221 Heap-use-after-free in flac__analyze_frame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57354 Crash type: Heap-use-after-free READ 4 Crash state: flacanalyzeframe writecallback writeaudioframetoclient...

OSV-2023-170 Invalid-free in hb_free_impl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56952 Crash type: Invalid-free Crash state: hbfreeimpl OT::glyf::freecompiledsubsetglyphs OT::glyf::populatesubsetglyphs...

OSV-2023-160 Global-buffer-overflow in OT::gvar::accelerator_t::apply_deltas_to_points

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56800 Crash type: Global-buffer-overflow READ 2 Crash state: OT::gvar::acceleratort::applydeltastopoints bool OT::glyfimpl::Glyph::getpoints bool OT::glyfimpl::Glyph::getpoints...