OSV-2025-323 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=415382662 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.lang.StringLatin1.getChars java.base/java.lang.String.getChars...

OSV-2025-290 Heap-buffer-overflow in pcpp::TelnetLayer::toString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=411460531 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::TelnetLayer::toString pcpp::Packet::toStringList pcpp::Packet::toString...

OSV-2025-267 Stack-buffer-overflow in snap_usedef

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408571331 Crash type: Stack-buffer-overflow WRITE Crash state: snapusedef ljsnappurge ljrecordins...

OSV-2025-114 Index-out-of-bounds in ada_fuzz_header.h

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=396172315 Crash type: Index-out-of-bounds Crash state: adafuzzheader.h...

OSV-2025-92 Null-dereference READ in session_startup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=393523566 Crash type: Null-dereference READ Crash state: sessionstartup libssh2sessionhandshake ssh2clientfuzzer.cc...

OSV-2025-90 Null-dereference READ in ubsan_GetStackTrace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=393411531 Crash type: Null-dereference READ Crash state: ubsanGetStackTrace...

OSV-2025-16 UNKNOWN READ in png_free_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=386860184 Crash type: UNKNOWN READ Crash state: pngfreedata pngdestroyinfostruct pngdestroyreadstruct...

OSV-2024-1391 Heap-buffer-overflow in gsicc_create_getv2buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=384972943 Crash type: Heap-buffer-overflow READ 12 Crash state: gsicccreategetv2buffer pdficcbasedcolorspace pdfcolorspacenamed...

OSV-2024-1382 Security exception in jflex.core.NFA.insertNFA

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=383999281 Crash type: Security exception Crash state: jflex.core.NFA.insertNFA java.base/java.util.zip.ZipFile$Source.getEntryPos java.base/java.util.zip.ZipFile.getEntry...

OSV-2024-1343 Container-overflow in glslang::HlslParseContext::decomposeIntrinsic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=380569852 Crash type: Container-overflow READ 8 Crash state: glslang::HlslParseContext::decomposeIntrinsic glslang::HlslParseContext::handleFunctionCall glslang::HlslGrammar::acceptFunctionCall...

OSV-2024-1326 Heap-buffer-overflow in ndpi_search_mikrotik

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379180960 Crash type: Heap-buffer-overflow READ 16 Crash state: ndpisearchmikrotik checkndpidetectionfunc ndpidetectionprocesspacket...

OSV-2024-1313 Security exception in org.apache.commons.codec.language.bm.Rule$Phoneme.<init>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379008019 Crash type: Security exception Crash state: org.apache.commons.codec.language.bm.Rule$Phoneme. org.apache.commons.codec.language.bm.Rule$Phoneme. org.apache.commons.codec.language.bm.PhoneticEngine$PhonemeBuilder.app...

OSV-2024-1297 Heap-buffer-overflow in rijndaelSetupEncrypt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=377977949 Crash type: Heap-buffer-overflow READ 1 Crash state: rijndaelSetupEncrypt rijndaelSetupDecrypt AESPDFnative::AESPDFnative...

OSV-2024-1266 UNKNOWN READ in llama_output_reserve

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376770771 Crash type: UNKNOWN READ Crash state: llamaoutputreserve llamadecode fuzztokenizer.cpp...

OSV-2024-1164 Use-of-uninitialized-value in format_message

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=369652826 Crash type: Use-of-uninitialized-value Crash state: formatmessage ultrahdr::JpegEncoderHelper::encode ultrahdr::JpegEncoderHelper::compressImage...

OSV-2024-994 Use-of-uninitialized-value in packet_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71124 Crash type: Use-of-uninitialized-value Crash state: packetparse packetget1 packetget...

OSV-2024-879 Security exception in java.base/java.util.Arrays.copyOf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42537720 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOf java.base/java.lang.AbstractStringBuilder.ensureCapacityInternal java.base/java.lang.AbstractStringBuilder.append...

OSV-2024-830 UNKNOWN READ in ShadingImage::generateAxialBitmap

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68375 Crash type: UNKNOWN READ Crash state: ShadingImage::generateAxialBitmap ShadingImage::generateBitmap SplashOutputDev::shadedFill...

OSV-2024-748 Security exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71032 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.Objects.equals com.github.javaparser.Position.equals...

OSV-2024-747 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71083 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.nio.CharBuffer.wrap java.base/sun.nio.cs.StreamEncoder.implWrite...

OSV-2024-714 Segv on unknown address in lwan_request_get_cookie

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69572 Crash type: Segv on unknown address Crash state: lwanrequestgetcookie fuzzparsehttprequest...

OSV-2024-698 Heap-use-after-free in xmlCharEncCloseFunc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70774 Crash type: Heap-use-after-free READ 4 Crash state: xmlCharEncCloseFunc htmlSaveFileFormat parseAndPrintFile...

OSV-2024-695 Stack-buffer-overflow in gf_vvc_parse_nalu_bs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70549 Crash type: Stack-buffer-overflow WRITE 4 Crash state: gfvvcparsenalubs gfinspectdumpnaluinternal inspectprocess...

OSV-2024-675 Security exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70587 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.Objects.equals com.github.javaparser.Position.equals...

OSV-2024-668 Security exception in jflex.core.NFA.insertNFA

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70514 Crash type: Security exception Crash state: jflex.core.NFA.insertNFA java.base/java.lang.ClassLoader.defineClass1 java.base/java.lang.ClassLoader.defineClass...

OSV-2024-635 Null-dereference READ in do_evp_kdf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69243 Crash type: Null-dereference READ Crash state: doevpkdf FuzzerTestOneInput...

OSV-2024-577 Heap-use-after-free in sputs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69793 Crash type: Heap-use-after-free READ Crash state: sputs xpswriteprofile xpsbegintypedimage...

OSV-2024-445 Security exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68730 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.lang.String.charAt java.base/sun.invoke.util.Wrapper.hashPrim...

OSV-2024-434 Use-of-uninitialized-value in validate_bluetooth_device_address

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68420 Crash type: Use-of-uninitialized-value Crash state: validatebluetoothdeviceaddress handleonbluetoothdeviceadded fuzzeronbluetoothdeviceadded...

OSV-2024-349 Security exception in java.base/java.lang.AbstractStringBuilder.<init>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67525 Crash type: Security exception Crash state: java.base/java.lang.AbstractStringBuilder. java.base/java.lang.StringBuilder. org.apache.commons.codec.language.bm.Rule$Phoneme...

OSV-2024-333 UNKNOWN READ in Mat_VarPrint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68258 Crash type: UNKNOWN READ Crash state: MatVarPrint MatVarPrint MatVarPrint...

OSV-2024-269 Security exception in java.base/java.util.stream.AbstractPipeline.evaluate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66703 Crash type: Security exception Crash state: java.base/java.util.stream.AbstractPipeline.evaluate java.base/java.util.stream.ReferencePipeline.collect...

OSV-2024-204 Heap-use-after-free in JS_NewObjectFromShape

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65872 Crash type: Heap-use-after-free WRITE 8 Crash state: JSNewObjectFromShape jsparsetemplate jsparsepostfixexpr...

OSV-2024-182 Heap-buffer-overflow in pcre2_fuzzsupport.c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67475 Crash type: Heap-buffer-overflow READ 4 Crash state: pcre2fuzzsupport.c...

OSV-2024-181 Security exception in org.antlr.v4.runtime.atn.PredictionContext.fromRuleContext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67461 Crash type: Security exception Crash state: org.antlr.v4.runtime.atn.PredictionContext.fromRuleContext org.antlr.v4.runtime.misc.MurmurHash.update org.antlr.v4.runtime.misc.MurmurHash.update...

OSV-2024-137 Global-buffer-overflow in igraph_dl_yylex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66992 Crash type: Global-buffer-overflow READ 2 Crash state: igraphdlyylex igraphdlyyparse igraphreadgraphdl...

OSV-2024-88 Heap-use-after-free in fuzzer_execute_ex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66538 Crash type: Heap-use-after-free READ 4 Crash state: fuzzerexecuteex ZENDDOFCALLSPECRETVALUNUSEDHANDLER fuzzerexecuteex...

OSV-2024-80 Stack-buffer-overflow in line_join_points

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66455 Crash type: Stack-buffer-overflow WRITE 4 Crash state: linejoinpoints strokeaddcompat gxstrokepathonly...

OSV-2024-65 Heap-buffer-overflow in mrb_memsearch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66208 Crash type: Heap-buffer-overflow READ 8 Crash state: mrbmemsearch mrbstrsplitm mrbvmexec...

OSV-2024-3 Stack-buffer-overflow in icu_75::TZDBTimeZoneNames::getMetaZoneNames

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65486 Crash type: Stack-buffer-overflow WRITE 1 Crash state: icu75::TZDBTimeZoneNames::getMetaZoneNames icu75::TZDBTimeZoneNames::getMetaZoneDisplayName TestNames...

OSV-2023-1363 Security exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65361 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.Objects.equals com.github.javaparser.Position.equals...

OSV-2023-1325 UNKNOWN WRITE in zero

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65135 Crash type: UNKNOWN WRITE Crash state: zero zendexecute fuzzerdorequestfrombuffer...

OSV-2023-1298 Heap-buffer-overflow in loongarch_split_args_by_comma

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65018 Crash type: Heap-buffer-overflow READ 1 Crash state: loongarchsplitargsbycomma printinsnloongarch disassemblesection...

OSV-2023-1271 Heap-buffer-overflow in is_decl_requires_met

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64849 Crash type: Heap-buffer-overflow READ 8 Crash state: isdeclrequiresmet enableavrules linkmodules...

OSV-2023-1195 Security exception in java.base/java.util.HashMap.resize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64367 Crash type: Security exception Crash state: java.base/java.util.HashMap.resize java.base/java.util.HashMap.putVal java.base/java.util.HashMap.put...

OSV-2023-1184 Global-buffer-overflow in dissect_zcl_read_attr_struct

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64290 Crash type: Global-buffer-overflow READ 4 Crash state: dissectzclreadattrstruct dissectzbeezcl calldissectorworkerror...

OSV-2023-1157 Security exception in org.apache.lucene.util.ArrayUtil.growExact

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64141 Crash type: Security exception Crash state: org.apache.lucene.util.ArrayUtil.growExact org.apache.lucene.util.ArrayUtil.grow org.apache.lucene.util.BytesRefBuilder.grow...

OSV-2023-971 Out-of-memory in IndexSearchFuzzer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63007 Crash type: Out-of-memory Crash state: IndexSearchFuzzer...

OSV-2023-901 UNKNOWN READ in icu_74::RelativeDateTimeFormatter::formatRelativeImpl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62601 Crash type: UNKNOWN READ Crash state: icu74::RelativeDateTimeFormatter::formatRelativeImpl icu74::FormattedRelativeDateTime icu74::RelativeDateTimeFormatter::doFormatToV icu74::RelativeDateTimeFormatter::formatToValue...

OSV-2023-857 Segv on unknown address in FunctionCompiler::compileReturn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62375 Crash type: Segv on unknown address Crash state: FunctionCompiler::compileReturn WasmEdge::AOT::Compiler::compile WasmEdge::AOT::Compiler::compile...