OSV-2025-133 Stack-buffer-overflow in se_read_conf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=396958482 Crash type: Stack-buffer-overflow READ 1 Crash state: sereadconf runconfighandler snmpconfigwhen...

OSV-2025-105 Heap-use-after-free in unpack_dsd_samples

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=395207094 Crash type: Heap-use-after-free READ 1 Crash state: unpackdsdsamples unpacksamplesworkerthread unpacksamplesworkerthread...

OSV-2025-52 Use-of-uninitialized-value in icalmemory_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=390646669 Crash type: Use-of-uninitialized-value Crash state: icalmemorystrdup icaltimezoneinitbuiltintimezones icaltimezonegetutctimezone...

OSV-2025-42 Heap-use-after-free in r_list_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=390467754 Crash type: Heap-use-after-free READ 8 Crash state: rlistfree rbinbfltfree rbinfilefree...

OSV-2025-23 Out-of-memory in IndexSearchFuzzer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=388312953 Crash type: Out-of-memory Crash state: IndexSearchFuzzer...

OSV-2023-1402 Global-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=384343083 Crash type: Global-buffer-overflow READ Crash state: std::1::basicstring, std::1::allocatorch XYWriteParser::createTable XYWriteParser::parseTextZone...

OSV-2024-1380 Index-out-of-bounds in ndpi_search_dns

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=383911300 Crash type: Index-out-of-bounds Crash state: ndpisearchdns searchdnsagain ndpidetectionprocesspacket...

OSV-2024-1351 Use-of-uninitialized-value in Archive::UnexpEndArcMsg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=382526743 Crash type: Use-of-uninitialized-value Crash state: Archive::UnexpEndArcMsg Archive::ReadHeader50 Archive::ReadHeader...

OSV-2024-1336 Security exception in org.checkerframework.checker.formatter.util.FormatUtil.formatParameterCategories

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=380409697 Crash type: Security exception Crash state: org.checkerframework.checker.formatter.util.FormatUtil.formatParameterCategories UtilCheckerFuzzer.fuzzChecker UtilCheckerFuzzer.fuzzerTestOneInput...

OSV-2024-1322 Security exception in com.alibaba.fastjson2.JSONReader.readObject

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379180973 Crash type: Security exception Crash state: com.alibaba.fastjson2.JSONReader.readObject java.base/java.nio.charset.CharsetEncoder.replaceWith java.base/java.nio.charset.CharsetEncoder...

OSV-2024-1320 Heap-buffer-overflow in process_page_

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379254072 Crash type: Heap-buffer-overflow READ 4 Crash state: processpage FLACoggdecoderaspectskiplink FLACstreamdecoderseekabsolute...

OSV-2024-1293 Use-of-uninitialized-value in k5_hashtab_add

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=377530685 Crash type: Use-of-uninitialized-value Crash state: k5hashtabadd insertentry fuzzkdc.c...

OSV-2023-1398 Heap-buffer-overflow in load_1

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376515517 Crash type: Heap-buffer-overflow READ 1 Crash state: load1 apprenticeload fileapprentice...

OSV-2024-1251 UNKNOWN WRITE in s_DCTD_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376394519 Crash type: UNKNOWN WRITE Crash state: sDCTDprocess sreadbuf spgetcc...

OSV-2024-1210 Heap-buffer-overflow in parse_mixed_content

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372510377 Crash type: Heap-buffer-overflow READ 1 Crash state: parsemixedcontent parsesdp fuzzparsemsg.c...

OSV-2024-1199 Security exception in java.base/java.lang.Short.valueOf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372547195 Crash type: Security exception Crash state: java.base/java.lang.Short.valueOf org.apache.poi.ddf.EscherRecordTypes.forTypeID org.apache.poi.ddf.DefaultEscherRecordFactory.getConstructor...

OSV-2024-1186 UNKNOWN READ in cfl_sds_len

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=371659893 Crash type: UNKNOWN READ Crash state: cflsdslen unpackmetaopts cmtmpackunpackmap...

OSV-2024-1140 Security exception in java.base/java.util.Arrays.copyOfRange

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=368729567 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOfRange java.base/java.lang.StringUTF16.newString java.base/java.lang.StringBuilder.toString...

OSV-2024-1131 UNKNOWN READ in glslang::TInfoSinkBase::location

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=368512278 Crash type: UNKNOWN READ Crash state: glslang::TInfoSinkBase::location glslang::TParseContextBase::outputMessage glslang::TParseContextBase::error...

OSV-2024-1053 Heap-buffer-overflow in gguf_get_tensor_offset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538148 Crash type: Heap-buffer-overflow READ 8 Crash state: ggufgettensoroffset llamamodelloader::llamatensorweight::llamatensorweight void std::1::vectorllamamodelloader::llamatensorweight, std::1::allocat...

OSV-2024-964 Security exception in com.alibaba.fastjson2.JSONPathSegment$CycleNameSegment$MapLoop.accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69767 Crash type: Security exception Crash state: com.alibaba.fastjson2.JSONPathSegment$CycleNameSegment$MapLoop.accept java.base/java.util.ArrayList.forEach java.base/java.nio.charset.CharsetEncoder...

OSV-2024-963 Heap-buffer-overflow in GfxTilingPattern::scanXObjectForBlendMode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68412 Crash type: Heap-buffer-overflow READ 1 Crash state: GfxTilingPattern::scanXObjectForBlendMode GfxTilingPattern::scanSoftMaskForBlendMode GfxTilingPattern::scanExtGStateForBlendMode...

OSV-2024-732 Security exception in com.github.javaparser.ast.visitor.VoidVisitorAdapter.lambda$visit$19

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71009 Crash type: Security exception Crash state: com.github.javaparser.ast.visitor.VoidVisitorAdapter.lambda$visit$19 java.base/java.util.ArrayList.forEach com.github.javaparser.ast.NodeList.forEach...

OSV-2024-720 Security exception in jflex.core.NFA.insertNFA

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70964 Crash type: Security exception Crash state: jflex.core.NFA.insertNFA java.base/java.lang.ClassLoader.defineClass1 java.base/java.lang.ClassLoader.defineClass...

OSV-2024-678 Use-of-uninitialized-value in FLAC__replaygain_synthesis__apply_gain

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70482 Crash type: Use-of-uninitialized-value Crash state: FLACreplaygainsynthesisapplygain writecallback readframe...

OSV-2024-677 Segv on unknown address in gs_gc_reclaim

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69038 Crash type: Segv on unknown address Crash state: gsgcreclaim ireclaim interpreclaim...

OSV-2024-636 Null-dereference READ in evp_mac_final

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69236 Crash type: Null-dereference READ Crash state: evpmacfinal kbkdfderive doevpkdf...

OSV-2024-574 Heap-buffer-overflow in spvtools::disassemble::InstructionDisassembler::EmitInstruction

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69549 Crash type: Heap-buffer-overflow READ 1 Crash state: spvtools::disassemble::InstructionDisassembler::EmitInstruction spvtools::DisassembleInstruction Parser::parseModule...

OSV-2024-460 UNKNOWN READ in glslang::TInfoSinkBase::location

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68613 Crash type: UNKNOWN READ Crash state: glslang::TInfoSinkBase::location glslang::TParseContextBase::outputMessage glslang::TParseContextBase::error...

OSV-2024-384 Heap-use-after-free in json_fixed_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67528 Crash type: Heap-use-after-free WRITE 11 Crash state: jsonfixedstring jsonRNUMBERHeader dwgreadjson...

OSV-2024-328 Use-of-uninitialized-value in light_read_record

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68173 Crash type: Use-of-uninitialized-value Crash state: lightreadrecord lightpcapngopenread pcpp::PcapNgFileReaderDevice::open...

OSV-2024-264 UNKNOWN READ in cli_html_normalise

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67953 Crash type: UNKNOWN READ Crash state: clihtmlnormalise htmlnormalisemap cliscanhtml...

OSV-2024-178 Global-buffer-overflow in dissect_dns_answer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67265 Crash type: Global-buffer-overflow WRITE 4 Crash state: dissectdnsanswer dissectdnscommon dissectdns...

OSV-2024-64 Global-buffer-overflow in ReadVariantArrayBuiltInType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66311 Crash type: Global-buffer-overflow READ 8 Crash state: ReadVariantArrayBuiltInType SOPCVariantReadInternal SOPCEncodeableObjectDecode...

OSV-2023-1370 Heap-buffer-overflow in process_one_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65383 Crash type: Heap-buffer-overflow READ 1 Crash state: processoneread cramencodecontainer cramflushcontainermt...

OSV-2023-1313 Heap-buffer-overflow in isvcd_start_of_pic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65060 Crash type: Heap-buffer-overflow WRITE Crash state: isvcdstartofpic isvcdparsedecodeslice isvcdparsenalunit...

OSV-2023-1306 Heap-use-after-free in pcpp::TLVRecordReader<pcpp::DhcpOption>::getTLVRecord

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65051 Crash type: Heap-use-after-free READ 1 Crash state: pcpp::TLVRecordReader::getTLVRecord pcpp::DhcpLayer::toString pcpp::Packet::toStringList...

OSV-2023-1301 Global-buffer-overflow in xmlDictLookupInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65012 Crash type: Global-buffer-overflow READ 1 Crash state: xmlDictLookupInternal xmlDictLookupHashed xmlParseNCName...

OSV-2023-1266 Security exception in java.base/javax.crypto.spec.SecretKeySpec.<init>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64768 Crash type: Security exception Crash state: java.base/javax.crypto.spec.SecretKeySpec. org.apache.poi.poifs.crypt.binaryrc4.BinaryRC4Decryptor.initCipherForBlock...

OSV-2023-1231 Global-buffer-overflow in iaace_estimate_scfs_chan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64532 Crash type: Global-buffer-overflow READ 4 Crash state: iaaceestimatescfschan iaenhaacplusencqcmain iaenhaacplusencaaccoreencode...

OSV-2023-1170 UNKNOWN READ in loader_log

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42530193 Crash type: UNKNOWN READ Crash state: loaderlog loaderscannedicdadd loadericdscan...

OSV-2023-1140 Heap-buffer-overflow in H5MM_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64092 Crash type: Heap-buffer-overflow READ Crash state: H5MMstrdup H5Gstabgetnamebyidxcb H5Gnodebyidx...

OSV-2023-1135 Segv on unknown address in flb_sds_cat_safe

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64049 Crash type: Segv on unknown address Crash state: flbsdscatsafe flbcfkeytranslate flbcfsectionpropertyadd...

OSV-2023-1126 Heap-buffer-overflow in iasecc_parse_acls

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63949 Crash type: Heap-buffer-overflow READ 1 Crash state: iaseccparseacls iaseccparsedocp iaseccsdoparsedata...

OSV-2023-1117 Heap-buffer-overflow in cmsMLUsetWide

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63861 Crash type: Heap-buffer-overflow READ 4 Crash state: cmsMLUsetWide TypeTextDescriptionRead cmsReadTag...

OSV-2023-1014 Security exception in org.jsoup.parser.HtmlTreeBuilder.process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63242 Crash type: Security exception Crash state: org.jsoup.parser.HtmlTreeBuilder.process org.jsoup.parser.HtmlTreeBuilderState$14.handleMissingTr org.jsoup.parser.HtmlTreeBuilderState$14.process...

OSV-2023-971 Out-of-memory in IndexSearchFuzzer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63007 Crash type: Out-of-memory Crash state: IndexSearchFuzzer...

OSV-2023-957 Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62967 Crash type: Security exception Crash state: com.github.javaparser.ast.validator.TreeVisitorValidator.accept com.github.javaparser.ast.expr.FieldAccessExpr.getMetaModel...

OSV-2023-952 Heap-buffer-overflow in back_passDoAction

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62875 Crash type: Heap-buffer-overflow READ 10 Crash state: backpassDoAction loubackTranslate loubackTranslateString...

OSV-2023-893 Heap-buffer-overflow in initialize_encryption_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62542 Crash type: Heap-buffer-overflow READ Crash state: initializeencryptionkey cliole2extract cliscanole2...