OSV-2020-134 Heap-buffer-overflow in pixFewColorsOctcubeQuantMixed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22140 Crash type: Heap-buffer-overflow READ 1 Crash state: pixFewColorsOctcubeQuantMixed colorquantfuzzer.cc...

OSV-2026-1054 Heap-buffer-overflow in ihevcd_cabac_decode_bins_tunary

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=533053032 Crash type: Heap-buffer-overflow READ 4 Crash state: ihevcdcabacdecodebinstunary ihevcdparsetransformtree ihevcdparsetransformtree...

OSV-2026-1033 Heap-buffer-overflow in ppp_tx_frame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=531087610 Crash type: Heap-buffer-overflow READ Crash state: ppptxframe ppprx mgtcpiprx...

OSV-2026-1025 Heap-buffer-overflow in decode_common_resp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=530730553 Crash type: Heap-buffer-overflow READ 1 Crash state: decodecommonresp decodegeterrorinjectionmodev1resp decodegeterrorinjectionmodev1respfuzzer.cc...

OSV-2026-98 Heap-buffer-overflow in hostname_issubdomain

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=476539622 Crash type: Heap-buffer-overflow READ 1 Crash state: hostnameissubdomain fuzzutil.c...

OSV-2025-932 Heap-use-after-free in password_file__cleanup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=462551340 Crash type: Heap-use-after-free READ 8 Crash state: passwordfilecleanup mosquittosecuritycleanupdefault brokerfuzzpasswordfile.cpp...

OSV-2025-857 Global-buffer-overflow in void jxl::N_AVX2::WriteToOutputStage::StoreUnsignedRow<unsigned char>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=454749502 Crash type: Global-buffer-overflow READ 16 Crash state: void jxl::NAVX2::WriteToOutputStage::StoreUnsignedRow jxl::NAVX2::WriteToOutputStage::OutputBuffers jxl::NAVX2::WriteToOutputStage::ProcessRow...

OSV-2025-808 Use-of-uninitialized-value in WebPMultRow_C

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=448792425 Crash type: Use-of-uninitialized-value Crash state: WebPMultRowC WebPMultRows WebPPictureRescale...

OSV-2025-783 Heap-buffer-overflow in inspect_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=447084960 Crash type: Heap-buffer-overflow READ 1 Crash state: inspectprocess gffilterprocesstask gffsthreadproc...

OSV-2025-593 Heap-buffer-overflow in mmcall

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=435479026 Crash type: Heap-buffer-overflow WRITE 8 Crash state: mmcall ljmetatget ljvmetatgetv...

OSV-2025-581 UNKNOWN READ in tidy_fuzzer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=434741279 Crash type: UNKNOWN READ Crash state: tidyfuzzer...

OSV-2025-565 Heap-buffer-overflow in pcpp::IPv6Address::IPv6Address

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=432892652 Crash type: Heap-buffer-overflow READ 16 Crash state: pcpp::IPv6Address::IPv6Address pcpp::SomeIpSdIPv6Option::getIpAddress readParsedPacket...

OSV-2025-544 Heap-buffer-overflow in N_BELE_RTP::LEPolicy::get32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=430110068 Crash type: Heap-buffer-overflow READ 4 Crash state: NBELERTP::LEPolicy::get32 PackLinuxElf32::elflookup PackLinuxElf32::PackLinuxElf32help1...

OSV-2025-530 Invalid-free in cli_pdf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=429489013 Crash type: Invalid-free Crash state: clipdf cliscanpdf climagicscan...

OSV-2025-260 Heap-buffer-overflow in bfd_getb16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408254000 Crash type: Heap-buffer-overflow READ 1 Crash state: bfdgetb16 nds32elfdo9pcrelreloc nds32elf9pcrelreloc...

OSV-2025-251 Heap-buffer-overflow in icu_78::RegexMatcher::MatchChunkAt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=407590995 Crash type: Heap-buffer-overflow READ 2 Crash state: icu78::RegexMatcher::MatchChunkAt icu78::RegexMatcher::findUsingChunk uregexmatchfuzzer.cpp...

OSV-2025-248 Heap-buffer-overflow in cli_bm_addpatt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=407448850 Crash type: Heap-buffer-overflow READ 1 Crash state: clibmaddpatt addhash loadregexmatcher...

OSV-2025-169 Stack-buffer-overflow in utf8_in2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=399228595 Crash type: Stack-buffer-overflow READ 1 Crash state: utf8in2 MatchRule TranslateRules...

OSV-2025-165 Index-out-of-bounds in dwg_decode_eed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=398439334 Crash type: Index-out-of-bounds Crash state: dwgdecodeeed dwgdecodeentity dwgdecode3DFACEprivate...

OSV-2025-131 Heap-buffer-overflow in vips_foreign_save_heif_write_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=396460413 Crash type: Heap-buffer-overflow WRITE Crash state: vipsforeignsaveheifwriteblock wbufferwritethread vipsthreadsetwork...

OSV-2025-107 Use-of-uninitialized-value in get_words_lossless

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=394980079 Crash type: Use-of-uninitialized-value Crash state: getwordslossless unpacksamples unpacksamplesworkerthread...

OSV-2024-1427 Heap-buffer-overflow in extract_mediaip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=391975654 Crash type: Heap-buffer-overflow READ 1 Crash state: extractmediaip parsesdpsession parsemixedcontent...

OSV-2025-50 Heap-double-free in r_crbtree_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=390503425 Crash type: Heap-double-free Crash state: rcrbtreefree rbinobjectfree rbinfilefree...

OSV-2025-3 Heap-buffer-overflow in avifImageAddUUIDProperty

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=386713389 Crash type: Heap-buffer-overflow READ 16 Crash state: avifImageAddUUIDProperty avif::testutil::PropsValid...

OSV-2024-1161 Security exception in java.base/java.util.Arrays.copyOfRange

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=370272563 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOfRange java.base/java.lang.StringUTF16.newString java.base/java.lang.String.substring...

OSV-2024-1124 Heap-buffer-overflow in ih264d_read_coeff4x4_cabac

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538616 Crash type: Heap-buffer-overflow READ 4 Crash state: ih264dreadcoeff4x4cabac ih264dcabacparse8x8block ih264dparseresidual4x4cabac...

OSV-2024-1042 UNKNOWN READ in chunk_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538085 Crash type: UNKNOWN READ Crash state: chunkfreeobject streamdctfinalize chunkfreeobject...

OSV-2024-1010 UNKNOWN READ in H5SL_first

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69169 Crash type: UNKNOWN READ Crash state: H5SLfirst H5FSsectfind H5MFfindsect...

OSV-2024-1009 Heap-buffer-overflow in pcpp::Layer::shortenLayer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66778 Crash type: Heap-buffer-overflow WRITE 9 Crash state: pcpp::Layer::shortenLayer pcpp::TextBasedProtocolMessage::removeField readParsedPacket...

OSV-2024-952 Security exception in org.bouncycastle.asn1.IndefiniteLengthInputStream.read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42536579 Crash type: Security exception Crash state: org.bouncycastle.asn1.IndefiniteLengthInputStream.read org.bouncycastle.asn1.IndefiniteLengthInputStream.checkForEof org.bouncycastle.asn1.IndefiniteLengthInputStream.read...

OSV-2024-919 Heap-buffer-overflow in validate_relpath

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66547 Crash type: Heap-buffer-overflow READ 2 Crash state: validaterelpath loadmodulemeta fmodulemeta...

OSV-2024-664 Heap-buffer-overflow in gf_dash_group_get_template

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70342 Crash type: Heap-buffer-overflow WRITE 1 Crash state: gfdashgroupgettemplate gfdashresolveurl gfdashdownloadinitsegment...

OSV-2024-659 Index-out-of-bounds in gf_vvc_parse_nalu_bs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70392 Crash type: Index-out-of-bounds Crash state: gfvvcparsenalubs gfinspectdumpnaluinternal inspectprocess...

OSV-2024-602 Heap-buffer-overflow in ultrahdr::getYuv420Pixel

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69287 Crash type: Heap-buffer-overflow READ 1 Crash state: ultrahdr::getYuv420Pixel std::1::function::funcultrahdr::JpegR::applyGainMap ultrahdr::JpegR::applyGainMap...

OSV-2024-528 Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69348 Crash type: Security exception Crash state: com.github.javaparser.ast.validator.TreeVisitorValidator.accept com.github.javaparser.ast.expr.FieldAccessExpr.getMetaModel...

OSV-2024-465 Security exception in com.drew.imaging.tiff.TiffReader.processIfd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68845 Crash type: Security exception Crash state: com.drew.imaging.tiff.TiffReader.processIfd java.base/java.lang.Throwable.printStackTrace com.codeintelligence.jazzer.api.Jazzer.guideTowardsEquality...

OSV-2024-417 Use-of-uninitialized-value in bssl::ssl_cipher_process_rulestr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68441 Crash type: Use-of-uninitialized-value Crash state: bssl::sslcipherprocessrulestr bssl::sslcreatecipherlist SSLCTXsetcipherlist...

OSV-2024-336 Stack-buffer-underflow in mkechar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68343 Crash type: Stack-buffer-underflow READ 4 Crash state: mkechar sympartition ntod...

OSV-2024-331 Null-dereference READ in ubsan_GetStackTrace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68198 Crash type: Null-dereference READ Crash state: ubsanGetStackTrace...

OSV-2024-222 Security exception in co.nstant.in.cbor.CborDecoder.decodeNext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67637 Crash type: Security exception Crash state: co.nstant.in.cbor.CborDecoder.decodeNext java.base/jdk.internal.misc.Unsafe.putByte jdk.unsupported/sun.misc.Unsafe.putByte...

OSV-2024-93 Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66540 Crash type: Security exception Crash state: com.github.javaparser.ast.validator.TreeVisitorValidator.accept java.base/java.util.Arrays.copyOf java.base/java.util.ArrayList.grow...

OSV-2024-48 Security exception in java.base/java.util.Arrays.copyOf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66178 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOf java.base/java.util.Arrays.copyOf java.base/java.util.ArrayList.grow...

OSV-2023-1377 UNKNOWN READ in FuzzedFileProvider::seek

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65417 Crash type: UNKNOWN READ Crash state: FuzzedFileProvider::seek IOdowrite IOfilecloseit...

OSV-2023-1163 Invalid-free in sc_file_clear_acl_entries

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64181 Crash type: Invalid-free Crash state: scfileclearaclentries scfilefree setcoscreatekey...

OSV-2023-1095 Heap-use-after-free in zend_jit_trace_execute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63725 Crash type: Heap-use-after-free READ 4 Crash state: zendjittraceexecute zendjittracehotside zendjittraceexit...

OSV-2023-747 Segv on unknown address in kh_get_ucl_hash_caseless_node

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61794 Crash type: Segv on unknown address Crash state: khgetuclhashcaselessnode uclhashsearch uclincludefilesingle...

OSV-2023-676 Security exception in com.github.javaparser.ast.visitor.CloneVisitor.visit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61313 Crash type: Security exception Crash state: com.github.javaparser.ast.visitor.CloneVisitor.visit com.github.javaparser.ast.type.ClassOrInterfaceType.accept com.github.javaparser.ast.visitor.CloneVisitor.cloneNode...

OSV-2023-640 Stack-buffer-overflow in initialize_encryption_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61039 Crash type: Stack-buffer-overflow READ Crash state: initializeencryptionkey cliole2extract cliscanole2...

OSV-2023-546 Invalid-free in jpeg_free_large

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60379 Crash type: Invalid-free Crash state: jpegfreelarge jpegabort jpegfinishdecompress...

OSV-2023-527 Heap-buffer-overflow in default_get_outline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60207 Crash type: Heap-buffer-overflow READ 4 Crash state: defaultgetoutline pdfifapigetglyph getfapiglyphdata...