OSV-2020-892 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23909 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

OSV-2020-855 Use-of-uninitialized-value in read_uleb128

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Use-of-uninitialized-value Crash state: readuleb128 dexparse dexload...

OSV-2020-557 Global-buffer-overflow in dissect_snmp_PDUs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18816 Crash type: Global-buffer-overflow READ 4 Crash state: dissectsnmpPDUs dissectberchoice dissectsnmpRegisterResponse...

OSV-2020-323 Use-of-uninitialized-value in ht_copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15603 Crash type: Use-of-uninitialized-value Crash state: htcopy mrbhashdup mrbvmexec...

OSV-2020-308 Heap-buffer-overflow in UA_copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15152 Crash type: Heap-buffer-overflow WRITE Crash state: UAcopy RefTreeadd OperationBrowse...

OSV-2026-1281 Heap-buffer-overflow in md_decode_utf8__

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=560854538 Crash type: Heap-buffer-overflow READ 1 Crash state: mddecodeutf8 mdlabelhash mdlookuplabelhashtable...

OSV-2026-1267 Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=560242604 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.RegexInjection.hookInternal com.codeintelligence.jazzer.sanitizers.RegexInjection.patternHook...

OSV-2026-1161 Heap-buffer-overflow in ppp_tx_frame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=546440470 Crash type: Heap-buffer-overflow WRITE Crash state: ppptxframe ppprx mgtcpiprx...

OSV-2026-1035 Heap-buffer-overflow in Assimp::D3MF::D3MFExporter::writeFaces

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=531123003 Crash type: Heap-buffer-overflow READ 4 Crash state: Assimp::D3MF::D3MFExporter::writeFaces Assimp::D3MF::D3MFExporter::writeMesh Assimp::D3MF::D3MFExporter::writeObjects...

OSV-2026-1032 Use-of-uninitialized-value in Assimp::PbrtExporter::WriteTextures

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=531040219 Crash type: Use-of-uninitialized-value Crash state: Assimp::PbrtExporter::WriteTextures Assimp::PbrtExporter::WriteWorldDefinition Assimp::PbrtExporter::PbrtExporter...

OSV-2026-1030 Use-of-uninitialized-value in Assimp::glTFExporter::GetTexSampler

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=531097475 Crash type: Use-of-uninitialized-value Crash state: Assimp::glTFExporter::GetTexSampler Assimp::glTFExporter::GetMatColorOrTex Assimp::glTFExporter::ExportMaterials...

OSV-2026-1022 Heap-buffer-overflow in decode_common_resp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=530698795 Crash type: Heap-buffer-overflow READ 1 Crash state: decodecommonresp decodecommonrespfuzzer.cc...

OSV-2025-983 Dynamic-stack-buffer-overflow in _ox_err_set_with_location

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=468138858 Crash type: Dynamic-stack-buffer-overflow READ 1 Crash state: oxerrsetwithlocation readelement oxparse...

OSV-2025-890 Heap-buffer-overflow in icalmemory_tmp_copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=458943970 Crash type: Heap-buffer-overflow WRITE 1 Crash state: icalmemorytmpcopy icalreqstattypefromstring icalvaluenewfromstring...

OSV-2025-818 Heap-buffer-overflow in std::__1::pair<int, arrow::util::RleBitPackedParser::ControlFlow> arrow::util::R

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=449498800 Crash type: Heap-buffer-overflow READ 1 Crash state: std::1::pair arrow::util::R arrow::util::RleBitPackedDecoder::GetBatch auto parquet::DictByteArrayDecoderImpl::DecodeArrowDense...

OSV-2025-698 Use-of-uninitialized-value in AesEncrypt_C

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=442261624 Crash type: Use-of-uninitialized-value Crash state: AesEncryptC wcAesCbcEncrypt Encrypt...

OSV-2025-622 Heap-buffer-overflow in cc_storage_append

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437855564 Crash type: Heap-buffer-overflow READ 1 Crash state: ccstorageappend ParseSEICallback HxxxParseSEI...

OSV-2025-608 Heap-buffer-overflow in _dwarf_memcpy_noswap_bytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437060549 Crash type: Heap-buffer-overflow READ 4 Crash state: dwarfmemcpynoswapbytes dwarflengthofcuheader dwarfglobalnameoffsets...

OSV-2025-456 Use-of-uninitialized-value in ppd_hash_option

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=423674620 Crash type: Use-of-uninitialized-value Crash state: ppdhashoption cupsArrayFind ppdFindOption...

OSV-2025-219 Heap-buffer-overflow in opj_j2k_read_tile_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=403673832 Crash type: Heap-buffer-overflow WRITE 8 Crash state: opjj2kreadtileheader opjj2kdecodetiles opjj2kdecode...

OSV-2025-61 Heap-buffer-overflow in oatpp::json::Utils::escapeString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=391916478 Crash type: Heap-buffer-overflow WRITE 1 Crash state: oatpp::json::Utils::escapeString oatpp::json::Serializer::serializeString oatpp::json::Serializer::serializePairs...

OSV-2024-1232 Segv on unknown address in cranelift_filetests::function_runner::Trampoline::call::hb2e77cf3a13ebaf4

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=373522467 Crash type: Segv on unknown address Crash state: craneliftfiletests::functionrunner::Trampoline::call::hb2e77cf3a13ebaf4 craneliftfuzzgen::::run::hdb2f75e19950661f...

OSV-2024-1205 Memcpy-param-overlap in repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372515088 Crash type: Memcpy-param-overlap Crash state: repeat repeat pere...

OSV-2024-930 Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70893 Crash type: Security exception Crash state: org.springframework.expression.spel.ast.OpPlus.getValueInternal java.base/sun.reflect.generics.reflectiveObjects.ParameterizedTypeImpl.hashCode...

OSV-2024-868 Use-of-uninitialized-value in evutil_inet_pton

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69173 Crash type: Use-of-uninitialized-value Crash state: evutilinetpton bracketaddrok parseauthority...

OSV-2024-792 Index-out-of-bounds in AAHD::make_ahd_rb_hv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42536934 Crash type: Index-out-of-bounds Crash state: AAHD::makeahdrbhv AAHD::makeahdrb LibRaw::aahdinterpolate...

OSV-2024-627 Heap-buffer-overflow in gf_hevc_parse_nalu_bs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70105 Crash type: Heap-buffer-overflow READ 1 Crash state: gfhevcparsenalubs gfinspectdumpnaluinternal inspectprocess...

OSV-2024-359 Security exception in graphql.schema.GraphQLTypeUtil.simplePrint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67751 Crash type: Security exception Crash state: graphql.schema.GraphQLTypeUtil.simplePrint graphql.schema.GraphQLTypeUtil.simplePrint graphql.schema.GraphQLTypeUtil.unwrapOne...

OSV-2023-1350 Heap-buffer-overflow in inflate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65236 Crash type: Heap-buffer-overflow READ 1 Crash state: inflate uncompress2 uncompress...

OSV-2023-1205 Heap-buffer-overflow in isvcd_populate_res_prms

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64431 Crash type: Heap-buffer-overflow WRITE 1 Crash state: isvcdpopulateresprms isvcdparseinterlayerresampfuncinit isvcdmarkerrsliceskip...

OSV-2023-997 Heap-buffer-overflow in dxf_fixup_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63137 Crash type: Heap-buffer-overflow READ 1 Crash state: dxffixupstring dwgdxfLAYOUTprivate dwgdxfLAYOUT...

OSV-2023-959 Heap-buffer-overflow in _dwarf_memcpy_noswap_bytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62943 Crash type: Heap-buffer-overflow READ 8 Crash state: dwarfmemcpynoswapbytes fillinuniarch64 dwarfmachosetup...

OSV-2023-673 Heap-buffer-overflow in match

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61268 Crash type: Heap-buffer-overflow READ 1 Crash state: match pcre2match8 pcre2fuzzsupport.c...

OSV-2023-512 Memcpy-param-overlap in repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60091 Crash type: Memcpy-param-overlap Crash state: repeat pere cliregcompreal...

OSV-2023-116 Security exception in org.codehaus.janino.Parser.parseUnaryExpression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56367 Crash type: Security exception Crash state: org.codehaus.janino.Parser.parseUnaryExpression java.base/java.nio.ByteBuffer.limit java.base/java.nio.Buffer...

OSV-2022-1265 Heap-buffer-overflow in BITLK_read_sb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54548 Crash type: Heap-buffer-overflow READ Crash state: BITLKreadsb cryptloadbitlk cryptload...

OSV-2022-1247 Heap-buffer-overflow in ucl_object_dtor_unref_single

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54060 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectdtorunrefsingle uclobjectdtorunref uclhashdestroy...

OSV-2022-1118 Security exception in java.base/jdk.internal.math.FloatingDecimal.readJavaFormatString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52840 Crash type: Security exception Crash state: java.base/jdk.internal.math.FloatingDecimal.readJavaFormatString java.base/jdk.internal.math.FloatingDecimal.parseDouble java.base/java.lang.Double.parseDouble...

OSV-2022-1114 Heap-buffer-overflow in g_strchug

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52798 Crash type: Heap-buffer-overflow READ Crash state: gstrchug dissectdcmmain calldissectorwork...

OSV-2022-942 Security exception in com.github.javaparser.ast.expr.FieldAccessExpr.accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51694 Crash type: Security exception Crash state: com.github.javaparser.ast.expr.FieldAccessExpr.accept com.github.javaparser.ast.visitor.VoidVisitorAdapter.visit java.base/java.lang.StringCoding.encode...

OSV-2022-834 Heap-use-after-free in mk_event_timeout_destroy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50924 Crash type: Heap-use-after-free WRITE 8 Crash state: mkeventtimeoutdestroy flbscheddestroy flbconfigexit...

OSV-2022-629 Heap-buffer-overflow in TetrahedralInterp16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49455 Crash type: Heap-buffer-overflow READ 2 Crash state: TetrahedralInterp16 PrelinEval16 cmsPipelineEval16...

OSV-2022-576 UNKNOWN WRITE in SkMaskBlurFilter::blur

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49061 Crash type: UNKNOWN WRITE Crash state: SkMaskBlurFilter::blur SkBlurMask::BoxBlur SkBlurMaskFilterImpl::filterMask...

OSV-2022-549 Invalid-free in round_trip_fuzzer.c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48884 Crash type: Invalid-free Crash state: roundtripfuzzer.c...

OSV-2022-524 Heap-buffer-overflow in Ins_JROF

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48547 Crash type: Heap-buffer-overflow READ 1 Crash state: InsJROF RunIns InstanceReset...

OSV-2021-1818 Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47847 Crash type: Null-dereference READ Crash state: NULL...

OSV-2022-460 Heap-use-after-free in inflate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47834 Crash type: Heap-use-after-free READ 1 Crash state: inflate zlibbody zlibdecompress...

OSV-2022-430 UNKNOWN READ in fp_cmp_mag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47586 Crash type: UNKNOWN READ Crash state: fpcmpmag crtmgrtrustlistlookup crtmgradd...

OSV-2022-301 Heap-buffer-overflow in template_compose_group

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46307 Crash type: Heap-buffer-overflow READ 1 Crash state: templatecomposegroup composegroupnonknockoutnoblendgeneral pdf14composegroup...

OSV-2022-216 Null-dereference READ in cl_finish_hash

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45197 Crash type: Null-dereference READ Crash state: clfinishhash hashimptbl scanpeimp...