OSV-2026-1070 UNKNOWN READ in bytes1_char_at

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=538179114 Crash type: UNKNOWN READ Crash state: bytes1charat unicodewordleft unicodeatboundary...

OSV-2026-1068 UNKNOWN READ in jpeg_abort

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=537793912 Crash type: UNKNOWN READ Crash state: jpegabort tj3Compress8 compress.cc...

OSV-2026-1043 Index-out-of-bounds in impd_drc_gen_instructions_derived_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=531676895 Crash type: Index-out-of-bounds Crash state: impddrcgeninstructionsderiveddata impdparsedrcconfig impddrcinit...

OSV-2026-1030 Use-of-uninitialized-value in Assimp::glTFExporter::GetTexSampler

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=531097475 Crash type: Use-of-uninitialized-value Crash state: Assimp::glTFExporter::GetTexSampler Assimp::glTFExporter::GetMatColorOrTex Assimp::glTFExporter::ExportMaterials...

OSV-2026-195 Use-of-uninitialized-value in vcardstructured_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=481458325 Crash type: Use-of-uninitialized-value Crash state: vcardstructuredfree vcardparameterfree vcardpropertyfree...

OSV-2025-809 Use-of-uninitialized-value in WebPCleanupTransparentArea

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=449246999 Crash type: Use-of-uninitialized-value Crash state: WebPCleanupTransparentArea WebPEncode EncTest...

OSV-2025-614 Heap-buffer-overflow in hevc_hvcC_to_AnnexB_NAL

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437694936 Crash type: Heap-buffer-overflow WRITE Crash state: hevchvcCtoAnnexBNAL Open genericstart...

OSV-2025-564 Heap-buffer-overflow in ndpi_match_host_subprotocol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=432880859 Crash type: Heap-buffer-overflow READ 2 Crash state: ndpimatchhostsubprotocol checkcontenttypeandchangeprotocol processrequest...

OSV-2024-764 Use-of-uninitialized-value in _cupsStrAlloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69562 Crash type: Use-of-uninitialized-value Crash state: cupsStrAlloc ippReadIO fuzzipp.c...

OSV-2023-839 Global-buffer-overflow in iusace_quantize_lines

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62261 Crash type: Global-buffer-overflow READ 4 Crash state: iusacequantizelines iusacequantizespec iusacefdencode...

OSV-2023-604 Segv on unknown address in ucl_object_free_internal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60789 Crash type: Segv on unknown address Crash state: uclobjectfreeinternal uclparserfree ucladdstringfuzzer.c...

OSV-2023-472 Heap-buffer-overflow in TestFuzzCommonAssistanceParseFileBuffer.c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59682 Crash type: Heap-buffer-overflow WRITE Crash state: TestFuzzCommonAssistanceParseFileBuffer.c...

OSV-2022-1029 Heap-buffer-overflow in dprint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52204 Crash type: Heap-buffer-overflow READ 13 Crash state: dprint gethdrfield parseheaders...

OSV-2022-708 UNKNOWN READ in kh_resize_ucl_hash_node

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50120 Crash type: UNKNOWN READ Crash state: khresizeuclhashnode khputuclhashnode uclhashinsert...

OSV-2022-576 UNKNOWN WRITE in SkMaskBlurFilter::blur

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49061 Crash type: UNKNOWN WRITE Crash state: SkMaskBlurFilter::blur SkBlurMask::BoxBlur SkBlurMaskFilterImpl::filterMask...

OSV-2022-406 Heap-buffer-overflow in ucl_object_dtor_unref_single

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47339 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectdtorunrefsingle uclobjectdtorunref uclhashdestroy...

OSV-2022-381 Heap-buffer-overflow in lwan_h2_huffman_decode_for_fuzzing

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46990 Crash type: Heap-buffer-overflow READ 8 Crash state: lwanh2huffmandecodeforfuzzing h2huffmanfuzzer.cc...

OSV-2022-348 Heap-buffer-overflow in doemit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46692 Crash type: Heap-buffer-overflow WRITE 8 Crash state: doemit doinsert pere...

OSV-2022-261 Segv on unknown address in flb_ra_create

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45659 Crash type: Segv on unknown address Crash state: flbracreate recordacfuzzer.c...

OSV-2022-53 Heap-buffer-overflow in mem_true24_fill_rectangle

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43688 Crash type: Heap-buffer-overflow WRITE 4 Crash state: memtrue24fillrectangle gxdcpurefillrectangle gxdefaultfillpage...

OSV-2021-1563 Global-buffer-overflow in xstrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40915 Crash type: Global-buffer-overflow READ 1 Crash state: xstrdup scanfilteredsymbols scanallsymbols...

OSV-2021-1184 UNKNOWN READ in ucl_array_append

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37885 Crash type: UNKNOWN READ Crash state: uclarrayappend uclobjectcopyinternal uclobjectcopy...

OSV-2021-572 Global-buffer-overflow in mode_sense_page

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32538 Crash type: Global-buffer-overflow READ 4 Crash state: modesensepage scsidiskcheckmodeselect modeselectpages...

OSV-2021-493 Heap-buffer-overflow in encode_3dsolid

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31657 Crash type: Heap-buffer-overflow READ 4 Crash state: encode3dsolid dwgencodeREGIONprivate dwgencodeREGION...

OSV-2020-2299 Heap-buffer-overflow in ato16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29103 Crash type: Heap-buffer-overflow READ 1 Crash state: ato16 TLSXCSRParse TLSXParse...

OSV-2020-2190 Heap-buffer-overflow in my_ismbchar_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27813 Crash type: Heap-buffer-overflow READ 2 Crash state: myismbcharutf8 checkcolumnname getvariable...

OSV-2020-2147 Use-of-uninitialized-value in stringNew

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27348 Crash type: Use-of-uninitialized-value Crash state: stringNew stringReplace pixSetText...

OSV-2020-1867 Use-of-uninitialized-value in PerceptibleReciprocal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26023 Crash type: Use-of-uninitialized-value Crash state: PerceptibleReciprocal CompositeImage loadlevel...

OSV-2020-1852 UNKNOWN READ in WelsCommon::WelsFree

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25939 Crash type: UNKNOWN READ Crash state: WelsCommon::WelsFree WelsCommon::CMemoryAlign::WelsFree WelsDec::FreePicture...

OSV-2020-1532 Heap-buffer-overflow in Op_RGB_to_RGB24_32::convert_colorspace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22109 Crash type: Heap-buffer-overflow READ 1 Crash state: OpRGBtoRGB2432::convertcolorspace heif::ColorConversionPipeline::convertimage heif::convertcolorspace...

OSV-2020-1512 Segv on unknown address in clang::Sema::SetCtorInitializers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22828 Crash type: Segv on unknown address Crash state: clang::Sema::SetCtorInitializers clang::Sema::ActOnDefaultCtorInitializers clang::Parser::ParseLexedMethodDef...

OSV-2020-1504 Segv on unknown address in clang::Sema::ActOnMethodDeclaration

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19620 Crash type: Segv on unknown address Crash state: clang::Sema::ActOnMethodDeclaration clang::Parser::ParseObjCMethodDecl clang::Parser::ParseObjCMethodDefinition...

OSV-2020-1500 Heap-buffer-overflow in dotnet_parse_com

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8901 Crash type: Heap-buffer-overflow READ Crash state: dotnetparsecom dotnetload yrmodulesload...

OSV-2020-1475 Use-of-uninitialized-value in LibRaw::open_datastream

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21537 Crash type: Use-of-uninitialized-value Crash state: LibRaw::opendatastream LibRaw::openfile librawopenfile...

OSV-2020-1463 Segv on unknown address in llvm::detail::IEEEFloat::roundSignificandWithExponent

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19171 Crash type: Segv on unknown address Crash state: llvm::detail::IEEEFloat::roundSignificandWithExponent llvm::detail::IEEEFloat::convertFromDecimalString llvm::detail::IEEEFloat::convertFromString...

OSV-2020-1395 Heap-buffer-overflow in zmq::tcp_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23281 Crash type: Heap-buffer-overflow WRITE Crash state: zmq::tcpread zmq::streamenginebaset::read zmq::streamenginebaset::ineventinternal...

OSV-2020-1390 Use-of-uninitialized-value in LibRaw::panasonic_load_raw

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21256 Crash type: Use-of-uninitialized-value Crash state: LibRaw::panasonicloadraw LibRaw::unpack librawunpack...

OSV-2020-1374 Use-of-uninitialized-value in void edge_filtering_luma_internal<unsigned char>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22895 Crash type: Use-of-uninitialized-value Crash state: void edgefilteringlumainternal edgefilteringluma threadtaskdeblockCTBRow::work...

OSV-2020-1116 Heap-use-after-free in Interpreter::evaluate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15888 Crash type: Heap-use-after-free READ 4 Crash state: Interpreter::evaluate jsonnetvmexecute jsonnetevaluatesnippetaux...

OSV-2020-1064 Heap-buffer-overflow in ndr_push_bytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22926 Crash type: Heap-buffer-overflow READ 2 Crash state: ndrpushbytes ndrpusharrayuint8 ndrpushnbtrdatadata...

OSV-2020-1043 Heap-buffer-overflow in xport_construct_format

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12569 Crash type: Heap-buffer-overflow WRITE Crash state: xportconstructformat xportreadlabelsv9 xportreadvariables...

OSV-2026-1361 Bad parameters to --sanitizer-annotate-contiguous-container in jsoncons::cbor::basic_cbor_parser<jsoncons::stream_source<unsigned char, std::__

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=568595812 Crash type: Bad parameters to --sanitizer-annotate-contiguous-container Crash state: jsoncons::cbor::basiccborparserjsoncons::streamsourceunsigned char, std:: void...

OSV-2026-1332 Heap-buffer-overflow in screen_resize_cursor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=566549189 Crash type: Heap-buffer-overflow READ 1 Crash state: screenresizecursor windowpaneresize layoutfixpanes...

OSV-2026-1072 UNKNOWN READ in _regex.cpython-311-x86_64-linux-gnu.so

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=539159630 Crash type: UNKNOWN READ Crash state: regex.cpython-311-x8664-linux-gnu.so regex.cpython-311-x8664-linux-gnu.so regex.cpython-311-x8664-linux-gnu.so...

OSV-2026-1018 Heap-buffer-overflow in decode_reason_code_and_cc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=530730549 Crash type: Heap-buffer-overflow READ 1 Crash state: decodereasoncodeandcc decodensmprovidetokenresp decodensmprovidetokenrespfuzzer.cc...

OSV-2026-1016 Heap-buffer-overflow in decode_query_device_identification_resp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=530569583 Crash type: Heap-buffer-overflow READ 1 Crash state: decodequerydeviceidentificationresp decodequerydeviceidentificationrespfuzzer.cc...

OSV-2025-938 Use-of-uninitialized-value in comp_func_SourceOver_avx2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=462673332 Crash type: Use-of-uninitialized-value Crash state: compfuncSourceOveravx2 blenduntransformedgeneric blenduntransformedgeneric...

OSV-2023-709 Heap-buffer-overflow in QOIHandler::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61528 Crash type: Heap-buffer-overflow READ 1 Crash state: QOIHandler::read kimgiofuzzer.cc...

OSV-2023-420 Heap-use-after-free in fragment_addresses_equal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59173 Crash type: Heap-use-after-free READ 6 Crash state: fragmentaddressesequal ghashtablelookupextended fragmentaddseqsinglework...

OSV-2023-77 Heap-buffer-overflow in H5C__load_cache_image

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56075 Crash type: Heap-buffer-overflow READ 4 Crash state: H5Cloadcacheimage H5Cprotect H5ACprotect...