OSV-2018-137 Heap-buffer-overflow in set_char_prefix

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10159 Crash type: Heap-buffer-overflow WRITE 1 Crash state: setcharprefix parseincludeddirectories setlongoption...

OSV-2018-111 Heap-buffer-overflow in format_generic_odp_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10850 Crash type: Heap-buffer-overflow READ 1 Crash state: formatgenericodpkey checkattrlen formatodpkeyattr...

OSV-2020-1297 Heap-buffer-overflow in pcpp::DnsResource::getDataLength

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22102 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::DnsResource::getDataLength pcpp::DnsResource::getSize pcpp::DnsLayer::parseResources...

OSV-2020-1039 UNKNOWN WRITE in putgreytile

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13283 Crash type: UNKNOWN WRITE Crash state: putgreytile gtStripContig TIFFReadRGBAStripExt...

OSV-2020-504 Global-buffer-overflow in lwan_parse_rfc_time

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14297 Crash type: Global-buffer-overflow READ 4 Crash state: lwanparserfctime parseifmodifiedsince fuzzparsehttprequest...

OSV-2020-496 Stack-buffer-overflow in ot::Mle::Mle::HandleParentResponse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15382 Crash type: Stack-buffer-overflow READ Crash state: ot::Mle::Mle::HandleParentResponse ot::Mle::Mle::HandleUdpReceive ot::Ip6::Udp::HandleMessage...

OSV-2020-420 UNKNOWN WRITE in uffd_cleanup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15156 Crash type: UNKNOWN WRITE Crash state: uffdcleanup netCDFDataset::netCDFDataset netCDFDataset::netCDFDataset...

OSV-2020-258 Stack-buffer-overflow in ot::Message::Write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19338 Crash type: Stack-buffer-overflow READ 11 Crash state: ot::Message::Write ot::Message::Append ot::Mle::Mle::AppendResponse...

OSV-2020-181 Heap-buffer-overflow in get_ndpi_flow_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20162 Crash type: Heap-buffer-overflow READ 2 Crash state: getndpiflowinfo packetprocessing ndpiworkflowprocesspacket...

OSV-2020-146 Heap-buffer-overflow in Json::OurReader::parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21916 Crash type: Heap-buffer-overflow READ 1 Crash state: Json::OurReader::parse Json::OurCharReader::parse fuzz.cpp...

OSV-2020-125 Negative-size-param in parquet::PlainByteArrayDecoder::DecodeArrowDense

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20669 Crash type: Negative-size-param Crash state: parquet::PlainByteArrayDecoder::DecodeArrowDense parquet::PlainByteArrayDecoder::DecodeArrow parquet::internal::ByteArrayChunkedRecordReader::ReadValuesSpaced...

OSV-2020-111 Heap-use-after-free in int std::__1::__cxx_atomic_fetch_sub<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21604 Crash type: Heap-use-after-free WRITE 4 Crash state: int std::1::cxxatomicfetchsub std::1::atomicbase::operator-- Object::free...

OSV-2026-970 Use-of-uninitialized-value in ogs_cpystrn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=527978938 Crash type: Use-of-uninitialized-value Crash state: ogscpystrn ogsnas5gsdecodednn ogsnas5gsdecodepdusessionestablishmentaccept...

OSV-2026-822 Heap-use-after-free in slice_segment_header::operator=

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=517027630 Crash type: Heap-use-after-free READ 4 Crash state: slicesegmentheader::operator= slicesegmentheader::read decodercontext::readsliceNAL...

OSV-2026-808 Heap-buffer-overflow in ihevcd_fmt_conv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=515994900 Crash type: Heap-buffer-overflow WRITE 1 Crash state: ihevcdfmtconv ihevcdprocessthread startthread...

OSV-2026-788 UNKNOWN READ in Mat_VarGetStructsLinear

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=515086854 Crash type: UNKNOWN READ Crash state: MatVarGetStructsLinear matiostructcellfuzzer.cpp...

OSV-2026-649 Container-overflow in OGRGeometryFactory::organizePolygons

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=506932597 Crash type: Container-overflow WRITE 1 Crash state: OGRGeometryFactory::organizePolygons OGRCreateFromShapeBin OpenFileGDB::FileGDBOGRGeometryConverterImpl::CreateCurveGeometry...

OSV-2026-505 UNKNOWN READ in unsigned int Assimp::StreamReader<true, true>::Get<unsigned int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=498284131 Crash type: UNKNOWN READ Crash state: unsigned int Assimp::StreamReader::Get void Assimp::Blender::ConvertDispatcher void Assimp::Blender::Structure::ReadField...

OSV-2026-449 Use-of-uninitialized-value in pcpp::SomeIpSdEntry::SomeIpSdEntry

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=495096701 Crash type: Use-of-uninitialized-value Crash state: pcpp::SomeIpSdEntry::SomeIpSdEntry pcpp::SomeIpSdLayer::getEntries readParsedPacket...

OSV-2026-359 Segv on unknown address in gpsd_vlog

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=490142464 Crash type: Segv on unknown address Crash state: gpsdvlog gpsdlog processGSV...

OSV-2026-261 Segv on unknown address in ___interceptor_strtol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=485071710 Crash type: Segv on unknown address Crash state: interceptorstrtol processPASHR nmeaparse...

OSV-2026-259 Use-of-uninitialized-value in tsip_parse_input

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=484859694 Crash type: Use-of-uninitialized-value Crash state: tsipparseinput gpsdpoll FuzzDrivers.c...

OSV-2026-190 Security exception in com.ctc.wstx.util.TextBuffer.buildResultArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=480987597 Crash type: Security exception Crash state: com.ctc.wstx.util.TextBuffer.buildResultArray com.ctc.wstx.util.TextBuffer.contentsAsArray com.ctc.wstx.dtd.FullDTDReader.parseEntityValue...

OSV-2026-94 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=476574781 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement java.base/jdk.internal.misc.Unsafe.weakCompareAndSetInt...

OSV-2025-510 Use-after-poison in llvm::BitstreamCursor::readRecord

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=428525443 Crash type: Use-after-poison READ 1 Crash state: llvm::BitstreamCursor::readRecord BitcodeReader::parseModule llvm::BitcodeModule::getModuleImpl...

OSV-2024-662 Security exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70313 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.Objects.equals com.github.javaparser.Position.equals...

OSV-2024-634 Heap-buffer-overflow in htmlCurrentChar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70297 Crash type: Heap-buffer-overflow READ 1 Crash state: htmlCurrentChar htmlParseCharData htmlParseContentInternal...

OSV-2024-402 Stack-buffer-overflow in SwiftProtobuf.TextFormatScanner.

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68485 Crash type: Stack-buffer-overflow READ 1 Crash state: SwiftProtobuf.TextFormatScanner. SwiftProtobuf.TextFormatScanner. function signature specialization Arg...

OSV-2024-324 Use-of-uninitialized-value in do_callout_jit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68365 Crash type: Use-of-uninitialized-value Crash state: docalloutjit jitmachinestackexec...

OSV-2024-167 Security exception in com.github.javaparser.GeneratedJavaParser.Expression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65974 Crash type: Security exception Crash state: com.github.javaparser.GeneratedJavaParser.Expression java.base/java.lang.String.startsWith java.base/java.net.URL.isBuiltinStreamHandler...

OSV-2023-838 Use-of-uninitialized-value in wabt::BinaryReaderIR::OnOpcode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62267 Crash type: Use-of-uninitialized-value Crash state: wabt::BinaryReaderIR::OnOpcode wabt::BinaryReader::ReadInstructions wabt::ReadBinary...

OSV-2023-734 Container-overflow in libbrotlidec.so.1

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61675 Crash type: Container-overflow WRITE Crash state: libbrotlidec.so.1 BrotliDecoderDecompressStream Exiv2::BmffImage::brotliUncompress...

OSV-2023-19 Heap-buffer-overflow in ndpi_search_bittorrent

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55218 Crash type: Heap-buffer-overflow READ Crash state: ndpisearchbittorrent checkndpidetectionfunc ndpicheckflowfunc...

OSV-2022-1258 Heap-buffer-overflow in Assimp::ObjFileImporter::createVertexArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54187 Crash type: Heap-buffer-overflow WRITE 12 Crash state: Assimp::ObjFileImporter::createVertexArray Assimp::ObjFileImporter::createTopology Assimp::ObjFileImporter::createNodes...

OSV-2022-1054 Heap-buffer-overflow in AffixMgr::cpdpat_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52430 Crash type: Heap-buffer-overflow READ 1 Crash state: AffixMgr::cpdpatcheck AffixMgr::compoundcheck SuggestMgr::checkword...

OSV-2022-904 Heap-use-after-free in std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<geos::geom::Coor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51406 Crash type: Heap-use-after-free READ 8 Crash state: std::1::pairstd::1::treeiteratorstd::1::valuetypegeos::geom::Coor geos::geomgraph::NodeMap::addNode geos::geomgraph::GeometryGraph::addSelfIntersectionNode...

OSV-2022-530 Heap-buffer-overflow in string_decoder_getc_utf_8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48589 Crash type: Heap-buffer-overflow READ 1 Crash state: stringdecodergetcutf8 textdecodergetc ReadClause...

OSV-2022-492 Heap-buffer-overflow in jxl::BitsCoder::Read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48123 Crash type: Heap-buffer-overflow READ 8 Crash state: jxl::BitsCoder::Read jxl::ReadVisitor::Bits jxl::jpeg::JPEGData::VisitFields...

OSV-2022-403 Heap-use-after-free in dwg_add_handleref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47319 Crash type: Heap-use-after-free READ 8 Crash state: dwgaddhandleref dwgaddSTYLE decodepreR13section...

OSV-2022-321 Stack-use-after-scope in std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<g

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46468 Crash type: Stack-use-after-scope WRITE 1 Crash state: std::1::function::funcbool grk::WaveletReverse::decompresspartialtileg tf::Executor::invoke tf::Executor::consumetask...

OSV-2022-284 Heap-double-free in read_config

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46019 Crash type: Heap-double-free Crash state: readconfig readglob readconfig...

OSV-2022-165 Stack-buffer-overflow in fmt::v8::basic_memory_buffer<unsigned int, 32ul, std::__1::allocator<unsigned in

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44763 Crash type: Stack-buffer-overflow READ 4 Crash state: fmt::v8::basicmemorybufferunsigned int, 32ul, std::1::allocatorunsigned in fmt::v8::detail::bigint::square fmt::v8::detail::bigint::assignpow10...

OSV-2022-152 UNKNOWN WRITE

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44641 Crash type: UNKNOWN WRITE Crash state: NULL...

OSV-2021-1796 Heap-buffer-overflow in Curl_sasl_decode_mech

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43186 Crash type: Heap-buffer-overflow READ 10 Crash state: Curlsasldecodemech Curlsaslparseurlauthoption pop3parseurloptions...

OSV-2021-1752 Heap-buffer-overflow in s_hex_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42896 Crash type: Heap-buffer-overflow READ 1 Crash state: shexprocess sexDprocess sreadbuf...

OSV-2021-1694 Stack-buffer-overflow in pdfi_read_cff_dict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42298 Crash type: Stack-buffer-overflow WRITE 4 Crash state: pdfireadcffdict pdfireadcffdict pdfireadcffdict...

OSV-2021-1604 Heap-buffer-overflow in jxl::N_AVX2::SingleFromSingle

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41225 Crash type: Heap-buffer-overflow READ Crash state: jxl::NAVX2::SingleFromSingle jxl::ThreadPool::SequentialRunnerStatic jxl::ModularFrameDecoder::ModularImageToDecodedRect...

OSV-2021-1475 Heap-buffer-overflow in derive_spatial_luma_vector_prediction

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40107 Crash type: Heap-buffer-overflow READ 1 Crash state: derivespatiallumavectorprediction filllumamotionvectorpredictors motionvectorsandrefindices...

OSV-2021-1450 UNKNOWN READ in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39944 Crash type: UNKNOWN READ Crash state: helpeructracecode...

OSV-2021-1400 Heap-buffer-overflow in unpack_16bit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39472 Crash type: Heap-buffer-overflow WRITE Crash state: unpack16bit exrdecodingrun Imf31::checkCoreFile...