4483 matches found
OSV-2025-300 Negative-size-param in recurse_update_offsets
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=413078692 Crash type: Negative-size-param Crash state: recurseupdateoffsets match pcre2match8...
OSV-2025-298 Heap-buffer-overflow in i18n::phonenumbers::UnicodeText::const_iterator::operator--
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=413161357 Crash type: Heap-buffer-overflow READ 1 Crash state: i18n::phonenumbers::UnicodeText::constiterator::operator-- i18n::phonenumbers::UnicodeString::tempSubString...
OSV-2025-291 Use-of-uninitialized-value in Poco::Net::NTLMCredentials::parseChallengeMessage
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=411466303 Crash type: Use-of-uninitialized-value Crash state: Poco::Net::NTLMCredentials::parseChallengeMessage Poco::Net::HTTPNTLMCredentials::createNTLMMessage Poco::Net::HTTPNTLMCredentials::authenticate...
OSV-2025-290 Heap-buffer-overflow in pcpp::TelnetLayer::toString
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=411460531 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::TelnetLayer::toString pcpp::Packet::toStringList pcpp::Packet::toString...
OSV-2025-289 Stack-buffer-overflow in ot::Cli::Utils::OutputLine
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=411460530 Crash type: Stack-buffer-overflow READ Crash state: ot::Cli::Utils::OutputLine ot::Cli::Dns::HandleDnsRecordResponse ot::Dns::Client::FinalizeQuery...
OSV-2025-280 Heap-buffer-overflow in Assimp::SceneCombiner::CopyScene
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=410393968 Crash type: Heap-buffer-overflow READ Crash state: Assimp::SceneCombiner::CopyScene Assimp::Exporter::Export Assimp::Exporter::ExportToBlob...
OSV-2025-275 UNKNOWN READ in void std::__1::vector<unsigned char, std::__1::allocator<unsigned char>>::__cons
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=410115359 Crash type: UNKNOWN READ Crash state: void std::1::vector::cons Poco::Net::NTLMCredentials::parseChallengeMessage Poco::Net::HTTPNTLMCredentials::createNTLMMessage...
OSV-2025-271 Use-of-uninitialized-value in luaS_new
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=409585559 Crash type: Use-of-uninitialized-value Crash state: luaSnew auxsetstr luaLrequiref...
OSV-2025-267 Stack-buffer-overflow in snap_usedef
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408571331 Crash type: Stack-buffer-overflow WRITE Crash state: snapusedef ljsnappurge ljrecordins...
OSV-2025-266 Heap-buffer-overflow in lj_buf_ruleb128
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408513931 Crash type: Heap-buffer-overflow READ 1 Crash state: ljbufruleb128 ljbcread cpparser...
OSV-2025-264 Security exception in org.joni.Parser.parseCharClass
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408254044 Crash type: Security exception Crash state: org.joni.Parser.parseCharClass org.joni.Lexer.fetchTokenInCC org.joni.Parser.parseCharClass...
OSV-2025-262 UNKNOWN WRITE in _lou_handlePassVariableAction
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408523839 Crash type: UNKNOWN WRITE Crash state: louhandlePassVariableAction passDoAction translateString...
OSV-2025-260 Heap-buffer-overflow in bfd_getb16
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408254000 Crash type: Heap-buffer-overflow READ 1 Crash state: bfdgetb16 nds32elfdo9pcrelreloc nds32elf9pcrelreloc...
OSV-2025-258 Global-buffer-overflow in parseExtraField
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408025088 Crash type: Global-buffer-overflow READ 1 Crash state: parseExtraField KZip::openArchive KArchive::open...
OSV-2025-256 Global-buffer-overflow in QByteArray::QByteArray
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408025086 Crash type: Global-buffer-overflow READ 15 Crash state: QByteArray::QByteArray KZip::openArchive KArchive::open...
OSV-2025-255 Security exception in com.github.javaparser.GeneratedJavaParser.Expression
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=407817254 Crash type: Security exception Crash state: com.github.javaparser.GeneratedJavaParser.Expression java.base/java.lang.String.equals com.github.javaparser.utils.LineSeparator.lookup...
OSV-2025-253 Security exception in org.apache.lucene.analysis.ckb.SoraniNormalizer.normalize
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=407477665 Crash type: Security exception Crash state: org.apache.lucene.analysis.ckb.SoraniNormalizer.normalize org.apache.lucene.analysis.ckb.SoraniNormalizationFilter.incrementToken...
OSV-2025-251 Heap-buffer-overflow in icu_78::RegexMatcher::MatchChunkAt
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=407590995 Crash type: Heap-buffer-overflow READ 2 Crash state: icu78::RegexMatcher::MatchChunkAt icu78::RegexMatcher::findUsingChunk uregexmatchfuzzer.cpp...
OSV-2025-249 Heap-use-after-free in lj_strfmt_pushvf
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=407592872 Crash type: Heap-use-after-free READ 2 Crash state: ljstrfmtpushvf luapushfstring luaLloadfilex...
OSV-2025-248 Heap-buffer-overflow in cli_bm_addpatt
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=407448850 Crash type: Heap-buffer-overflow READ 1 Crash state: clibmaddpatt addhash loadregexmatcher...
OSV-2025-240 Security exception in com.powsybl.commons.xml.XmlUtil.lambda$skipSubElements$0
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=406332767 Crash type: Security exception Crash state: com.powsybl.commons.xml.XmlUtil.lambda$skipSubElements$0 com.powsybl.commons.xml.XmlUtil.readSubElements com.powsybl.commons.xml.XmlUtil.skipSubElements...
OSV-2025-239 Security exception in com.github.javaparser.GeneratedJavaParser.Expression
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=406331578 Crash type: Security exception Crash state: com.github.javaparser.GeneratedJavaParser.Expression java.base/java.lang.StringLatin1.regionMatchesCI java.base/java.lang.String.regionMatches...
OSV-2025-230 Heap-buffer-overflow in wasm_loader_prepare_bytecode
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=404921047 Crash type: Heap-buffer-overflow WRITE 8 Crash state: wasmloaderpreparebytecode loadfromsections wasmloaderload...
OSV-2025-228 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=404941300 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.lang.Exception. java.base/java.lang.RuntimeException...
OSV-2025-226 UNKNOWN READ in extract_sess_version
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=404844413 Crash type: UNKNOWN READ Crash state: extractsessversion parsesdpsession parsemixedcontent...
OSV-2025-219 Heap-buffer-overflow in opj_j2k_read_tile_header
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=403673832 Crash type: Heap-buffer-overflow WRITE 8 Crash state: opjj2kreadtileheader opjj2kdecodetiles opjj2kdecode...
OSV-2025-215 Security exception in graphql.parser.GraphqlAntlrToLanguage.createType
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=403877661 Crash type: Security exception Crash state: graphql.parser.GraphqlAntlrToLanguage.createType graphql.parser.GraphqlAntlrToLanguage.createListType graphql.parser.GraphqlAntlrToLanguage.createNonNullType...
OSV-2025-207 Security exception in org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=403330010 Crash type: Security exception Crash state: org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone org.apache.lucene.analysis.tokenattributes.PackedTokenAttributeImpl.clone...
OSV-2025-202 UNKNOWN READ in _blit_xrgb32_lerp_spans
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=402836107 Crash type: UNKNOWN READ Crash state: blitxrgb32lerpspans cairorectangularscanconvertergenerate compositeboxes...
OSV-2025-190 Heap-buffer-overflow in std::__1::__function::__func<cv::PngDecoder::compose_frame
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=401712861 Crash type: Heap-buffer-overflow READ 1 Crash state: std::1::function::funccv::PngDecoder::composeframe cv::ParallelLoopBodyWrapper::operator cv::ParallelJob::execute...
OSV-2025-178 Heap-buffer-overflow in usm_set_user_password
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=399458050 Crash type: Heap-buffer-overflow WRITE 9 Crash state: usmsetuserpassword usmsetpassword runconfighandler...
OSV-2025-177 Segv on unknown address in chunk_free_object
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=399388655 Crash type: Segv on unknown address Crash state: chunkfreeobject pdfifreedict pdfifreefontcff...
OSV-2025-175 UNKNOWN READ in insert_free
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=399390672 Crash type: UNKNOWN READ Crash state: insertfree chunkobjalloc pdfiobjectalloc...
OSV-2025-174 Heap-use-after-free in gc_trace
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=399388654 Crash type: Heap-use-after-free READ 4 Crash state: gctrace gsgcreclaim ireclaim...
OSV-2025-173 UNKNOWN READ in chunk_obj_alloc
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=399390078 Crash type: UNKNOWN READ Crash state: chunkobjalloc pdfireadcffdict pdfireadcffdict...
OSV-2025-169 Stack-buffer-overflow in utf8_in2
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=399228595 Crash type: Stack-buffer-overflow READ 1 Crash state: utf8in2 MatchRule TranslateRules...
OSV-2025-165 Index-out-of-bounds in dwg_decode_eed
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=398439334 Crash type: Index-out-of-bounds Crash state: dwgdecodeeed dwgdecodeentity dwgdecode3DFACEprivate...
OSV-2025-162 Heap-buffer-overflow in snmp_in_options
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=398067543 Crash type: Heap-buffer-overflow READ 8 Crash state: snmpinoptions netsnmpparseargs snmpparseargsfuzzer.c...
OSV-2025-161 Heap-buffer-overflow in se_add_pair
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=398356443 Crash type: Heap-buffer-overflow READ 8 Crash state: seaddpair sereadconf runconfighandler...
OSV-2025-160 UNKNOWN WRITE in ndpi_free_flow_data
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=398049422 Crash type: UNKNOWN WRITE Crash state: ndpifreeflowdata fuzzprocesspacket.c...
OSV-2025-156 Check failed in CheckUnwind
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=398053003 Crash type: Check failed Crash state: CheckUnwind ndpifreeflowdata fuzzprocesspacket.c...
OSV-2025-154 UNKNOWN READ in ndpi_strdup
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=398060128 Crash type: UNKNOWN READ Crash state: ndpistrdup processndpicollectedinfo nodecleanupwalker...
OSV-2025-149 UNKNOWN READ in processClientServerHello
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=398049414 Crash type: UNKNOWN READ Crash state: processClientServerHello processTLSBlock ndpisearchtlsudp...
OSV-2025-148 Heap-buffer-overflow in setup_engineID
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=398053010 Crash type: Heap-buffer-overflow WRITE 4 Crash state: setupengineID initsnmpv3postpremibconfig snmpcallcallbacks...
OSV-2025-147 UNKNOWN WRITE in ndpi_free_flow_data
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=397731142 Crash type: UNKNOWN WRITE Crash state: ndpifreeflowdata ndpiflowfree processndpicollectedinfo...
OSV-2025-145 Heap-buffer-overflow in ___interceptor_strncat
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=397731139 Crash type: Heap-buffer-overflow READ 1 Crash state: interceptorstrncat processndpicollectedinfo nodecleanupwalker...
OSV-2025-133 Stack-buffer-overflow in se_read_conf
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=396958482 Crash type: Stack-buffer-overflow READ 1 Crash state: sereadconf runconfighandler snmpconfigwhen...
OSV-2025-132 Heap-use-after-free in netsnmp_hex_to_binary
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=396777457 Crash type: Heap-use-after-free READ 1 Crash state: netsnmphextobinary snmpv3parsearg netsnmpparseargs...
OSV-2025-131 Heap-buffer-overflow in vips_foreign_save_heif_write_block
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=396460413 Crash type: Heap-buffer-overflow WRITE Crash state: vipsforeignsaveheifwriteblock wbufferwritethread vipsthreadsetwork...