OSV-2025-215 Security exception in graphql.parser.GraphqlAntlrToLanguage.createType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=403877661 Crash type: Security exception Crash state: graphql.parser.GraphqlAntlrToLanguage.createType graphql.parser.GraphqlAntlrToLanguage.createListType graphql.parser.GraphqlAntlrToLanguage.createNonNullType...

OSV-2025-207 Security exception in org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=403330010 Crash type: Security exception Crash state: org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone org.apache.lucene.analysis.tokenattributes.PackedTokenAttributeImpl.clone...

OSV-2025-202 UNKNOWN READ in _blit_xrgb32_lerp_spans

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=402836107 Crash type: UNKNOWN READ Crash state: blitxrgb32lerpspans cairorectangularscanconvertergenerate compositeboxes...

OSV-2025-190 Heap-buffer-overflow in std::__1::__function::__func<cv::PngDecoder::compose_frame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=401712861 Crash type: Heap-buffer-overflow READ 1 Crash state: std::1::function::funccv::PngDecoder::composeframe cv::ParallelLoopBodyWrapper::operator cv::ParallelJob::execute...

OSV-2025-178 Heap-buffer-overflow in usm_set_user_password

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=399458050 Crash type: Heap-buffer-overflow WRITE 9 Crash state: usmsetuserpassword usmsetpassword runconfighandler...

OSV-2025-177 Segv on unknown address in chunk_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=399388655 Crash type: Segv on unknown address Crash state: chunkfreeobject pdfifreedict pdfifreefontcff...

OSV-2025-175 UNKNOWN READ in insert_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=399390672 Crash type: UNKNOWN READ Crash state: insertfree chunkobjalloc pdfiobjectalloc...

OSV-2025-174 Heap-use-after-free in gc_trace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=399388654 Crash type: Heap-use-after-free READ 4 Crash state: gctrace gsgcreclaim ireclaim...

OSV-2025-173 UNKNOWN READ in chunk_obj_alloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=399390078 Crash type: UNKNOWN READ Crash state: chunkobjalloc pdfireadcffdict pdfireadcffdict...

OSV-2025-169 Stack-buffer-overflow in utf8_in2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=399228595 Crash type: Stack-buffer-overflow READ 1 Crash state: utf8in2 MatchRule TranslateRules...

OSV-2025-165 Index-out-of-bounds in dwg_decode_eed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=398439334 Crash type: Index-out-of-bounds Crash state: dwgdecodeeed dwgdecodeentity dwgdecode3DFACEprivate...

OSV-2025-162 Heap-buffer-overflow in snmp_in_options

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=398067543 Crash type: Heap-buffer-overflow READ 8 Crash state: snmpinoptions netsnmpparseargs snmpparseargsfuzzer.c...

OSV-2025-161 Heap-buffer-overflow in se_add_pair

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=398356443 Crash type: Heap-buffer-overflow READ 8 Crash state: seaddpair sereadconf runconfighandler...

OSV-2025-160 UNKNOWN WRITE in ndpi_free_flow_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=398049422 Crash type: UNKNOWN WRITE Crash state: ndpifreeflowdata fuzzprocesspacket.c...

OSV-2025-156 Check failed in CheckUnwind

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=398053003 Crash type: Check failed Crash state: CheckUnwind ndpifreeflowdata fuzzprocesspacket.c...

OSV-2025-154 UNKNOWN READ in ndpi_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=398060128 Crash type: UNKNOWN READ Crash state: ndpistrdup processndpicollectedinfo nodecleanupwalker...

OSV-2025-149 UNKNOWN READ in processClientServerHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=398049414 Crash type: UNKNOWN READ Crash state: processClientServerHello processTLSBlock ndpisearchtlsudp...

OSV-2025-148 Heap-buffer-overflow in setup_engineID

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=398053010 Crash type: Heap-buffer-overflow WRITE 4 Crash state: setupengineID initsnmpv3postpremibconfig snmpcallcallbacks...

OSV-2025-147 UNKNOWN WRITE in ndpi_free_flow_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=397731142 Crash type: UNKNOWN WRITE Crash state: ndpifreeflowdata ndpiflowfree processndpicollectedinfo...

OSV-2025-145 Heap-buffer-overflow in ___interceptor_strncat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=397731139 Crash type: Heap-buffer-overflow READ 1 Crash state: interceptorstrncat processndpicollectedinfo nodecleanupwalker...

OSV-2025-133 Stack-buffer-overflow in se_read_conf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=396958482 Crash type: Stack-buffer-overflow READ 1 Crash state: sereadconf runconfighandler snmpconfigwhen...

OSV-2025-132 Heap-use-after-free in netsnmp_hex_to_binary

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=396777457 Crash type: Heap-use-after-free READ 1 Crash state: netsnmphextobinary snmpv3parsearg netsnmpparseargs...

OSV-2025-131 Heap-buffer-overflow in vips_foreign_save_heif_write_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=396460413 Crash type: Heap-buffer-overflow WRITE Crash state: vipsforeignsaveheifwriteblock wbufferwritethread vipsthreadsetwork...

OSV-2025-127 Object-size in unpack_dsd_samples

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=396435326 Crash type: Object-size Crash state: unpackdsdsamples unpacksamplesworkerthread...

OSV-2025-124 Use-of-uninitialized-value in get_word

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=396172336 Crash type: Use-of-uninitialized-value Crash state: getword unpacksamples unpacksamplesworkerthread...

OSV-2025-119 Heap-buffer-overflow in snmp_config_when

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=396102403 Crash type: Heap-buffer-overflow READ 1 Crash state: snmpconfigwhen netsnmpconfigprocessmemorylist readpremibconfigs...

OSV-2025-114 Index-out-of-bounds in ada_fuzz_header.h

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=396172315 Crash type: Index-out-of-bounds Crash state: adafuzzheader.h...

OSV-2025-113 Heap-buffer-overflow in snmp_log_options

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=395921931 Crash type: Heap-buffer-overflow READ 8 Crash state: snmplogoptions netsnmpparseargs snmpparseargsfuzzer.c...

OSV-2025-111 Stack-buffer-overflow in absl::debugging_internal::ParseLocalNameSuffix

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=395959258 Crash type: Stack-buffer-overflow WRITE 1 Crash state: absl::debugginginternal::ParseLocalNameSuffix absl::debugginginternal::ParseName absl::debugginginternal::ParseClassEnumType...

OSV-2022-1292 Heap-buffer-overflow in LibRaw::phase_one_correct

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=394920636 Crash type: Heap-buffer-overflow READ 2 Crash state: LibRaw::phaseonecorrect LibRaw::raw2imageex LibRaw::dcrawprocess...

OSV-2025-108 Use-of-uninitialized-value in decimate_dsd_run

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=395207096 Crash type: Use-of-uninitialized-value Crash state: decimatedsdrun WavpackUnpackSamples fuzzer.cc...

OSV-2025-107 Use-of-uninitialized-value in get_words_lossless

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=394980079 Crash type: Use-of-uninitialized-value Crash state: getwordslossless unpacksamples unpacksamplesworkerthread...

OSV-2025-105 Heap-use-after-free in unpack_dsd_samples

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=395207094 Crash type: Heap-use-after-free READ 1 Crash state: unpackdsdsamples unpacksamplesworkerthread unpacksamplesworkerthread...

OSV-2025-93 Heap-buffer-overflow in lj_strfmt_pushvf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=394126186 Crash type: Heap-buffer-overflow WRITE 8 Crash state: ljstrfmtpushvf errmsgv ljerrmsg...

OSV-2025-92 Null-dereference READ in session_startup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=393523566 Crash type: Null-dereference READ Crash state: sessionstartup libssh2sessionhandshake ssh2clientfuzzer.cc...

OSV-2024-1428 Use-of-uninitialized-value in next_uint16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=393742176 Crash type: Use-of-uninitialized-value Crash state: nextuint16 ntskeprocessreceive FuzzServer.c...

OSV-2025-90 Null-dereference READ in ubsan_GetStackTrace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=393411531 Crash type: Null-dereference READ Crash state: ubsanGetStackTrace...

OSV-2025-88 Segv on unknown address in ___interceptor_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=393435814 Crash type: Segv on unknown address Crash state: interceptorfree ndpifreeflowdata ndpifreeflow...

OSV-2025-85 Segv on unknown address in ndpi_free_flow_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=393414230 Crash type: Segv on unknown address Crash state: ndpifreeflowdata fuzzprocesspacket.c...

OSV-2025-84 Segv on unknown address in Flow::processExtraDissectedInformation

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=393435813 Crash type: Segv on unknown address Crash state: Flow::processExtraDissectedInformation Flow::setExtraDissectionCompleted Flow::endProtocolDissection...

OSV-2025-81 Segv on unknown address in ndpi_serialize_string_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=393404264 Crash type: Segv on unknown address Crash state: ndpiserializestringstring ndpidpi2json fuzzprocesspacket.c...

OSV-2025-80 Segv on unknown address in ndpi_snprintf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=393420192 Crash type: Segv on unknown address Crash state: ndpisnprintf processndpicollectedinfo ndpiworkflowprocesspacket...

OSV-2025-74 Stack-buffer-overflow in xmlValidateElementContent

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=392687022 Crash type: Stack-buffer-overflow WRITE Crash state: xmlValidateElementContent xmlValidateOneElement xmlValidateElement...

OSV-2024-1427 Heap-buffer-overflow in extract_mediaip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=391975654 Crash type: Heap-buffer-overflow READ 1 Crash state: extractmediaip parsesdpsession parsemixedcontent...

OSV-2025-68 UNKNOWN READ in std::__1::__function::__func<cv::PngDecoder::compose_frame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=392318892 Crash type: UNKNOWN READ Crash state: std::1::function::funccv::PngDecoder::composeframe cv::ParallelLoopBodyWrapper::operator cv::ThreadPool::run...

OSV-2025-63 Stack-buffer-underflow in gs_type1_interpret

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=391934080 Crash type: Stack-buffer-underflow READ 4 Crash state: gstype1interpret copiedtype1glyphoutline gsdefaultglyphinfo...

OSV-2025-62 UNKNOWN READ in RDKit::Dict::reset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=391962480 Crash type: UNKNOWN READ Crash state: RDKit::Dict::reset RDKit::Atom::Atom RDKit::QueryAtom::QueryAtom...

OSV-2025-61 Heap-buffer-overflow in oatpp::json::Utils::escapeString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=391916478 Crash type: Heap-buffer-overflow WRITE 1 Crash state: oatpp::json::Utils::escapeString oatpp::json::Serializer::serializeString oatpp::json::Serializer::serializePairs...

OSV-2024-1424 Heap-buffer-overflow in extract_candidate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=391689728 Crash type: Heap-buffer-overflow READ 8 Crash state: extractcandidate parsesdpsession parsemixedcontent...

OSV-2024-1423 Security exception in java.base/java.util.Arrays.copyOfRange

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=391709145 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOfRange org.apache.poi.util.IOUtils.safelyClone org.apache.poi.ddf.EscherMetafileBlip.fillFields...