4483 matches found
OSV-2026-1361 Bad parameters to --sanitizer-annotate-contiguous-container in jsoncons::cbor::basic_cbor_parser<jsoncons::stream_source<unsigned char, std::__
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=568595812 Crash type: Bad parameters to --sanitizer-annotate-contiguous-container Crash state: jsoncons::cbor::basiccborparserjsoncons::streamsourceunsigned char, std:: void...
OSV-2026-1332 Heap-buffer-overflow in screen_resize_cursor
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=566549189 Crash type: Heap-buffer-overflow READ 1 Crash state: screenresizecursor windowpaneresize layoutfixpanes...
OSV-2026-1314 Heap-buffer-overflow in vacm_getAccessEntry
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=564017938 Crash type: Heap-buffer-overflow READ 3 Crash state: vacmgetAccessEntry snmpsecmodelsfuzzer.c...
OSV-2026-1309 Heap-buffer-overflow in janet_bytecode_movopt_basic_block
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=563659412 Crash type: Heap-buffer-overflow READ 4 Crash state: janetbytecodemovoptbasicblock janetbytecodemovoptfull janetbytecodeoptimize...
OSV-2026-1303 Heap-buffer-overflow in sas7bdat_parse_all_pages_pass2
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=562985572 Crash type: Heap-buffer-overflow READ 1 Crash state: sas7bdatparseallpagespass2 readstatparsesas7bdat fuzzformatsas7bdat.c...
OSV-2026-1302 Heap-use-after-free in unregister_sysORTable_by_session
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=563134244 Crash type: Heap-use-after-free READ 8 Crash state: unregistersysORTablebysession closeagentxsession handlemasteragentxpacket...
OSV-2026-1297 UNKNOWN READ in janet_to_string_b
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=562551214 Crash type: UNKNOWN READ Crash state: janettostringb janetformatbv janetpanicf...
OSV-2026-1294 UNKNOWN WRITE in av1_cdef_mse_calc_frame_mt
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=562150738 Crash type: UNKNOWN WRITE Crash state: av1cdefmsecalcframemt av1cdefsearch encodewithrecodeloopandfilter...
OSV-2026-1293 UNKNOWN READ in md_is_link_title
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=561822522 Crash type: UNKNOWN READ Crash state: mdislinktitle mdanalyzeinlines mdprocessnormalblockcontents...
OSV-2026-1281 Heap-buffer-overflow in md_decode_utf8__
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=560854538 Crash type: Heap-buffer-overflow READ 1 Crash state: mddecodeutf8 mdlabelhash mdlookuplabelhashtable...
OSV-2026-1274 Heap-buffer-overflow in md_analyze_inlines
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=560657993 Crash type: Heap-buffer-overflow READ 4 Crash state: mdanalyzeinlines mdprocessnormalblockcontents mdprocessallblocks...
OSV-2026-1267 Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=560242604 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.RegexInjection.hookInternal com.codeintelligence.jazzer.sanitizers.RegexInjection.patternHook...
OSV-2026-1239 Security exception in org.apache.lucene.util.ArrayUtil.copyOfSubArray
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=557292360 Crash type: Security exception Crash state: org.apache.lucene.util.ArrayUtil.copyOfSubArray org.apache.lucene.util.BytesRef.deepCopyOf org.apache.lucene.index.Term...
OSV-2026-1235 UNKNOWN READ in renumber_by_map
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=557283672 Crash type: UNKNOWN READ Crash state: renumberbymap renumberbymap disablenonamegroupcapture...
OSV-2026-1220 Use-of-uninitialized-value in str_escape
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=554268877 Crash type: Use-of-uninitialized-value Crash state: strescape mrbvmexec yieldwithattr...
OSV-2026-1210 Heap-buffer-overflow in decode_get_histogram_format_resp
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=553267079 Crash type: Heap-buffer-overflow READ 1 Crash state: decodegethistogramformatresp decodegethistogramformatrespfuzzer.cc...
OSV-2026-1205 Heap-buffer-overflow in decode_get_fpga_diagnostics_settings_resp
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=553148335 Crash type: Heap-buffer-overflow READ 13 Crash state: decodegetfpgadiagnosticssettingsresp decodegetfpgadiagnosticssettingsrespfuzzer.cc...
OSV-2026-1198 Stack-buffer-overflow in msLayoutTextSymbol
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=551099259 Crash type: Stack-buffer-overflow READ 4 Crash state: msLayoutTextSymbol msWriteErrorImage msWMSException...
OSV-2026-1196 Heap-buffer-overflow in yylex
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=551147457 Crash type: Heap-buffer-overflow WRITE 4 Crash state: yylex yyparse hobbes::runParserOnBuffer...
OSV-2026-1189 Global-buffer-overflow in oidc_cfg_redirect_urls_allowed_get
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=550474749 Crash type: Global-buffer-overflow READ 8 Crash state: oidccfgredirecturlsallowedget oidcvalidateredirecturl fuzzurl.c...
OSV-2026-1161 Heap-buffer-overflow in ppp_tx_frame
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=546440470 Crash type: Heap-buffer-overflow WRITE Crash state: ppptxframe ppprx mgtcpiprx...
OSV-2026-1157 Memcpy-param-overlap in zxc_decompress_chunk_wrapper_default
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=546426939 Crash type: Memcpy-param-overlap Crash state: zxcdecompresschunkwrapperdefault zxcdecompressframe fuzzdecompress.c...
OSV-2026-1127 Heap-buffer-overflow in read_data
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=543583447 Crash type: Heap-buffer-overflow READ 1 Crash state: readdata zipsourcecall zipsourceread...
OSV-2026-1125 Segv on unknown address in match_many_CHARACTER_REV
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=543352138 Crash type: Segv on unknown address Crash state: matchmanyCHARACTERREV countone basicmatch...
OSV-2026-1110 Check failed in CheckUnwind
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=541969271 Crash type: Check failed Crash state: CheckUnwind mrbbasicallocfunc pmnodehashinsert...
OSV-2026-1109 UNKNOWN READ in sens_to_cil
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=541965633 Crash type: UNKNOWN READ Crash state: senstocil additivescopestocilmap hashtabmap...
OSV-2026-1101 Security exception in com.google.re2j.Machine$Queue.<init>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=540908715 Crash type: Security exception Crash state: com.google.re2j.Machine$Queue. com.google.re2j.Machine. com.google.re2j.RE2.doExecute...
OSV-2026-1095 Heap-buffer-overflow in grk::t1::CodeblockDecompressImpl::parsePacketData
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=540111888 Crash type: Heap-buffer-overflow READ 8 Crash state: grk::t1::CodeblockDecompressImpl::parsePacketData grk::PacketParser::readData grk::PacketParser::parsePacketData...
OSV-2026-1092 Security exception in com.github.javaparser.ast.expr.Name.accept
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=539142495 Crash type: Security exception Crash state: com.github.javaparser.ast.expr.Name.accept com.github.javaparser.ast.visitor.VoidVisitorAdapter.lambda$visit$133 java.base/java.util.Optional.ifPresent...
OSV-2026-1089 Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=537432125 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.RegexInjection.hookInternal com.codeintelligence.jazzer.sanitizers.RegexInjection.patternHook...
OSV-2026-1084 UNKNOWN READ in bytes1_char_at
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=536956124 Crash type: UNKNOWN READ Crash state: bytes1charat basicmatch dobestfuzzymatch...
OSV-2026-1083 Heap-buffer-overflow in parseGoosePayload
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=539005080 Crash type: Heap-buffer-overflow READ 1 Crash state: parseGoosePayload parseGooseMessage fuzzgoosesubscriber.c...
OSV-2026-1072 UNKNOWN READ in _regex.cpython-311-x86_64-linux-gnu.so
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=539159630 Crash type: UNKNOWN READ Crash state: regex.cpython-311-x8664-linux-gnu.so regex.cpython-311-x8664-linux-gnu.so regex.cpython-311-x8664-linux-gnu.so...
OSV-2026-1071 Security exception in com.github.javaparser.ast.expr.FieldAccessExpr.accept
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=537183300 Crash type: Security exception Crash state: com.github.javaparser.ast.expr.FieldAccessExpr.accept com.github.javaparser.ast.visitor.VoidVisitorAdapter.visit java.base/java.nio.ByteBuffer.position...
OSV-2026-1070 UNKNOWN READ in bytes1_char_at
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=538179114 Crash type: UNKNOWN READ Crash state: bytes1charat unicodewordleft unicodeatboundary...
OSV-2026-1068 UNKNOWN READ in jpeg_abort
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=537793912 Crash type: UNKNOWN READ Crash state: jpegabort tj3Compress8 compress.cc...
OSV-2026-1064 Heap-buffer-overflow in _wcsnlen
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=533963816 Crash type: Heap-buffer-overflow READ 2 Crash state: wcsnlen railreadunicodestring railreadhighcontrast...
OSV-2026-1060 Security exception in org.apache.lucene.util.ArrayUtil.copyOfSubArray
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=533737064 Crash type: Security exception Crash state: org.apache.lucene.util.ArrayUtil.copyOfSubArray org.apache.lucene.util.BytesRef.deepCopyOf org.apache.lucene.index.Term...
OSV-2026-1054 Heap-buffer-overflow in ihevcd_cabac_decode_bins_tunary
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=533053032 Crash type: Heap-buffer-overflow READ 4 Crash state: ihevcdcabacdecodebinstunary ihevcdparsetransformtree ihevcdparsetransformtree...
OSV-2026-1052 UNKNOWN READ in eprosima::fastdds::dds::QosPoliciesSerializer<eprosima::fastdds::dds::PartitionQ
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=532839120 Crash type: UNKNOWN READ Crash state: eprosima::fastdds::dds::QosPoliciesSerializereprosima::fastdds::dds::PartitionQ eprosima::fastdds::rtps::ReaderProxyData::readfromcdrmessage fuzzproxycdr.cxx...
OSV-2026-1049 Heap-buffer-overflow in Assimp::X3DExporter::CheckAndExport_Light
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=532625491 Crash type: Heap-buffer-overflow READ 8 Crash state: Assimp::X3DExporter::CheckAndExportLight Assimp::X3DExporter::ExportNode Assimp::X3DExporter::X3DExporter...
OSV-2026-1043 Index-out-of-bounds in impd_drc_gen_instructions_derived_data
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=531676895 Crash type: Index-out-of-bounds Crash state: impddrcgeninstructionsderiveddata impdparsedrcconfig impddrcinit...
OSV-2026-1041 Heap-buffer-overflow in Assimp::ObjExporter::indexMap<Assimp::ObjExporter::vertexData, Assimp::ObjExport
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=531365119 Crash type: Heap-buffer-overflow WRITE 12 Crash state: Assimp::ObjExporter::indexMapAssimp::ObjExporter::vertexData, Assimp::ObjExport Assimp::ObjExporter::WriteGeometryFile Assimp::ObjExporter::ObjExporter...
OSV-2026-1039 Index-out-of-bounds in iusace_estimate_scfs_chan
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=531479957 Crash type: Index-out-of-bounds Crash state: iusaceestimatescfschan iusacequantizespec iusacefdencode...
OSV-2026-1035 Heap-buffer-overflow in Assimp::D3MF::D3MFExporter::writeFaces
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=531123003 Crash type: Heap-buffer-overflow READ 4 Crash state: Assimp::D3MF::D3MFExporter::writeFaces Assimp::D3MF::D3MFExporter::writeMesh Assimp::D3MF::D3MFExporter::writeObjects...
OSV-2026-1033 Heap-buffer-overflow in ppp_tx_frame
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=531087610 Crash type: Heap-buffer-overflow READ Crash state: ppptxframe ppprx mgtcpiprx...
OSV-2026-1032 Use-of-uninitialized-value in Assimp::PbrtExporter::WriteTextures
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=531040219 Crash type: Use-of-uninitialized-value Crash state: Assimp::PbrtExporter::WriteTextures Assimp::PbrtExporter::WriteWorldDefinition Assimp::PbrtExporter::PbrtExporter...
OSV-2026-1030 Use-of-uninitialized-value in Assimp::glTFExporter::GetTexSampler
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=531097475 Crash type: Use-of-uninitialized-value Crash state: Assimp::glTFExporter::GetTexSampler Assimp::glTFExporter::GetMatColorOrTex Assimp::glTFExporter::ExportMaterials...
OSV-2026-1027 Heap-buffer-overflow in mp_load_float
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=530970666 Crash type: Heap-buffer-overflow WRITE 4 Crash state: mploadfloat mpdecodefloat luampdecodewithctx...