Most recent entries from osv_ossfuzz

OSV-2026-1239 — Security exception in org.apache.lucene.util.ArrayUtil.copyOfSubArray

Sun, 06 Sep 2026 00:22:11 +0000

Affected: OSS-Fuzz: lucene

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=557292360

``` Crash type: Security exception Crash state: org.apache.lucene.util.ArrayUtil.copyOfSubArray org.apache.lucene.util.BytesRef.deepCopyOf org.apache.lucene.index.Term.<init> ```

OSV-2026-1235 — UNKNOWN READ in renumber_by_map

Sun, 06 Sep 2026 00:05:19 +0000

Affected: OSS-Fuzz: fluent-bit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=557283672

``` Crash type: UNKNOWN READ Crash state: renumber_by_map renumber_by_map disable_noname_group_capture ```

OSV-2026-1220 — Use-of-uninitialized-value in str_escape

Mon, 31 Aug 2026 00:03:15 +0000

Affected: OSS-Fuzz: mruby

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=554268877

``` Crash type: Use-of-uninitialized-value Crash state: str_escape mrb_vm_exec yield_with_attr ```

OSV-2026-1198 — Stack-buffer-overflow in msLayoutTextSymbol

Tue, 25 Aug 2026 00:18:59 +0000

Affected: OSS-Fuzz: mapserver

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=551099259

``` Crash type: Stack-buffer-overflow READ 4 Crash state: msLayoutTextSymbol msWriteErrorImage msWMSException ```

OSV-2026-1196 — Heap-buffer-overflow in yylex

Tue, 25 Aug 2026 00:09:47 +0000

Affected: OSS-Fuzz: hobbes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=551147457

``` Crash type: Heap-buffer-overflow WRITE 4 Crash state: yylex yyparse hobbes::runParserOnBuffer ```

OSV-2026-1189 — Global-buffer-overflow in oidc_cfg_redirect_urls_allowed_get

Sun, 23 Aug 2026 00:08:00 +0000

Affected: OSS-Fuzz: mod-auth-openidc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=550474749

``` Crash type: Global-buffer-overflow READ 8 Crash state: oidc_cfg_redirect_urls_allowed_get oidc_validate_redirect_url fuzz_url.c ```

OSV-2026-1161 — Heap-buffer-overflow in ppp_tx_frame

Sun, 16 Aug 2026 00:19:38 +0000

Affected: OSS-Fuzz: mongoose

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=546440470

``` Crash type: Heap-buffer-overflow WRITE {*} Crash state: ppp_tx_frame ppp_rx mg_tcpip_rx ```

OSV-2026-1157 — Memcpy-param-overlap in zxc_decompress_chunk_wrapper_default

Sun, 16 Aug 2026 00:02:24 +0000

Affected: OSS-Fuzz: zxc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=546426939

``` Crash type: Memcpy-param-overlap Crash state: zxc_decompress_chunk_wrapper_default zxc_decompress_frame fuzz_decompress.c ```

OSV-2026-1127 — Heap-buffer-overflow in read_data

Sat, 08 Aug 2026 00:16:54 +0000

Affected: OSS-Fuzz: libzip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=543583447

``` Crash type: Heap-buffer-overflow READ 1 Crash state: read_data _zip_source_call zip_source_read ```

OSV-2026-1110 — Check failed in CheckUnwind

Tue, 04 Aug 2026 00:03:39 +0000

Affected: OSS-Fuzz: mruby

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=541969271

``` Crash type: Check failed Crash state: CheckUnwind mrb_basic_alloc_func pm_node_hash_insert ```