OSS-Fuzz vulnerabilities
4,035 vulnerabilities and 0 malicious packages in OSS-Fuzz. ghostscript has the most reviewed advisories.
Most exploited OSS-Fuzz vulnerabilities
- OSV-2026-1437 Use-of-uninitialized-value in processHandshakeTLSBlock
- OSV-2026-1429 Use-of-uninitialized-value in nlohmann::json_abi_v3_12_0::detail::binary_reader<nlohmann::json_abi_v3_12_0::ba
- OSV-2026-1408 UNKNOWN READ in hobbes::castexp::apply
- OSV-2025-1097 Security exception in org.htmlunit.cyberneko.HTMLTagBalancer.reopenFormattingElements
- OSV-2026-1381 Use-of-uninitialized-value in processHandshakeTLSBlock
- OSV-2026-1356 Use-of-uninitialized-value in jxl::RenderPipeline::InputReady
- OSV-2026-1361 OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=568595812 ``` Crash type: Bad parameters to --sanitizer-annotate-cont
- OSV-2026-1345 Heap-buffer-overflow in load_u64
- OSV-2026-1332 Heap-buffer-overflow in screen_resize_cursor
- OSV-2026-1314 Heap-buffer-overflow in vacm_getAccessEntry
- OSV-2026-1309 Heap-buffer-overflow in janet_bytecode_movopt_basic_block
- OSV-2026-1302 Heap-use-after-free in unregister_sysORTable_by_session
OSS-Fuzz packages with the most advisories
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.