VULN/vuln-osv
1
0 Fork 0
Code Pull Requests Actions Activity

vuln-osv update 2026-11-12T12:43:53Z

Browse Source
This commit is contained in:
Vulnerability Bot committed 2026-11-12 13:43:58 +01:00
1 parent 127d04135f
commit 8a2c5b2e77
32 files changed
+49 -33
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

data/OSS-Fuzz/OSV-2026-1512.json
+1
View File
@@ -0,0 +1 @@
{"schema_version":"1.9.2","id":"OSV-2026-1512","published":"2026-11-08T00:22:15.690048Z","modified":"2026-11-12T12:30:04.834347956Z","summary":"Heap-buffer-overflow in cram_encode_container","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=582906998\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\ncram_encode_container\ncram_flush_container_mt\ncram_put_bam_seq\n```\n","affected":[{"package":{"name":"htslib","ecosystem":"OSS-Fuzz","purl":"pkg:generic/htslib"},"ranges":[{"type":"GIT","repo":"https://github.com/samtools/htslib.git","events":[{"introduced":"843ca7f53fad9538fe46df2c9d5a503b6b7afbaa"},{"fixed":"711871ab53f8133115dceed997d11f481c024e0a"},{"introduced":"6ff2e25c36e82fd9194702270bca322d321e1397"}]}],"versions":["1.21.1","1.21.2","1.21.3","1.22.1","1.22.2","1.22.3","1.22.4","1.23","1.23.1","1.23.2","1.23.3","1.24","1.24.1","1.25"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"introduced_range":"09c89d8f12b8367a5b869b563f5ae6f0888fb0f3:6a399ca07a0d6bb435676c68689ba361d592ebc9","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/htslib/OSV-2026-1512.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=582906998"}]}
data/OSS-Fuzz/OSV-2026-1528.json
+1
View File
@@ -0,0 +1 @@
{"schema_version":"1.9.2","id":"OSV-2026-1528","published":"2026-11-11T00:08:27.242557Z","modified":"2026-11-12T12:30:02.966858121Z","summary":"Heap-use-after-free in log4cxx::helpers::InetAddress::toString","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=583622276\n\n```\nCrash type: Heap-use-after-free READ 8\nCrash state:\nlog4cxx::helpers::InetAddress::toString\nlog4cxx::net::SocketAppenderSkeleton::SocketAppenderSkeletonPriv::retryConnect\nlog4cxx::helpers::ThreadUtility::priv_data::doPeriodicTasks\n```\n","affected":[{"package":{"name":"apache-logging-log4cxx","ecosystem":"OSS-Fuzz","purl":"pkg:generic/apache-logging-log4cxx"},"ranges":[{"type":"GIT","repo":"https://github.com/apache/logging-log4cxx","events":[{"introduced":"8043e4cf96fff4a24b84dbeaf3bd6aa6a4274d97"},{"fixed":"ffaa9c419602768bf2bec8c85af325792a4d1b43"}]}],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"fixed_range":"4bc69bbdb67f07d67bbd6f71d4f57ecced36d1b9:ffaa9c419602768bf2bec8c85af325792a4d1b43","introduced_range":"facd4f4348f71c9fb44aa98f54ae8db74ff32eed:cf66bb631d291059c3611a1b9af79f75a2b50b35","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/apache-logging-log4cxx/OSV-2026-1528.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=583622276"}]}