Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
OSV-2026-226
  • OSS-Fuzz/gpsd
  • gitlab.com/gpsd/gpsd
UNKNOWN WRITE in decode_xa2_00 3 days ago
  • Fix available
OSV-2026-216
  • OSS-Fuzz/mongoose
  • github.com/cesanta/mongoose
Heap-buffer-overflow in mg_mqtt_next_prop 4 days ago
  • Fix available
OSV-2026-212
  • OSS-Fuzz/gpsd
  • gitlab.com/gpsd/gpsd
UNKNOWN READ in gpsd_poll 5 days ago
  • Fix available
OSV-2026-209
  • OSS-Fuzz/gpsd
  • gitlab.com/gpsd/gpsd
Use-of-uninitialized-value in ntrip_parse_url 6 days ago
  • Fix available
OSV-2026-205
  • OSS-Fuzz/gpsd
  • gitlab.com/gpsd/gpsd
UNKNOWN READ in gpsd_poll 07 Feb
  • Fix available
OSV-2026-200
  • OSS-Fuzz/kmime
  • invent.kde.org/pim/kmime.git
Global-buffer-overflow in nameMatch 06 Feb
  • Fix available
OSV-2026-189
  • OSS-Fuzz/gpsd
  • gitlab.com/gpsd/gpsd
Global-buffer-overflow in gpsd_poll 04 Feb
  • Fix available
OSV-2026-182
  • OSS-Fuzz/gpsd
  • gitlab.com/gpsd/gpsd
Use-of-uninitialized-value in json_internal_read_object 03 Feb
  • Fix available
OSV-2026-167
  • OSS-Fuzz/gpsd
  • gitlab.com/gpsd/gpsd
Use-of-uninitialized-value in aivdm_analyze 31 Jan
  • Fix available
OSV-2026-166
  • OSS-Fuzz/gpsd
  • gitlab.com/gpsd/gpsd
Use-of-uninitialized-value in ntrip_parse_url 31 Jan
  • Fix available
OSV-2026-156
  • OSS-Fuzz/gpsd
  • gitlab.com/gpsd/gpsd
Segv on unknown address in aivdm_analyze 28 Jan
  • Fix available
OSV-2026-144
  • OSS-Fuzz/mpv
  • github.com/mpv-player/mpv
Use-of-uninitialized-value in initFilter 26 Jan
  • Fix available
OSV-2026-141
  • OSS-Fuzz/mpv
  • github.com/mpv-player/mpv
Segv on unknown address in yuv2rgb4_X_c 26 Jan
  • Fix available
OSV-2026-136
  • OSS-Fuzz/grok
  • github.com/GrokImageCompression/grok.git
Memcpy-param-overlap in grk::memStreamRead 25 Jan
  • Fix available
OSV-2026-122
  • OSS-Fuzz/gpsd
  • gitlab.com/gpsd/gpsd
Use-of-uninitialized-value in rtcm2_unpack 24 Jan
  • Fix available
OSV-2026-121
  • OSS-Fuzz/harfbuzz
  • github.com/harfbuzz/harfbuzz.git
Use-of-uninitialized-value in trySubset 24 Jan
  • Fix available