OSV-2026-1018

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/nsmd/OSV-2026-1018.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-1018
Published
2026-07-05T00:01:49Z
Modified
2026-07-05T00:01:49Z
Summary
Heap-buffer-overflow in decode_reason_code_and_cc
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=530730549

Crash type: Heap-buffer-overflow READ 1
Crash state:
decode_reason_code_and_cc
decode_nsm_provide_token_resp
decode_nsm_provide_token_resp_fuzzer.cc
References

Affected packages

OSS-Fuzz / nsmd

Package

Name
nsmd
Purl
pkg:generic/nsmd

Affected ranges

Type
GIT
Repo
https://gbmc.googlesource.com/nsmd
Events
Introduced
62de34e8b8bda9eab592ad737b7fbb3924a55e89

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/nsmd/OSV-2026-1018.yaml"