OSV-2026-1189

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/mod-auth-openidc/OSV-2026-1189.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-1189
Published
2026-08-23T00:08:00.396208Z
Modified
2026-08-27T14:19:08.238495Z
Summary
Global-buffer-overflow in oidc_cfg_redirect_urls_allowed_get
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=550474749

Crash type: Global-buffer-overflow READ 8
Crash state:
oidc_cfg_redirect_urls_allowed_get
oidc_validate_redirect_url
fuzz_url.c
References

Affected packages

OSS-Fuzz / mod-auth-openidc

Package

Name
mod-auth-openidc
Purl
pkg:generic/mod-auth-openidc

Affected ranges

Type
GIT
Repo
https://github.com/OpenIDC/mod_auth_openidc
Events
Introduced
be82ba1dcb31dcfc2d62aab475641e2dde772549
Fixed
1deff3d91057dd3f3cb1db7d0d1773c2764e795c

Ecosystem specific 

{
    "severity": null
}

Database specific

source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/mod-auth-openidc/OSV-2026-1189.yaml"
introduced_range 
"28b3660ee2a03ac662d83134fa4b989f2152f40c:ba68e8971c2dd3a3c507a0aaf49034f250bcf33a"