OSV-2026-1408

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/hobbes/OSV-2026-1408.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-1408
Published
2026-10-17T00:03:42Z
Modified
2026-10-19T15:18:25Z
Summary
UNKNOWN READ in hobbes::castexp::apply
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=573787443

Crash type: UNKNOWN READ
Crash state:
hobbes::castexp::apply
hobbes::compileExpF::with
llvm::Value* hobbes::switchOfF<llvm::Value*, hobbes::switchExpr<llvm::Value*> co
References

Affected packages

OSS-Fuzz / hobbes

Package

Name
hobbes
Purl
pkg:generic/hobbes

Affected ranges

Type
GIT
Repo
https://github.com/morganstanley/hobbes.git
Events
Introduced
b04da9e612f6d0bdd9d691c0396ae481dbfc6da9
Fixed
bff061afc31cfc460f38dd9c5c4b754b72b88de5
Fixed
9075bea5a20e069eece29c82d7df1e80ac1429f6

Ecosystem specific 

{
    "severity":  "MEDIUM"
}

Database specific

fixed_range 
"c5d24a6d8c5b35e060dee8396cb6a9f09d11313e:9075bea5a20e069eece29c82d7df1e80ac1429f6"
introduced_range 
"4b2dbb6cedaee900267471349b3b9ac4098d3d20:f06eb2bd471181093c3f68a09b29bbdb0120e99f"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/hobbes/OSV-2026-1408.yaml"