OSV-2026-203

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/shaderc/OSV-2026-203.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-203
Published
2026-02-06T00:20:30.779951Z
Modified
2026-02-06T00:20:30.780234Z
Summary
Segv on unknown address in glslang::TIntermediate::addSymbol
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=481635421

Crash type: Segv on unknown address
Crash state:
glslang::TIntermediate::addSymbol
glslang::HlslParseContext::handleFunctionCall
glslang::HlslParseContext::transformEntryPoint
References

Affected packages

OSS-Fuzz / shaderc

Package

Name
shaderc
Purl
pkg:generic/shaderc

Affected ranges

Type
GIT
Repo
https://github.com/google/shaderc
Events
Introduced
1dd61a4e407eeba704eb3d8796056be0415ebec8
Fixed
5ccedd3fdc9146f7dcb5b1acb200d7203b54d5ca

Affected versions

v2025.*
v2025.4
v2025.5
v2026.*
v2026.1

Ecosystem specific 

{
    "severity": null
}

Database specific

introduced_range 
"402a16ea5a99a3acbda542d48e902c7e3aa50033:3a44d5d7850da3601aa43d523a3d228f045fb43d"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/shaderc/OSV-2026-203.yaml"