OSV-2026-518

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/nestegg/OSV-2026-518.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-518
Published
2026-04-03T00:21:06.950773Z
Modified
2026-04-03T00:21:06.951035Z
Summary
Use-of-uninitialized-value in ne_read_block
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=498498500

Crash type: Use-of-uninitialized-value
Crash state:
ne_read_block
nestegg_read_packet
fuzz.cc
References

Affected packages

OSS-Fuzz / nestegg

Package

Name
nestegg
Purl
pkg:generic/nestegg

Affected ranges

Type
GIT
Repo
https://github.com/kinetiknz/nestegg.git
Events
Introduced
75178713c8ed16c339a830b1a57648b0a1c2d811
Fixed
eee95c63fd06ace9429abe8a637eea6d53a37c2c

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/nestegg/OSV-2026-518.yaml"
introduced_range 
"411cfc259a8ba613601db35900215400979f4956:83efde4fc25fc72823ea84ad66c4508572f26219"