OSS-Fuzz
20 credited records · 2 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
19Monitor | CVE-2026-125247No exploit | FFmpeg through 9.0.2 Integer Overflow via dng_decode_tiles() in libavcodec/tiff.cffmpeg · ffmpeg · CWE-190 | Medium4.8 | — | — | Today |
26Monitor | CVE-2026-0959No exploit | Out-of-bounds Write in Wiresharkwireshark · wireshark · CWE-787 | Medium6.5 | — | 0.2% | Jan 14, 2026 |
37Monitor | CVE-2025-10729No exploit | Use-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVGqt · qt · CWE-416 | Critical9.4 | — | 0.2% | Oct 3, 2025 |
37Monitor | CVE-2025-10728No exploit | Uncontrolled recursion in Qt SVG moduleqt · qt · CWE-674 | Critical9.4 | — | 0.2% | Oct 3, 2025 |
9Monitor | CVE-2025-5992No exploit | Passing values outside of expected range to QColorTransferGenericFunction can cause a denial of serviceqt · qt · CWE-20 | Low2.3 | — | 0.3% | Jul 11, 2025 |
20Monitor | CVE-2025-5683No exploit | When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash.qt · qt · CWE-770 | Medium5.1 | — | 0.2% | Jun 5, 2025 |
19Monitor | CVE-2025-3512No exploit | Buffer overflow in QTextMarkdownImporterqt · qt · CWE-122 | Medium4.8 | — | 0.2% | Apr 11, 2025 |
30Monitor | CVE-2025-1492No exploit | Uncontrolled Recursion in Wiresharkwireshark · wireshark · CWE-674 | High7.5 | — | 0.3% | Feb 19, 2025 |
21Monitor | CVE-2024-4603No exploit | Excessive time spent checking DSA keys and parametersnetapp · c400 firmware · CWE-606 | Medium5.3 | — | 1.1% | May 16, 2024 |
24Monitor | CVE-2023-6237No exploit | Excessive time spent checking invalid RSA public keysopenssl · openssl · CWE-606 | Medium5.9 | — | 2.3% | Apr 25, 2024 |
30Monitor | CVE-2023-3894No exploit | DOS in jackson-dataformats-textfasterxml · jackson-dataformats-text · CWE-20 | High7.5 | — | 0.9% | Aug 8, 2023 |
30Monitor | CVE-2023-2798No exploit | Denial of service in HtmlUnithtmlunit · htmlunit · CWE-400 | High7.5 | — | 0.9% | May 25, 2023 |
22Monitor | CVE-2022-41727No exploit | Denial of service via crafted TIFF image in golang.org/x/image/tiffgolang · image · CWE-770 | Medium5.5 | — | 0.3% | Feb 28, 2023 |
31Monitor | CVE-2022-41715No exploit | Memory exhaustion when compiling regular expressions in regexp/syntaxgolang · go | High7.5 | — | 1.7% | Oct 14, 2022 |
31Monitor | CVE-2022-32149No exploit | Denial of service via crafted Accept-Language header in golang.org/x/text/languagegolang · text · CWE-772 | High7.5 | — | 1.8% | Oct 14, 2022 |
31Monitor | CVE-2022-2879No exploit | Unbounded memory consumption when reading headers in archive/targolang · go · CWE-770 | High7.5 | — | 2.0% | Oct 14, 2022 |
34Monitor | CVE-2021-36090No exploit | Apache Commons Compress 1.0 to 1.20 denial of service vulnerabilityapache · commons compress · CWE-130 | High7.5 | — | 12.9% | Jul 13, 2021 |
33Monitor | CVE-2021-35517No exploit | Apache Commons Compress 1.1 to 1.20 denial of service vulnerabilityapache · commons compress · CWE-130 | High7.5 | — | 10.6% | Jul 13, 2021 |
33Monitor | CVE-2021-35515No exploit | Apache Commons Compress 1.6 to 1.20 denial of service vulnerabilityapache · commons compress · CWE-834 | High7.5 | — | 11.5% | Jul 13, 2021 |
32Monitor | CVE-2018-0739No exploit | Constructed ASN.1 types with a recursive definition could exceed the stackopenssl · openssl · CWE-674 | Medium6.5 | — | 18.5% | Mar 27, 2018 |
- CVE-2026-12524719Monitor
FFmpeg through 9.0.2 Integer Overflow via dng_decode_tiles() in libavcodec/tiff.c
MediumCVSS 4.8No exploitffmpeg · ffmpegToday
- CVE-2026-095926Monitor
Out-of-bounds Write in Wireshark
MediumCVSS 6.5No exploitEPSS 0%wireshark · wiresharkJan 14, 2026
- CVE-2025-1072937Monitor
Use-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG
CriticalCVSS 9.4No exploitEPSS 0%qt · qtOct 3, 2025
- CVE-2025-1072837Monitor
Uncontrolled recursion in Qt SVG module
CriticalCVSS 9.4No exploitEPSS 0%qt · qtOct 3, 2025
- CVE-2025-59929Monitor
Passing values outside of expected range to QColorTransferGenericFunction can cause a denial of service
LowCVSS 2.3No exploitEPSS 0%qt · qtJul 11, 2025
- CVE-2025-568320Monitor
When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash.
MediumCVSS 5.1No exploitEPSS 0%qt · qtJun 5, 2025
- CVE-2025-351219Monitor
Buffer overflow in QTextMarkdownImporter
MediumCVSS 4.8No exploitEPSS 0%qt · qtApr 11, 2025
- CVE-2025-149230Monitor
Uncontrolled Recursion in Wireshark
HighCVSS 7.5No exploitEPSS 0%wireshark · wiresharkFeb 19, 2025
- CVE-2024-460321Monitor
Excessive time spent checking DSA keys and parameters
MediumCVSS 5.3No exploitEPSS 1%netapp · c400 firmwareMay 16, 2024
- CVE-2023-623724Monitor
Excessive time spent checking invalid RSA public keys
MediumCVSS 5.9No exploitEPSS 2%openssl · opensslApr 25, 2024
- CVE-2023-389430Monitor
DOS in jackson-dataformats-text
HighCVSS 7.5No exploitEPSS 0%fasterxml · jackson-dataformats-textAug 8, 2023
- CVE-2023-279830Monitor
Denial of service in HtmlUnit
HighCVSS 7.5No exploitEPSS 0%htmlunit · htmlunitMay 25, 2023
- CVE-2022-4172722Monitor
Denial of service via crafted TIFF image in golang.org/x/image/tiff
MediumCVSS 5.5No exploitEPSS 0%golang · imageFeb 28, 2023
- CVE-2022-4171531Monitor
Memory exhaustion when compiling regular expressions in regexp/syntax
HighCVSS 7.5No exploitEPSS 1%golang · goOct 14, 2022
- CVE-2022-3214931Monitor
Denial of service via crafted Accept-Language header in golang.org/x/text/language
HighCVSS 7.5No exploitEPSS 1%golang · textOct 14, 2022
- CVE-2022-287931Monitor
Unbounded memory consumption when reading headers in archive/tar
HighCVSS 7.5No exploitEPSS 2%golang · goOct 14, 2022
- CVE-2021-3609034Monitor
Apache Commons Compress 1.0 to 1.20 denial of service vulnerability
HighCVSS 7.5No exploitEPSS 12%apache · commons compressJul 13, 2021
- CVE-2021-3551733Monitor
Apache Commons Compress 1.1 to 1.20 denial of service vulnerability
HighCVSS 7.5No exploitEPSS 10%apache · commons compressJul 13, 2021
- CVE-2021-3551533Monitor
Apache Commons Compress 1.6 to 1.20 denial of service vulnerability
HighCVSS 7.5No exploitEPSS 11%apache · commons compressJul 13, 2021
- CVE-2018-073932Monitor
Constructed ASN.1 types with a recursive definition could exceed the stack
MediumCVSS 6.5No exploitEPSS 18%openssl · opensslMar 27, 2018