x86-64 libraries without sanitizers but oss-fuzz harnesses and debug symbols.
| Project | Crash type | Fix pattern | Versions | Download |
|---|---|---|---|---|
| zlib | — | — | 1.2.11–1.3.2 (6) | Release |
| lz4 | — | — | 1.9.3–1.10.0 (3) | Release |
| libpng | — | — | 1.6.50–1.6.58 (9) | Release |
| lwan | Heap buffer overflow | Off-by-one bounds check | OSS-Fuzz 19013 parent/fix snapshots (2) | Release |
| PcapPlusPlus | Heap buffer overflow | Bounded string search | v20.08–v21.05 (2) | Release |
| HarfBuzz | Heap buffer overflow | Off-by-one bounds check | 2.8.0–2.8.1 (2) | Release |
| simdjson | Out-of-bounds read | Integer range validation | issue 1273 parent/fix snapshots (2) | Release |
| wasm3 | Heap buffer overflow | Stack depth check | OSS-Fuzz 33318 parent/fix snapshots (2) | Release |
| file | Heap buffer overflow | Pointer/end guard | OSS-Fuzz 1064 parent/fix snapshots (2) | Release |
| c-ares | Heap buffer overflow | Address family validation | OSS-Fuzz 15373 parent/fix snapshots (2) | Release |
| QuickJS | Unknown read | Parser error handling | OSS-Fuzz 21404 parent/fix snapshots (2) | Release |
| libass | Heap buffer overflow | Empty buffer handling | OSS-Fuzz 31301 parent/fix snapshots (2) | Release |
| c-blosc2 | Heap buffer overflow | Frame header validation | OSS-Fuzz 46460 parent/fix snapshots (2) | Release |
| LibreDWG | Heap buffer overflow | String length decoding | OSS-Fuzz 44481 parent/fix snapshots (2) | Release |
| libvips | Heap buffer overflow | No isolated fix | OSS-Fuzz 46436 parent/fix snapshots (2) | Release |
| libjxl | Negative size parameter | Empty input handling | OSS-Fuzz 46243 parent/fix snapshots (2) | Release |
| muparser | Heap buffer overflow | Parser state validation | OSS-Fuzz 23330 parent/fix snapshots (2) | Release |
| libplist | Heap buffer overflow | Pointer/end guard | OSS-Fuzz 55035 parent/fix snapshots (2) | Release |
| OpenThread | Stack buffer overflow | Pointer/end guard | OSS-Fuzz 13619 parent/fix snapshots (2) | Release |
| ClamAV | Heap buffer overflow | Remaining-length bounds checks | OSS-Fuzz 21960 parent/fix snapshots (2) | Release |