#fuzzing

5 writeups.

Two weeks of silence, four fixes in an afternoon — and two bugs that nearly got away 28 Jul 2026

Client-side memory-safety bugs in libnfs and libsmb2 went nowhere for two weeks, then got fixed within hours of one follow-up — and the parts worth remembering are the disclosure mechanics and the two moments verification saved the report.

coordinated-disclosure libnfs libsmb2 verification fuzzing
The bug that was already fixed: a missing backport in libebml 24 Jul 2026

A malformed-input path in libebml's EBML reader was already guarded on the v1.x branch but never forward-ported to master — a look at the missing-backport bug class and being wrong about a PoC while still being useful.

fuzzing libebml matroska variant-analysis coordinated-disclosure
From fuzzer crash to credible disclosure 21 Jul 2026

A practical workflow for turning parser crashes into verified, coordinated vulnerability disclosures.

fuzzing vulnerability-research coordinated-disclosure static-analysis
One byte crashes libConfuse: a null deref hiding in comment parsing 20 Jul 2026

A fuzzing-plus-static-review session against libConfuse turned up a null-pointer dereference in its comment lexer — the smallest reproducer is a single byte, and the story is about minimal-PoC discipline.

fuzzing libconfuse null-deref cwe-476
Finding a heap over-read in dr_flac with two hours and a fuzzer 9 Jul 2026

A short, targeted fuzzing session against dr_libs turned up a heap out-of-bounds read in dr_flac's SEEKTABLE metadata handling — and the interesting part was the discipline around the bug, not the bug.

fuzzing dr_libs heap-overflow cwe-125