debian/aflplusplus vulnerabilities

Latest debian/aflplusplus CVEs

Newest publication first

1. CVE-2023-26266 In AFL++ 4.05c, the CmpLog component uses the current working directory to resolve and execute unprefixed fuzzing targets, allowing code execution.

   Published 2023-02-21

   High·CVSS 7.3 EPSS 0.40%

   In AFL++ 4.05c, the CmpLog component uses the current working directory to resolve and execute unprefixed fuzzing targets, allowing code execution.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.