OSV-2026-678

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ndpi/OSV-2026-678.yaml
JSON Data
https://api.test.osv.dev/v1/vulns/OSV-2026-678
Published
2026-05-04T00:04:49.943355Z
Modified
2026-05-05T16:37:51.404698Z
Summary
UNKNOWN WRITE in ___interceptor_strncpy
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=508899220

Crash type: UNKNOWN WRITE
Crash state:
___interceptor_strncpy
concat_hash_string
ndpi_search_ssh_tcp
References

Affected packages

OSS-Fuzz / ndpi

Package

Name
ndpi
Purl
pkg:generic/ndpi

Affected ranges

Type
GIT
Repo
https://github.com/ntop/nDPI.git
Events
Introduced
2255d82d2df361c164412cfe3ba08e8598b0270c
Fixed
b76a732f8a665687be918d8cb2ebaede9e2f040d
Fixed
211d26151d31bd4ba344248205e1aa695782fbd1

Ecosystem specific 

{
    "severity": "HIGH"
}

Database specific

introduced_range 
"914084cba8486d7b087fbea164d740eda7cce18f:06fc1bc709c882c7a9351decbd3d2668d9e1828f"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ndpi/OSV-2026-678.yaml"
fixed_range 
"da372c59cc0a3d83e500742953d96e7d15c01491:211d26151d31bd4ba344248205e1aa695782fbd1"