{"id":"OSV-2026-969","aliases":[],"status":"published","title":"Heap-use-after-free in Ogre::VertexData::convertPackedColour","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=527766102\n\n```\nCrash type: Heap-use-after-free READ 1\nCrash state:\nOgre::VertexData::convertPackedColour\nOgre::MeshSerializerImpl::readGeometry\nOgre::MeshSerializerImpl::readMesh\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-06-26T00:10:53.141269Z","modified":"2026-06-26T00:10:53Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"ogre","ranges":[{"type":"GIT","events":[{"introduced":"d3d34ae09abf0c4f0aa6bf83ada89d0ed354cc53"},{"fixed":"4b066d6e8f340bc92f935a6d2161872413e4a460"}]}]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=527766102","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2026-969","title":"Heap-use-after-free in Ogre::VertexData::convertPackedColour","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=527766102\n\n```\nCrash type: Heap-use-after-free READ 1\nCrash state:\nOgre::VertexData::convertPackedColour\nOgre::MeshSerializerImpl::readGeometry\nOgre::MeshSerializerImpl::readMesh\n```\n","status":"published","published":"2026-06-26T00:10:53.141269Z","modified":"2026-06-26T00:10:53.141722Z","updated_at":"2026-11-02T15:52:50.263679Z"}]}}