Google's OSS-Fuzz bug-hunting robot has been hard at work, and in recent months, over 1,000 bugs have been exposed. According to Chrome Security engineers Oliver Chang and Abhishek Arya, software ...

Google revealed today that OSS-Fuzz, the company's automated fuzzing service/bot, has identified and reported over 9,000 vulnerabilities in widely used open source projects in the past two years ...

Google says that to date, ClusterFuzz has helped to uncover more than 16,000 bugs in Chrome and more than 11,000 bugs in the over 160 open source projects integrated with OSS-Fuzz.

Finally, OSS-Fuzz has reported over 300 timeout and out-of-memory failures (~75% of which got fixed). Not every project treats these as bugs, but fixing them enables OSS-Fuzz to find more interesting ...