{
 "license": "CC-BY-4.0",
 "attribution": "Fide AI, Agentic Cyber Explorer",
 "url": "https://agentic-cyber-explorer.pages.dev/events/google-oss-fuzz-ai-26-vulnerabilities-2024/",
 "asOf": "2026-09-26",
 "id": "google-oss-fuzz-ai-26-vulnerabilities-2024",
 "date": "2024-11-20",
 "datePrecision": "day",
 "title": "OSS-Fuzz AI-generated fuzz targets find 26 vulnerabilities, including OpenSSL CVE-2024-9143",
 "lane": "defense",
 "kind": "tool-release",
 "summary": "Google reports that AI-generated and AI-enhanced fuzz targets in OSS-Fuzz found 26 new vulnerabilities in projects that already had extensive fuzzing, including CVE-2024-9143 in OpenSSL. The LLM workflow drafts targets, fixes compilation errors, fixes runtime issues and triages crashes, and gained coverage in 272 C/C++ projects.",
 "whyItMatters": "It is a vendor-documented case of LLM-driven tooling finding a CVE in critical, heavily tested software.",
 "actors": [
  "google-open-source-security",
  "openssl"
 ],
 "topics": [
  "vulnerability-discovery"
 ],
 "atlas": [],
 "artifacts": [
  "oss-fuzz"
 ],
 "sources": [
  {
   "url": "https://security.googleblog.com/2024/11/leveling-up-fuzzing-finding-more.html",
   "publisher": "Google Security Blog",
   "title": "Leveling Up Fuzzing: Finding more vulnerabilities with AI",
   "date": "2024-11-20",
   "type": "primary",
   "accessed": "2026-09-25"
  }
 ],
 "keyFacts": [
  {
   "fact": "26 new vulnerabilities were reported, each found with AI-generated or enhanced fuzz targets.",
   "locator": "Opening paragraphs"
  },
  {
   "fact": "Coverage gains in 272 C/C++ projects (up from 160), adding over 370,000 lines of new coverage; the largest single-project gain went from 77 to 5,434 lines.",
   "locator": "Section 'New results'"
  },
  {
   "fact": "CVE-2024-9143 in OpenSSL was reported on September 16 and a fix was published October 16; Google estimates it had likely been present for two decades.",
   "locator": "Section 'New results'"
  },
  {
   "fact": "The OSS-Fuzz LLM framework was open-sourced in January 2024.",
   "locator": "Section 'The story so far'"
  }
 ],
 "significance": 4,
 "fideQuestions": [],
 "methods": [
  "ai-vulnerability-discovery"
 ],
 "review": "assistant-drafted",
 "addedOn": "2026-09-25"
}