Skip to content
Bright Security Launches STAR Fuzzer, Identifying Critical Vulnerabilities in Open Source Projects

Bright Security Launches STAR Fuzzer, Identifying Critical Vulnerabilities in Open Source Projects

First seen 19 Oct 2026, 15:49 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 19, 2026 at 16:50 UTC
  • •STAR Fuzzer found High or Critical issues in 45% of tested open-source projects.
  • •The tool automates harness generation and vulnerability discovery using AI.
  • •37% of vulnerable projects were already in Google's OSS-Fuzz program.

Bright Security has officially launched STAR Fuzzer, an agentic application fuzzer designed to automate the identification of security-critical functions in code. In its first research run, STAR Fuzzer found High or Critical issues in 45% of the open-source projects tested, including notable libraries like Crystal and htop. The tool automates the creation of fuzzing harnesses and utilizes an evolutionary algorithm to discover vulnerabilities such as memory corruption and stack overflows. The research highlighted that 37% of the affected projects were already part of Google's OSS-Fuzz program, indicating that additional harnesses can reveal previously untested code paths. The findings underscore the importance of automating fuzzing processes to enhance software security. STAR Fuzzer is now available for use at brightsec.com/fuzzer.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-19
STAR Fuzzer officially launched
Bright Security announced the launch of STAR Fuzzer, an agentic application fuzzer that automates vulnerability discovery.
Hackread
2026-10-19
Research findings published
In a two-day research run, STAR Fuzzer identified High or Critical issues in 45% of the tested open-source projects.
brightsec.com

More articles in this cluster (3)

Following this threat?

Track CVE-2026-104621 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (10)

1 / 3

Common questions

What types of vulnerabilities did STAR Fuzzer find?
STAR Fuzzer identified vulnerabilities such as memory corruption, stack overflows, and out-of-bounds access.
How does STAR Fuzzer differ from traditional fuzzers?
Unlike traditional fuzzers, STAR Fuzzer automates harness generation and vulnerability triage using AI.
Is STAR Fuzzer available for public use?
Yes, STAR Fuzzer is available for use at brightsec.com/fuzzer.