An analysis dives into the details why the recently hyped OpenSSL vulnerability CVE-2022-3602 was not discovered via fuzzing. All of the fuzzers from the OpenSSL source tree are also automatically deployed to ClusterFuzz via OSS-Fuzz. The bug was announced as Critical and downgraded to High on release day.
