Disclosed Chromium Security Bugs

WebNN convTranspose2d indirection buffer integer overflow in XNNPACK deconvolution-nhwc.c — incomplete fix for CVE-2026-5859 (Pool2d patched, ConvTranspose2d not)

#502495040Reporter: as...@gmail.com
$0
8/13/2026

gpsd:FuzzDriversStructured: Segv on unknown address in ___interceptor_strtol

#515100083Reporter: 87...@developer.gserviceaccount.com
$0
8/13/2026

cmake:cmArchiveExtractFuzzer: Use-of-uninitialized-value in cab_read_ahead_cfdata

#521860152Reporter: 87...@developer.gserviceaccount.com
$0
8/13/2026

mongoose:fuzz: Heap-buffer-overflow in ppp_tx_frame

#531087610Reporter: 87...@developer.gserviceaccount.com
$0
8/12/2026

wasm3:fuzzer: Global-buffer-overflow in CopyStackSlotsR

#528465098Reporter: 87...@developer.gserviceaccount.com
$0
8/12/2026

wasm3:fuzzer: Index-out-of-bounds in FindReferencedLocalWithinCurrentBlock

#528059072Reporter: 87...@developer.gserviceaccount.com
$0
8/12/2026

wasm3:fuzzer: Global-buffer-overflow in Compile_Memory_CopyFill

#536060621Reporter: 87...@developer.gserviceaccount.com
$0
8/12/2026

fwupd:uswid_fuzzer: Crash in g_byte_array_append

#544203407Reporter: 87...@developer.gserviceaccount.com
$0
8/12/2026

assimp:assimp_fuzzer: Crash in Assimp::MDL::HalfLife::HL1MDLLoader::read_animations

#531338443Reporter: 87...@developer.gserviceaccount.com
$0
8/12/2026

ogre:script_fuzz: Bad-cast to ObjectAbstractNode from Ogre::PropertyAbstractNode in Ogre::ObjectAbstractNode::getVariable

#544548636Reporter: 87...@developer.gserviceaccount.com
$0
8/12/2026
Showing 1111-1120 of 13102 bugs