Disclosed Chromium Security Bugs

Integer overflow in img_alloc_helper of libaom

#332382766•Reporter: bl...@gmail.com
$0
1/1/1970

V8 Sandbox Bypass: wrapper and call target mismatch in wasm

#336009921•Reporter: ry...@gmail.com
$5,000
1/1/1970

V8 Sandbox Bypass: stack corruption due to parameter count mismatch

#338381304•Reporter: pa...@gmail.com
$0
1/1/1970

V8 Sandbox Bypass: Interpreted Function Argument Mismatch

#341129593•Reporter: ma...@gmail.com
$0
1/1/1970

V8 sandbox violation if SFI::formal_parameter_count doesn't match the parameter count of a function's code

#342297062•Reporter: 24...@project.gserviceaccount.com
$0
1/1/1970

V8 Sandbox Bypass: control-flow hijacking via WASM Table Indirect call

#343407073•Reporter: ed...@gmail.com
$5,000
1/1/1970

V8 Sandbox Bypass: AAR/W via generic JSToWasmWrapper type sbxcheck() bypass

#354355045•Reporter: se...@gmail.com
$5,000
1/1/1970

chrome://blob-internals has a loose CSP

#367494611•Reporter: aj...@google.com
$0
1/1/1970

unrar:unrar_fuzzer: Use-of-uninitialized-value in DataHash::Cmp

#368060016•Reporter: 87...@developer.gserviceaccount.com
$0
1/1/1970

mruby:mruby_fuzzer: Segv on unknown address in udiv

#368076871•Reporter: 87...@developer.gserviceaccount.com
$0
1/1/1970
Showing 11961-11970 of 12543 bugs
1...119611971198...1255