Disclosed Chromium Security Bugs

mruby:mruby_proto_fuzzer: Heap-buffer-overflow in read_irep_record

#531123005•Reporter: 87...@developer.gserviceaccount.com
$0
8/17/2026

ogre:script_fuzz: Container-overflow in Ogre::TextureUnitState::_unload

#547161251•Reporter: 87...@developer.gserviceaccount.com
$0
8/17/2026

janet:fuzz_dobytes: Heap-use-after-free in janet_hash

#543115518•Reporter: 87...@developer.gserviceaccount.com
$0
8/17/2026

DCHECK failure in !value->is_conversion() in maglev-interpreter-frame-state.h

#511579746•Reporter: 24...@project.gserviceaccount.com
$0
8/17/2026

Trap in Builtins_LdaImmutableCurrentContextSlotHandler

#511588901•Reporter: 24...@project.gserviceaccount.com
$0
8/17/2026

Trap in Builtins_PromiseConstructor

#511647904•Reporter: 24...@project.gserviceaccount.com
$0
8/17/2026

Trap in Builtins_JSEntryTrampoline

#511574524•Reporter: 24...@project.gserviceaccount.com
$0
8/17/2026

DCHECK failure in !map.is_identical_to(lookup_start_object_map()) in ic.cc

#511549247•Reporter: 24...@project.gserviceaccount.com
$0
8/17/2026

DCHECK failure in !is_dead() in maglev-basic-block.h

#511549432•Reporter: 24...@project.gserviceaccount.com
$0
8/17/2026

Crash in Builtins_ProxyConstructor

#511588902•Reporter: 24...@project.gserviceaccount.com
$0
8/17/2026
Showing 111-120 of 12354 bugs
1...111213...1236