Disclosed Chromium Security Bugs

DCHECK failure in IsConsideredForResultLocation() in maglev-ir.h

#511244873Reporter: 24...@project.gserviceaccount.com
$0
8/16/2026

DCHECK failure in !value->is_conversion() in maglev-interpreter-frame-state.h

#511244870Reporter: 24...@project.gserviceaccount.com
$0
8/16/2026

DCHECK failure in IsConsideredForResultLocation() in maglev-ir.h

#511225477Reporter: 24...@project.gserviceaccount.com
$0
8/16/2026

DCHECK failure in IsPrimitiveMap(this) || instance_type() == WASM_NULL_TYPE in map-inl.h

#511443008Reporter: 24...@project.gserviceaccount.com
$0
8/16/2026

Trap in Builtins_LdaCurrentContextSlotHandler

#511312074Reporter: 24...@project.gserviceaccount.com
$0
8/16/2026

DCHECK failure in opt_scope_info.has_value() in maglev-graph-builder.h

#508163923Reporter: 24...@project.gserviceaccount.com
$0
8/16/2026

llamacpp:fuzz_structured: Heap-buffer-overflow in llama_hparams::n_head

#527773837Reporter: 87...@developer.gserviceaccount.com
$0
8/15/2026

tcpreplay:fuzz_fragroute: Heap-buffer-overflow in ip_add_option

#545965630Reporter: 87...@developer.gserviceaccount.com
$0
8/15/2026

zxc:zxc_fuzzer_decompress: Memcpy-param-overlap in zxc_decompress_chunk_wrapper_default

#546426939Reporter: 87...@developer.gserviceaccount.com
$0
8/15/2026

Potential iOS Passkey implementation allows WebAuthn requests from non-secure (HTTP) origins

#495897416Reporter: vm...@google.com
$0
8/15/2026
Showing 121-130 of 12354 bugs