Disclosed Chromium Security Bugs

vlc:vlc-demux-dec-libfuzzer: Heap-buffer-overflow in Read

#455926738Reporter: 87...@developer.gserviceaccount.com
$0
11/14/2025

V8 Sandbox Bypass: Heap Buffer Overflow while Changing the Length of a Corrupted Array

#430498032Reporter: da...@hirsch.cx
$5,000
11/14/2025

v8_wasm_compile_wasmgc_fuzzer: DCHECK failure in desc_typedef.is_descriptor() in wasm-gc-typed-optimization-reducer.cc

#435301441Reporter: 24...@project.gserviceaccount.com
$0
11/14/2025

matio:matio_fuzzer: Crash in H5SL_first

#443125523Reporter: 87...@developer.gserviceaccount.com
$0
11/13/2025

V8 Sandbox Bypass: Use-After-Free during StartProfiling

#433800618Reporter: da...@hirsch.cx
$0
11/13/2025

libheif:file_fuzzer: Memcpy-param-overlap in HeifPixelImage::overlay

#444878562Reporter: 87...@developer.gserviceaccount.com
$0
11/12/2025

harfbuzz:hb-shape-fuzzer: Heap-buffer-overflow in hb_ot_layout_get_size_params

#459914668Reporter: 87...@developer.gserviceaccount.com
$0
11/12/2025

wasmedge:wasmedge-fuzztool: Crash in WasmEdge::Validator::FormChecker::checkInstr

#458679526Reporter: 87...@developer.gserviceaccount.com
$0
11/12/2025

Validate descriptor chain in WebGPUDecoderImpl::RequestDeviceImpl

#435231045Reporter: ka...@chromium.org
$0
11/12/2025

ANGLE: Out-of-bounds write in EmulateFramebufferFetch

#435139154Reporter: bi...@google.com
$0
11/12/2025
Showing 11-20 of 8821 bugs