Disclosed Chromium Security Bugs

CHECK failure: HeapConstant of kRepTaggedPointer (HeapConstant(ADDRESS {ADDRESS

#477645118•Reporter: 24...@project.gserviceaccount.com
$0
5/1/2026

DCHECK failure in state_ == kRegallocInfo in maglev-ir.h

#476329375•Reporter: 24...@project.gserviceaccount.com
$0
5/1/2026

assimp:assimp_fuzzer: Crash in void Assimp::Blender::ConvertDispatcher

#488752792•Reporter: 87...@developer.gserviceaccount.com
$0
4/30/2026

ndpi:fuzz_ndpi_reader_pl7m_simplest: Heap-buffer-overflow in ___interceptor_strncpy

#507904196•Reporter: 87...@developer.gserviceaccount.com
$0
4/30/2026

rdkit:smiles_string_to_mol_fuzzer: Bad-cast to RDKit::AtomRDKit::Canon::initCanonAtoms in RDKit::Canon::rankMolAtoms

#491506909•Reporter: 87...@developer.gserviceaccount.com
$0
4/30/2026

binutils:fuzz_dwarf: Null-dereference READ in load_separate_debug_files

#507172933•Reporter: 87...@developer.gserviceaccount.com
$0
4/30/2026

rdkit:smiles_string_to_mol_fuzzer: Use-of-uninitialized-value in RDKit::Chirality::cleanupStereoGroups

#491028577•Reporter: 87...@developer.gserviceaccount.com
$0
4/30/2026

rdkit:smiles_string_to_mol_fuzzer: Bad-cast to RDKit::Atom from invalid vptr in RDKit::Canon::initCanonAtoms

#490937718•Reporter: 87...@developer.gserviceaccount.com
$0
4/30/2026

libheif:encoder_fuzzer: Index-out-of-bounds in svt_aom_get_blk_var_map

#502074862•Reporter: 87...@developer.gserviceaccount.com
$0
4/30/2026

assimp:assimp_fuzzer: Crash in unsigned int Assimp::StreamReader::Get

#498284131•Reporter: 87...@developer.gserviceaccount.com
$0
4/30/2026
Showing 2751-2760 of 13102 bugs
1...275276277...1311