Disclosed Chromium Security Bugs

CHECK failure: untyped_->count(slot.address()) > 0 in heap-verifier.cc

#475334874•Reporter: 24...@project.gserviceaccount.com
$0
4/22/2026

CHECK failure: aborted_pages_verified == aborted_pages in mark-compact.cc

#474856969•Reporter: 24...@project.gserviceaccount.com
$0
4/22/2026

CHECK failure: p->marking_bitmap()->IsClean() in mark-compact.cc

#474605312•Reporter: 24...@project.gserviceaccount.com
$0
4/22/2026

DCHECK failure in state_ == kSpill in maglev-regalloc-node-info.h

#474417809•Reporter: 24...@project.gserviceaccount.com
$0
4/22/2026

DCHECK failure in !category->is_linked(page->owner()->free_list()) in sweeper.cc

#474821734•Reporter: 24...@project.gserviceaccount.com
$0
4/22/2026

v8_wasm_code_fuzzer: DCHECK failure in kind >= Simd256UnaryOp::Kind::kFirstSignExtensionOp in assembler.h

#474401017•Reporter: 24...@project.gserviceaccount.com
$0
4/22/2026

matio:matio_fuzzer: Heap-buffer-overflow in ParseOpaqueMetadata

#504617128•Reporter: 87...@developer.gserviceaccount.com
$0
4/21/2026

libxml2:regexp: Heap-buffer-overflow in xmlFAParsePosCharGroup

#501547873•Reporter: 87...@developer.gserviceaccount.com
$0
4/21/2026

c-blosc2:decompress_frame_fuzzer: Heap-buffer-overflow in read_lazy_chunk_bytes

#499120078•Reporter: 87...@developer.gserviceaccount.com
$0
4/21/2026

zeek:zeek-dns-fuzzer: Heap-buffer-overflow in zeek::String::String

#499951129•Reporter: 87...@developer.gserviceaccount.com
$0
4/21/2026
Showing 2831-2840 of 13102 bugs
1...283284285...1311