Disclosed Chromium Security Bugs

upx:list_packed_file_fuzzer: Heap-buffer-overflow in N_BELE_RTP::LEPolicy::get32

#430110068Reporter: 87...@developer.gserviceaccount.com
$0
7/26/2025

imagemagick:encoder_jxl_fuzzer: Use-of-uninitialized-value in jxl::WriteTokens

#432073014Reporter: 87...@developer.gserviceaccount.com
$0
7/26/2025

imagemagick:encoder_jxl_fuzzer: Heap-buffer-overflow in jxl::EntropyEncodingData::ChooseUintConfigs

#432058932Reporter: 87...@developer.gserviceaccount.com
$0
7/26/2025

File picker UI spoof

#40059071Reporter: nd...@protonmail.com
$2,000
7/26/2025

rdf4j:ParserFuzzer: Security exception in org.eclipse.rdf4j.query.parser.sparql.ast.SyntaxTreeBuilder.PropertyListPath

#423674610Reporter: 87...@developer.gserviceaccount.com
$0
7/25/2025

V8 Sandbox Bypass: OOB write in JsonParser::DecodeString (double fetch)

#396446145Reporter: v8...@gmail.com
$5,000
7/25/2025

Security: Omnibox Spoofing in MacOS

#41483793Reporter: fa...@gmail.com
$5,000
7/25/2025

Heap-use-after-free in utext_setNativeIndex_74

#410930625Reporter: 24...@project.gserviceaccount.com
$0
7/25/2025

CHECK failure: !v8::internal::v8_flags.enable_slow_asserts.value() || (String::DoesNotContainEs

#410925356Reporter: 24...@project.gserviceaccount.com
$0
7/25/2025

Vulnerability: Upgrade karma to 6.4.3 in GoB repo chromium/catapult

#406391575Reporter: au...@google.com
$0
7/25/2025
Showing 351-360 of 8577 bugs