Disclosed Chromium Security Bugs

WebNN XNNPack VisitReduceNode stack buffer overflow via rank-7+

#501280398•Reporter: r2...@gmail.com
$0
8/13/2026

WebNN convTranspose2d indirection buffer integer overflow in XNNPACK deconvolution-nhwc.c — incomplete fix for CVE-2026-5859 (Pool2d patched, ConvTranspose2d not)

#502495040•Reporter: as...@gmail.com
$0
8/13/2026

gpsd:FuzzDriversStructured: Segv on unknown address in ___interceptor_strtol

#515100083•Reporter: 87...@developer.gserviceaccount.com
$0
8/13/2026

cmake:cmArchiveExtractFuzzer: Use-of-uninitialized-value in cab_read_ahead_cfdata

#521860152•Reporter: 87...@developer.gserviceaccount.com
$0
8/13/2026

mongoose:fuzz: Heap-buffer-overflow in ppp_tx_frame

#531087610•Reporter: 87...@developer.gserviceaccount.com
$0
8/12/2026

wasm3:fuzzer: Global-buffer-overflow in CopyStackSlotsR

#528465098•Reporter: 87...@developer.gserviceaccount.com
$0
8/12/2026

wasm3:fuzzer: Index-out-of-bounds in FindReferencedLocalWithinCurrentBlock

#528059072•Reporter: 87...@developer.gserviceaccount.com
$0
8/12/2026

wasm3:fuzzer: Global-buffer-overflow in Compile_Memory_CopyFill

#536060621•Reporter: 87...@developer.gserviceaccount.com
$0
8/12/2026

fwupd:uswid_fuzzer: Crash in g_byte_array_append

#544203407•Reporter: 87...@developer.gserviceaccount.com
$0
8/12/2026

assimp:assimp_fuzzer: Crash in Assimp::MDL::HalfLife::HL1MDLLoader::read_animations

#531338443•Reporter: 87...@developer.gserviceaccount.com
$0
8/12/2026
Showing 381-390 of 12354 bugs
1...383940...1236