Disclosed Chromium Security Bugs

DCHECK failure in (thread_graph_labeller) == nullptr in maglev-graph-labeller.cc

#429645383•Reporter: 24...@project.gserviceaccount.com
$0
10/15/2025

CHECK failure: ValueRepresentationIs(input->properties().value_representation(), NodeT::kInputT

#430125749•Reporter: 24...@project.gserviceaccount.com
$0
10/15/2025

DCHECK failure in base::FPU::GetFlushDenormals() == isolate->flush_denormals() in local-isolate.cc

#429761781•Reporter: 24...@project.gserviceaccount.com
$0
10/15/2025

quickjs:fuzz_compile: Use-of-uninitialized-value in JS_DefineProperty

#449772271•Reporter: 87...@developer.gserviceaccount.com
$0
10/12/2025

blink_gif_decoder_fuzzer: CHECK failure: frame.GetStatus() == ImageFrame::kFrameInitialized || frame.GetStatus() == Image

#428754691•Reporter: 24...@project.gserviceaccount.com
$0
10/12/2025

libwebp:advanced_api_fuzzer@AdvancedApi.AdvancedApiTest: Crash in RescalerImportRowExpand_SSE2

#449781448•Reporter: 87...@developer.gserviceaccount.com
$0
10/11/2025

libwebp:advanced_api_fuzzer@AdvancedApi.AdvancedApiTest: Heap-buffer-overflow in ProcessRows

#447845730•Reporter: 87...@developer.gserviceaccount.com
$0
10/11/2025

libwebp:advanced_api_fuzzer@AdvancedApi.AdvancedApiTest: Heap-buffer-overflow in AddGreenToBlueAndRed_AVX2

#447958064•Reporter: 87...@developer.gserviceaccount.com
$0
10/11/2025

Permission element inner div with style text-emphasis:꧁; and text-emphasis-position: over right; can be abused if no element in the parent chain has any text-emphasis:꧁; and text-emphasis-position: over right; are set.

#428455319•Reporter: sa...@gmail.com
$1,000
10/11/2025

V8 Sandbox Bypass: OOB write in the WasmFullDecoder EndControl handler

#427918760•Reporter: vs...@gmail.com
$5,000
10/11/2025
Showing 4111-4120 of 13102 bugs