Disclosed Chromium Security Bugs

ffmpeg:ffmpeg_AV_CODEC_ID_AAC_LATM_fuzzer: Index-out-of-bounds in ff_aac_sbr_apply

#401661737•Reporter: 87...@developer.gserviceaccount.com
$0
6/9/2025

tomcat:ELEvaluationFuzzer: Security exception in java.base/java.lang.String.repeat

#402279545•Reporter: 87...@developer.gserviceaccount.com
$0
6/9/2025

ntopng:fuzz_dissect_packet: Heap-buffer-overflow in Flow::dissectBittorrent

#402195194•Reporter: 87...@developer.gserviceaccount.com
$0
6/9/2025

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::MDLImporter::SkipSkinLump_3DGS_MDL7

#401909791•Reporter: 87...@developer.gserviceaccount.com
$0
6/9/2025

V8 Sandbox Bypass: OOB write in JsonStringifier::TrySerializeSimplePropertyKey

#398773898•Reporter: v8...@gmail.com
$5,000
6/7/2025

V8 sandbox violation in icu_74::UnicodeString::doAppend

#393989622•Reporter: v8...@gmail.com
$5,000
6/7/2025

debugger/debug/wasm/debug-enabled-tier-down-wasm-streaming starts flaking

#399002829•Reporter: ma...@chromium.org
$0
6/6/2025

CHECK failure: it != map_.end() in register-allocator-verifier.cc

#396460489•Reporter: 24...@project.gserviceaccount.com
$0
6/6/2025

Security: Bypass the Protection of input fields cache (Autofill) ,and Autofill popup can be made hidden

#40068001•Reporter: el...@gmail.com
$1,000
6/6/2025

Permission element inner span height of 100% can be abused if no element in the parent chain has any height set.

#398803201•Reporter: an...@google.com
$0
6/6/2025
Showing 4721-4730 of 13102 bugs
1...472473474...1311