Disclosed Chromium Security Bugs

Security: heap-buffer-overflow in gpu::gles2::Texture::SetLevelCleared

#40061871Reporter: gl...@google.com
$0
3/1/2023

Security: global-buffer-overflow css_property.cc:27 in blink::CSSProperty::Get

#40061781Reporter: m....@gmail.com
$7,000
2/28/2023

tint_regex_msl_writer_fuzzer.exe: Illegal-instruction in tint::Program::Program

#40061819Reporter: cl...@chromium.org
$0
2/28/2023

substring_set_matcher_fuzzer: Heap-buffer-overflow in base::SubstringSetMatcher::AhoCorasickNode::SetEdge

#40061813Reporter: cl...@chromium.org
$0
2/27/2023

v8_wasm_streaming_fuzzer: DCHECK failure in sub_module->has_type(sub_index) in wasm-subtyping.cc

#40061833Reporter: cl...@chromium.org
$0
2/27/2023

audio_encoder_isac_float_fuzzer.exe: Stack-buffer-overflow in webrtc::AudioEncoderIsacT::EncodeImpl

#40061820Reporter: cl...@chromium.org
$0
2/26/2023

ui_x11_cursor_loader_fuzzer: Heap-buffer-overflow in ui::ParseCursorFile

#40061637Reporter: cl...@chromium.org
$0
2/25/2023

DCHECK failure in input_count <= std::numeric_limitsinput_count)>::max() in operat

#40061697Reporter: cl...@chromium.org
$0
2/25/2023

DCHECK failure in IsJSFunction() in heap-refs.cc

#40061780Reporter: cl...@chromium.org
$0
2/25/2023

DCHECK failure in page->area_size() >= static_cast(marking_state_->live_bytes(page)) in sw

#40061797Reporter: cl...@chromium.org
$0
2/25/2023
Showing 4921-4930 of 10816 bugs