Disclosed Chromium Security Bugs

Arbitrary Wasm type confusion due to missing struct field mutability check on canonicalization

#382291459•Reporter: se...@gmail.com
$55,000
3/14/2025

openbabel:fuzz_convert: Index-out-of-bounds in OpenBabel::transform3d::DescribeAsString

#383911303•Reporter: 87...@developer.gserviceaccount.com
$0
3/13/2025

dawn_wire_server_and_vulkan_backend_fuzzer: Heap-use-after-free in dawn::native::Adapter::~Adapter

#382147425•Reporter: 24...@project.gserviceaccount.com
$0
3/13/2025

Crash in unsigned int v8::base::AsAtomicImpl::Relaxed_Load

#381332096•Reporter: 24...@project.gserviceaccount.com
$0
3/13/2025

V8 sandbox violation in v8::internal::MutablePageMetadata::SweepingDone

#382147423•Reporter: sa...@google.com
$0
3/13/2025

DCHECK failure in !chunk->InWritableSharedSpace() in isolate-utils-inl.h

#381129881•Reporter: 24...@project.gserviceaccount.com
$0
3/13/2025

jackson-dataformat-xml:XmlFuzzer: Security exception in com.sun.xml.stream.XMLDocumentFragmentScannerImpl$FragmentContentDriver.next

#383588432•Reporter: 87...@developer.gserviceaccount.com
$0
3/12/2025

wasm3:fuzzer: Heap-buffer-overflow in PreserveRegisterIfOccupied

#383379140•Reporter: 87...@developer.gserviceaccount.com
$0
3/11/2025

Security DCHECK failure: dom_start_ <= dom_end_. 3 vs in offset_mapping.cc

#379254069•Reporter: 24...@project.gserviceaccount.com
$0
3/11/2025

V8 Sandbox Bypass: AAR/W via WASM dispatch table index OOB from `WasmTableObject.uses`

#350628675•Reporter: se...@gmail.com
$20,000
3/11/2025
Showing 4961-4970 of 13102 bugs
1...496497498...1311