Disclosed Chromium Security Bugs

Arbitrary Wasm type confusion due to improper fix of b/380397544

#381696874•Reporter: se...@gmail.com
$55,000
3/11/2025

Arbitrary WASM type confusion due to improper fix of b/379009132

#380397544•Reporter: se...@gmail.com
$55,000
3/11/2025

DCHECK failure in kCanBeWeak || (!IsSmi() == HAS_STRONG_HEAP_OBJECT_TAG(ptr_)) in tagged-impl.h

#379843860•Reporter: 24...@project.gserviceaccount.com
$0
3/11/2025

Check if WasmImportData::call_origin allows sandbox escapes

#369748454•Reporter: jk...@chromium.org
$0
3/11/2025

MemorySanitizer: SEGV v8/src/heap/remembered-set-inl.h:46:38 in heap::base::SlotCallbackResult v8::internal::UpdateTypedSlotHelper::UpdateTypedSlot(v8::internal::WritableJitAllocation&, v8::internal::Heap*, v8::internal::SlotType, unsigned long, v8::internal::Scavenger::ScavengePage(v8::internal::MutablePageMetadata*)::$_2)

#380474992•Reporter: al...@goodmanemail.com
$0
3/11/2025

Memory corruption in TransitiveTypeFeedbackProcessor with --wasm-deopt and multi-instance modules

#381281318•Reporter: ml...@chromium.org
$0
3/11/2025

openbabel:fuzz_convert: Object-size in OpenBabel::GaussianOutputFormat::ReadMolecule

#383170469•Reporter: 87...@developer.gserviceaccount.com
$0
3/10/2025

openbabel:fuzz_convert: Global-buffer-overflow in OpenBabel::generate_sequence

#382922246•Reporter: 87...@developer.gserviceaccount.com
$0
3/10/2025

bluez:fuzz_xml: Null-dereference READ in ubsan_GetStackTrace

#382927066•Reporter: 87...@developer.gserviceaccount.com
$0
3/10/2025

shaderc:shaderc_fdp_fuzzer: Crash in glslang::TInfoSinkBase::location

#382922237•Reporter: 87...@developer.gserviceaccount.com
$0
3/10/2025
Showing 4971-4980 of 13102 bugs
1...497498499...1311