Disclosed Chromium Security Bugs

pdf_jpx_fuzzer: Trap in FX_AlignedAlloc

#346617165•Reporter: 24...@project.gserviceaccount.com
$0
10/5/2024

envoy:evaluator_fuzz_test: Use-after-poison in google::protobuf::internal::GenericTypeHandler::Type co

#42536698•Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
10/4/2024

envoy:rbac_filter_fuzz_test: Use-after-poison in google::protobuf::internal::KeyMapBase

#42536682•Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
10/4/2024

gnutls:gnutls_x509_crq_parser_fuzzer: Use-of-uninitialized-value in gnutls_x509_crq_get_version

#42536706•Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
10/4/2024

libraw:libraw_cr2_fuzzer: Use-of-uninitialized-value in LibRaw::parseLeicaMakernote

#42536763•Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
10/4/2024

heap-use-after-free on DownloadManagerTabHelper::DidCreateDownload

#349198731•Reporter: li...@gmail.com
$11,000
10/4/2024

DCHECK failure in size() > index in small-vector.h

#348598133•Reporter: ki...@gmail.com
$11,000
10/4/2024

use-after-poison in apps::AppShimManager::OnShimProcessConnectedForRegisterOnly

#348793134•Reporter: ha...@gmail.com
$2,000
10/4/2024

SBXCHECK for Map in JSHeapBroker is racy

#349531834•Reporter: sr...@google.com
$0
10/4/2024

MaglevCompilationUnit sandbox check racy

#349526064•Reporter: sr...@google.com
$0
10/4/2024
Showing 5431-5440 of 13102 bugs