Disclosed Chromium Security Bugs

Security: Debug check failed: offset == var.offset() (128 vs. 112).

#343748812•Reporter: rh...@gmail.com
$7,000
9/11/2024

CHECK failure: !FieldType::NowStable(field_type) || FieldType::NowContains(field_type, value) i

#344638604•Reporter: 24...@project.gserviceaccount.com
$0
9/11/2024

DCHECK failure in IsHeapNumber(*value, isolate) in js-objects.cc

#344669837•Reporter: 24...@project.gserviceaccount.com
$0
9/11/2024

CHECK failure: NumberOfOwnDescriptors() == instance_descriptors(isolate)->number_of_descriptors

#344654897•Reporter: 24...@project.gserviceaccount.com
$0
9/11/2024

V8 sandbox violation in Builtins_SuspendGeneratorHandler

#337547182•Reporter: sa...@google.com
$0
9/10/2024

Security: Segv in Builtins_JSToWasmWrapperAsm

#343035068•Reporter: je...@gmail.com
$11,000
9/10/2024

DCHECK failure in IsSortedNoDuplicates() in objects.cc

#343886936•Reporter: 24...@project.gserviceaccount.com
$0
9/10/2024

Type confusion in TryFastAddDataProperty

#342456991•Reporter: m-...@github.com
$25,000
9/7/2024

Security: Debug check failed: !type.is_uninhabited()

#342602616•Reporter: rh...@gmail.com
$7,000
9/7/2024

Crash in v8::internal::Simulator::WriteW

#339513381•Reporter: 24...@project.gserviceaccount.com
$0
9/7/2024
Showing 5551-5560 of 13102 bugs
1...555556557...1311