Disclosed Chromium Security Bugs

Security: Inconsistent slack tracking state in Map::GetDerivedMap

#41494754•Reporter: ol...@chromium.org
$0
5/4/2024

edk2:TestUdf: Heap-buffer-overflow in GetAedAdsOffset

#42535157•Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
5/4/2024

sqlite3:ossfuzz: Use-of-uninitialized-value in sqlite3BtreeTransferRow

#42535150•Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
5/4/2024

matio:matio_fuzzer: Heap-buffer-overflow in H5T__bit_find

#42535111•Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
5/3/2024

Security: Debug check failed: displacement == 0 in V8.

#41493286•Reporter: je...@gmail.com
$8,000
5/3/2024

Security: use-after-poison in blink::MLGraphXnnpack::ComputeAsyncImpl

#41489926•Reporter: zh...@gmail.com
$11,000
5/3/2024

DCHECK failure in node->options() == std::tuple{std::forward(args)...} in maglev-graph-build

#41494738•Reporter: cl...@chromium.org
$0
5/3/2024

opennavsurf-bag:bag_read_fuzzer: Use-of-uninitialized-value in H5RS__xstrdup

#42535089•Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
5/3/2024

matio:matio_fuzzer: Heap-buffer-overflow in H5A__read

#42535053•Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
5/2/2024

sql_built_in_recovery_lpm_fuzzer: Crash in sqlite3VdbeRecordUnpack

#41493420•Reporter: cl...@chromium.org
$0
5/2/2024
Showing 5941-5950 of 13102 bugs
1...594595596...1311