Disclosed Chromium Security Bugs

Security: Debug check failed: inlinee.sig->return_count() == sig->return_count() . in v8

#41484431•Reporter: je...@gmail.com
$11,000
4/12/2024

open_type_math_support_fuzzer: Crash in tt_face_get_colr_glyph_paint

#40945818•Reporter: cl...@chromium.org
$0
4/11/2024

DCHECK failure in is_loadable() in maglev-ir.h

#41486195•Reporter: cl...@chromium.org
$0
4/11/2024

pcapplusplus:FuzzTarget: Segv on unknown address in pcpp::IPv6Layer::~IPv6Layer

#42534373•Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
4/11/2024

Security: container-overflow in FileSystemAccessManagerImpl::DidCleanupAccessHandleCapacityAllocation

#41486859•Reporter: vu...@darknavy.com
$21,000
4/10/2024

Security: Stack-buffer-underflow in DataPack::GetStringPieceFromOffset when loading a malicious theme

#40945515•Reporter: re...@gmail.com
$6,000
4/10/2024

Security: UI spoofing for external protocol dialogues via iframe srcdoc on the malicious site

#40060490•Reporter: ha...@gmail.com
$1,000
4/10/2024

Improper handling of duplicate `` and `` tags enables CSP nonce leakage

#41485789•Reporter: fe...@gmail.com
$3,000
4/5/2024

hdf5:h5_extended_fuzzer: Heap-buffer-overflow in H5F__accum_free

#42534246•Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
4/5/2024

hdf5:h5_extended_fuzzer: Heap-buffer-overflow in H5HL__fl_deserialize

#42534245•Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
4/5/2024
Showing 6001-6010 of 13102 bugs