Disclosed Chromium Security Bugs
←Back to DashboardSecurity: Memory corrupt in v8, leading to RCE
$23,000
10/27/2023
DCHECK failure in mode == FastCloneObjectMode::kIdenticalMap implies !map->is_prototype_map() in i
$0
10/27/2023
DCHECK failure in descriptor_number.as_int() < number_of_descriptors() in descriptor-array-inl.h
$0
10/27/2023
DCHECK failure in details.kind() == PropertyKind::kData in ic.cc
$0
10/27/2023
matio:matio_fuzzer: Heap-buffer-overflow in H5D__scatter_mem
$0
10/26/2023
Security: [ANGLE] opengl : Out-of-bounds memory can be accessed using offsets in vertexAttribPointer
$10,000
10/25/2023
I'm reporting an incomplete fix for a prior report (1451211) and (1427865).
$15,000
10/25/2023
Security: Type confusion in VisitFindNonDefaultConstructorOrConstruct of Maglev
$21,000
10/25/2023
Security: stack-buffer-overflow WRITE of size 169 while parsing a file in espeak-ng (ChromeOS relevant)
$0
10/24/2023
Security: heap-use-after-free READ of size 4 while parsing a file in espeak-ng (ChromeOS relevant)
$0
10/24/2023