Disclosed Chromium Security Bugs

DCHECK failure in IsStackSlot() || IsFPStackSlot() in instruction.h

#40065880•Reporter: cl...@chromium.org
$0
9/22/2023

Crash in memfd:swiftshader_jit

#40065889•Reporter: cl...@chromium.org
$0
9/22/2023

Crash in Builtins_InterpreterEntryTrampoline

#40065907•Reporter: cl...@chromium.org
$0
9/22/2023

DCHECK failure in predecessor_count_ > 1 in maglev-interpreter-frame-state.cc

#40065914•Reporter: cl...@chromium.org
$0
9/22/2023

Security: Dangling pointer in Dawn::Buffer

#40060448•Reporter: ti...@chromium.org
$0
9/21/2023

sql_recovery_fuzzer: Crash in sql::recover::VirtualCursor::AppendPageDecoder

#40062859•Reporter: cl...@chromium.org
$0
9/21/2023

DCHECK failure in HasValue() in maglev-graph-builder.h

#40065747•Reporter: cl...@chromium.org
$0
9/21/2023

freetype_truetype_render_fuzzer.exe: Int-overflow in T1_Face_Init

#40064860•Reporter: cl...@chromium.org
$0
9/20/2023

Heap-use-after-free in ui::AXTreeSerializer::AnyDescendantWasReparented

#40065256•Reporter: m....@gmail.com
$9,000
9/20/2023

Crash in v8::internal::DependentCode::SetDependentCode

#40065448•Reporter: cl...@chromium.org
$0
9/20/2023
Showing 6581-6590 of 13102 bugs
1...658659660...1311