Disclosed Chromium Security Bugs

Security: [WebGL/WebGPU] Integer overflow in Swiftshader JIT optimization leads to oob read/write

#40063963•Reporter: ti...@chromium.org
$0
8/10/2023

Security: [swiftshader] heap-use-after-free on vk::Query::start (another)

#40064253•Reporter: ne...@nesk.kr
$10,000
8/10/2023

dawn_wire_server_and_vulkan_backend_fuzzer.exe: Crash in marl::Scheduler::Worker::runUntilIdle

#40064287•Reporter: cl...@chromium.org
$0
8/10/2023

Security: stack-buffer-overflow in prepare_so_movs

#40064150•Reporter: fi...@gmail.com
$7,000
8/9/2023

Fatal error in Type cast failed in CAST(args.GetReceiver()) at ../../src/builtins/builtins-call

#40064247•Reporter: cl...@chromium.org
$0
8/9/2023

DCHECK failure in source_position_iterator_.code_offset() > offset in maglev-graph-builder.h

#40064334•Reporter: cl...@chromium.org
$0
8/9/2023

Security: WebGPU D3D12 Descriptor Heap Issue Could Cause Unauthorized Memory Access

#40064351•Reporter: br...@intel.com
$0
8/9/2023

file_path_fuzzer: Global-buffer-overflow in base::FilePath::HFSFastUnicodeCompare

#40063624•Reporter: cl...@chromium.org
$0
8/8/2023

Fatal error in SimplifiedLoweringVerifierError: verified type Boolean of node #NUMBER:TypeGuard

#40063836•Reporter: cl...@chromium.org
$0
8/8/2023

Security: UAF in DevToolsDataSource::OnLoadComplete

#40064142•Reporter: 0x...@gmail.com
$3,000
8/8/2023
Showing 6711-6720 of 13102 bugs