Disclosed Chromium Security Bugs

libavif:avif_fuzztest_enc_dec@EncodeDecodeAvifFuzzTest.EncodeDecodeValid: Heap-buffer-overflow in aom_stop_encode

#514006304•Reporter: 87...@developer.gserviceaccount.com
$0
5/23/2026

openbabel:fuzz_obconversion_sdf: Container-overflow in OpenBabel::MDLFormat::ReadV3000Block

#515663946•Reporter: 87...@developer.gserviceaccount.com
$0
5/23/2026

radare2:ia_fuzz: Heap-double-free in r_bin_string_free

#515851739•Reporter: 87...@developer.gserviceaccount.com
$0
5/23/2026

UAF in ModelContext::ForEachScriptTool

#483853103•Reporter: he...@gmail.com
$10,000
5/23/2026

Missing range validation on second_chroma_qp_index_offset in H.264 PPS parser (h264_parser.cc:1151) allows out-of-spec values to reach kernel GPU drivers

#482862710•Reporter: lu...@icloud.com
$10,000
5/23/2026

V8 sandbox bypass: reuse `protected_uses` of `WasmDispatchTable` after grow

#483220222•Reporter: pv...@gmail.com
$20,000
5/23/2026

Android Chrome Heap Corruption GPU Process

#393408586•Reporter: pw...@gmail.com
$25,000
5/23/2026

Lookalike protection is not applited to top-level redirects of Blob URIs, allowing URL spoofing via Googlelogoligatures

#422217920•Reporter: he...@gmail.com
$10,000
5/23/2026

p11-kit:conf_fuzzer: Heap-buffer-overflow in p11_lexer_next

#513100838•Reporter: 87...@developer.gserviceaccount.com
$0
5/22/2026

gdal:s101_fuzzer: Heap-buffer-overflow in DDFSubfieldDefn::GetDataLength

#515291110•Reporter: 87...@developer.gserviceaccount.com
$0
5/22/2026
Showing 61-70 of 10546 bugs
1...678...1055