Disclosed Chromium Security Bugs

mhtml_parser_fuzzer: Heap-buffer-overflow in modp_b64_decode

#40061888•Reporter: cl...@chromium.org
$0
3/7/2023

Security: WebGPU UAF in Dawn Memory Transfer Service

#40061890•Reporter: ti...@chromium.org
$0
3/7/2023

DCHECK failure in isolate()->thread_id() == ThreadId::Current() in heap.cc

#40061873•Reporter: cl...@chromium.org
$0
3/6/2023

v8_wasm_async_fuzzer: DCHECK failure in has_index() in value-type.h

#40061878•Reporter: cl...@chromium.org
$0
3/6/2023

gpu_swangle_passthrough_fuzzer: Segv on unknown address in __tls_get_addr

#40061909•Reporter: cl...@chromium.org
$0
3/5/2023

DCHECK failure in handle & ~kVisitedHandleMarker == index << kExternalPointerIndexShift in externa

#40061907•Reporter: cl...@chromium.org
$0
3/3/2023

UAF in blink::WidgetBase::BeginMainFrame(base::TimeTicks)

#40061620•Reporter: em...@gmail.com
$1,500
3/2/2023

UAF in search::(anonymous namespace)::NewTabURLDetails::ForProfile(Profile*)

#40061670•Reporter: em...@gmail.com
$3,000
3/2/2023

Security: Unretained() can be used for objects on the Oilpan heap

#40061815•Reporter: vm...@gmail.com
$3,000
3/2/2023

Negative-size-param in ipcz::BlockAllocator::InitializeRegion

#40061821•Reporter: cl...@chromium.org
$0
3/2/2023
Showing 7171-7180 of 13102 bugs
1...717718719...1311