Disclosed Chromium Security Bugs

dawn_wire_server_and_frontend_fuzzer: Heap-use-after-free in dawn_native::ObjectBase::IsError

#40055590•Reporter: cl...@chromium.org
$0
8/21/2021

Crash in sw::SpirvShader::getImageSampler

#40055232•Reporter: cl...@chromium.org
$0
8/20/2021

wasm3:fuzzer: Index-out-of-bounds in Pop

#42500421•Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
8/20/2021

Security: heap-use-after-free in the payment dialog in the browser process

#40055382•Reporter: 0x...@gmail.com
$15,000
8/19/2021

Security: HeapOverflow in MediaFeeds

#40055424•Reporter: le...@gmail.com
$15,000
8/19/2021

Security: heap-use-after-free in DesktopWindowTreeHostPlatform::SetFullscreen

#40055494•Reporter: me...@gmail.com
$10,000
8/19/2021

tint_spv_reader_wgsl_writer_fuzzer: Bad-cast to const tint::ast::Pointer from tint::ast::Vector in tint::typ::TypePair tint::typ::Call_type

#40055754•Reporter: cl...@chromium.org
$0
8/15/2021

wasm3:fuzzer: Index-out-of-bounds in CopyStackIndexToSlot

#42500206•Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
8/15/2021

tidy-html5:tidy_general_fuzzer: Heap-use-after-free in prvTidyInsertedToken

#42500198•Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
8/15/2021

Heap-buffer-overflow in sw::SpirvShader::getImageSampler

#40054409•Reporter: cl...@chromium.org
$0
8/14/2021
Showing 8381-8390 of 13102 bugs