Disclosed Chromium Security Bugs

Security: WriteTexture heap-buffer-overflow in WebGL on macOS

#40090246Reporter: om...@krashconsulting.com
$1,000
5/8/2018

Security: V8: A bug in the ObjectDescriptor class

#40090201Reporter: lo...@google.com
$0
5/4/2018

DCHECK failure in current_ == next_ in node.h

#40090214Reporter: cl...@chromium.org
$3,500
5/2/2018

CHECK failure: Type cast failed in CAST(add_func) at ../../src/builtins/builtins-collections-ge

#40090263Reporter: cl...@chromium.org
$0
5/2/2018

CHECK failure: LoadElement of kRepFloat64 (NumberOrHole) cannot be changed to kRepTagged in rep

#40090265Reporter: cl...@chromium.org
$0
5/2/2018

curl/curl_fuzzer_rtsp: Heap-buffer-overflow in Curl_follow

#42539527Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com
$0
4/25/2018

Heap-buffer-overflow in SkRecorder::onDrawPosTextH

#40089950Reporter: m....@gmail.com
$2,000
4/14/2018

Security: V8: JIT: A bug in LoadElimination::ReduceTransitionElementsKind

#40090080Reporter: lo...@google.com
$0
4/13/2018

CHECK failure: actual_unused_property_fields > map()->unused_property_fields() in objects-debug

#40089155Reporter: cl...@chromium.org
$0
4/10/2018

DCHECK failure in IrOpcode::kMerge == control->opcode() in node-properties.cc

#40089999Reporter: cl...@chromium.org
$0
4/5/2018
Showing 8971-8980 of 13102 bugs