Disclosed Chromium Security Bugs

CHECK failure: Node #610:Phi in B121 is not dominated by input@1 #632:Call in verifier.cc

#40089967•Reporter: cl...@chromium.org
$0
3/31/2018

DCHECK failure in min_block == BasicBlock::GetCommonDominator(block, min_block) in scheduler.cc

#40089970•Reporter: cl...@chromium.org
$0
3/31/2018

CHECK failure: Node #370:Phi in B34 is not dominated by input@1 #392:Call in verifier.cc

#40089974•Reporter: cl...@chromium.org
$0
3/31/2018

heap-use-after-free in ProbeForLowSeverityLifetimeIssue

#40089942•Reporter: at...@gmail.com
$0
3/28/2018

Incorrect-function-pointer-type in gl::Debug::insertMessage

#40090758•Reporter: cl...@chromium.org
$0
3/27/2018

Security: V8: JIT: JSBuiltinReducer::ReduceObjectCreate fails to ensure that the prototype is "null"

#40089898•Reporter: lo...@google.com
$0
3/24/2018

Security: pdfium: out-of-bounds read with nested colorspaces

#40089904•Reporter: ma...@google.com
$0
3/24/2018

Security: V8: JIT: Type confusion in GetSpecializationContext

#40089912•Reporter: lo...@google.com
$0
3/24/2018

CHECK failure: LoadElement of kRepFloat64 (NumberOrHole) cannot be changed to kRepTagged in rep

#40089901•Reporter: cl...@chromium.org
$0
3/22/2018

Security: V8: JIT: Simplified-lowererer IrOpcode::kStoreField, IrOpcode::kStoreElement optimization bug

#40089761•Reporter: lo...@google.com
$0
3/15/2018
Showing 8981-8990 of 13102 bugs
1...898899900...1311