Disclosed Chromium Security Bugs

Stack-buffer-overflow in SkPackBits::Unpack8

#40082057Reporter: cl...@gmail.com
$5,000
10/1/2016

Heap-double-free in SkPictureData::~SkPictureData

#40082058Reporter: cl...@gmail.com
$5,000
10/1/2016

UNKNOWN in _fini

#40082059Reporter: cl...@gmail.com
$5,000
10/1/2016

Heap-buffer-overflow in SkData::NewUninitialized

#40082061Reporter: cl...@gmail.com
$5,000
10/1/2016

ASSERTION FAILED: !node || (node->isContainerNode())

#40082199Reporter: cl...@chromium.org
$0
10/1/2016

Heap-use-after-free in blink::DeprecatedPaintLayer::setGroupedMapping

#40082450Reporter: mi...@gmail.com
$3,500
10/1/2016

Heap-use-after-free in v8::internal::MemoryReducer::TimerTask::Run

#40082480Reporter: th...@gmail.com
$3,500
10/1/2016

Security: Overflow in VertexBufferInterface::reserveVertexSpace causes memory-safety bug

#40082652Reporter: go...@lastland.net
$5,000
10/1/2016

Security: Memory-safety bug in Image11::map

#40082666Reporter: go...@lastland.net
$1,000
10/1/2016

Bad-cast to blink::ScriptWrappable from blink::WorkerWebSocketChannel;DOMWrapperMap.h:148:20

#40082850Reporter: th...@gmail.com
$3,500
10/1/2016
Showing 9171-9180 of 13102 bugs