Tweets publicly disclosed bugs in Chromium. Not an official Google product. Run by @SecurityMB. Mastodon: @bugschromium@botsin.space

Because of the migration of Chromium bug tracker from Monorail to Buganizer, this account won't submit new bugs temporarily (until it's migrated to fetch the data from the new source). Sorry!
4
1
17
10,942
Security: arbitrary address access in vrend_renderer_blit_gl (reward: $2000) crbug.com/1483991
1
7
6,765
Use-after-poison in cppgc::internal::HeapVisitor<cppgc::internal::UnmarkedObjectsPoisoner>::Traverse crbug.com/1496001
2
6,290
Use-after-poison in cppgc::internal::MarkingStateBase::MarkAndPush crbug.com/1496806
1
2,499
Security: Contextual search selection offsets should be sanitized crbug.com/1343955
2,239
chrome.inspectedWindow.eval execution on Web Store with trailing URL dot (reward: $5000) crbug.com/1472898
7
31
20,246
Security: Chrome OS: Multiple controllable OOB write bugs in Qcom camx drivers may cause sandbox escape to kernel crbug.com/1472961
5
1,755
Security: Race Condition UAF in virtio_transport_space_update (reward: $2000) crbug.com/1486350
1
3
1,574
Use-after-poison in blink::HTMLPlugInElement::DetachLayoutTree crbug.com/1495512
1
4
1,592
heap-buffer-overflow in ~SingleShotFrameHandler(imagecapture/image_capture_frame_grabber.cc) (reward: $8000) crbug.com/1494573
1
4
1,785
lightweight-heap-use-after-free : web_app::WebAppCommandManager::StartCommand crbug.com/1495279
1,292
Security: UAF in gpu::ClientSharedImageInterface::DestroySharedImage(browser process) (reward: $2000) crbug.com/1453577
1
7
2,489
Security: Heap buffer overflow write due to bound check missing crbug.com/1474410
3
1,194
Security: Out-of-Bound Write due to bound check missing (reward: $5000) crbug.com/1474415
1
3
1,615
Security: Integer-Overflow in ChapsAdaptor::GenerateRandom crbug.com/1476281
1
1,062
Heap-buffer-overflow in v8::internal::Simulator::WriteW crbug.com/1488199
1
1,063
Security: readanything render frame UAF fix of crbug.com/1488268 is not robust. (reward: $2000) crbug.com/1492396
1
6
1,774
Security: Heap-use-after-free in ReadAnythingUntrustedPageHandler::LogTextStyle (reward: $2000) crbug.com/1493380
1
4
1,536
security: libmbim | out-of-bounds access on mbim-message.c (reward: $250) crbug.com/1474639
1
2
1,303