Project Zero Bugs@ProjectZeroBugsNov 5Automated by @landaireSamsung: libsimba.heifdec.media.samsung.so attacker-controlled free() in HEIF item-property parsing (sheifd_parse) project-zero.issues.chromium.org/issues/5372237…7295.1K
Project Zero Bugs@ProjectZeroBugsNov 5Automated by @landaireSamsung libsecwavextractor.so: Heap Buffer Overflow (OOB Write) in IMA-ADPCM WAV Decoding (WAVSource::read) project-zero.issues.chromium.org/issues/5421393…1223.5K
Project Zero Bugs@ProjectZeroBugsNov 5Automated by @landaireSamsung: libsimba.heifdec.media.samsung.so arbitrary relative/absolute read in HEIF tonemap-metadata parsing (sheifd_get_info_item) project-zero.issues.chromium.org/issues/5372665…3133K
Project Zero Bugs@ProjectZeroBugsNov 4Automated by @landaireSamsung sgpu: File-level Reference Count Underflow via Gang Submit Logic Inversion in `amdgpu_job_free_cb` project-zero.issues.chromium.org/issues/5325258…3244.5K
Project Zero Bugs@ProjectZeroBugsNov 2Automated by @landaireBrotli: heap out-of-bounds read and write in the decoder's internal input buffer (DecodeBlockTypeAndLength) project-zero.issues.chromium.org/issues/5653081…95118K