Medium chrome Memory Corruption 📄 Reporter bug report

Overview

Medium
Severity
—
CVSS
No
Exploited ITW
Embargoed
Fix Status
ImpactMemory corruption in Audio
DescriptionMemory corruption in Audio
ComponentAudio
Sub-componentInternals>Media>Audio
Bug ClassMemory Corruption
Tracker561787556
CISA KEVNot listed
CreditedGoogle
Disclosed2026-10-20

Fix not yet public

No public source fix for this bug has been identified on the main branch yet — it is embargoed or not yet disclosed. Root-cause analysis is withheld until the fix commit is available.

Original Bug Report

reported by 24...@project.gserviceaccount.com

flac_audio_handler_fuzzer: Use-of-uninitialized-value in read_frame_

Detailed Report: https://clusterfuzz.com/testcase?key=4938252389744640

Fuzzing Engine: libFuzzer Fuzz Target: flac_audio_handler_fuzzer Job Type: libfuzzer_chrome_msan_schemav1 Platform Id: linux

Crash Type: Use-of-uninitialized-value Crash Address: Crash State: read_frame_ FLAC__stream_decoder_process_single media::FlacAudioHandler::CopyPartialFramesTo

Sanitizer: memory (MSAN)

Recommended Security Severity: Medium

Crash Revision: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_msan_schemav1&revision=1697132

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4938252389744640

Issue filed automatically.

See https://www.chromium.org/developers/testing/memorysanitizer#TOC-Reproducing-ClusterFuzz-Bugs for instructions on reproducing this bug locally.

View on issue tracker