VULNERABILITY INTELLIGENCE
CVE-2026-41157
CVSS score9.8 CRITICAL
EPSS probability0.36%
CISA KEVNot currently listed
Published2026-06-12
Last modified2026-10-25
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger an out-of-bound write in the GPU user-space driver, leading to memory corruption and possible browser/GPU process crash. The software computes a required memory size from untrusted input, but integer overflow can produce a value smaller than needed. Subsequent write operations may then occur past the intended memory boundary, corrupting adjacent memory and causing process instability or termination.
Weakness classification
- 367425dc-4d06-4041-9650-c2dc6aaa27ce: CWE-787