Patch Ticker

Chrome WebGL out-of-bounds write allows code execution

Opening a malicious web page in Chrome on Android can get your phone hacked!

Summary

An out-of-bounds write in WebGL in Google Chrome lets a remote attacker run arbitrary code outside the sandbox via a crafted HTML page. Chrome on Android is affected.

What to do

Update to 156.0.8078.47 or later.

Products and platforms

  • Android
  • Chrome

CVE IDs

Sources

Times

First published

First seen