CVE-2026-11085

chromium-browser: Integer overflow in GPU

View on CVE.org
Published Jun 4, 2026 CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Description
Integer overflow in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)

Analysis

AI-generated

Technical impact

An integer overflow occurs in the GPU subsystem of Google Chrome for Android that can be triggered by loading a specially crafted HTML page. The flaw allows a remote attacker to perform an out‑of‑bounds memory access, and the Chromium security team has rated it as a medium severity issue.

Affected Systems

Google Chrome for Android versions earlier than 149.0.7827.53 are affected. All newer Chrome releases and other Google Chrome products are not impacted.

Risk and Exploitability

The vulnerability can be exposed remotely through a web page, meaning any device with an Internet browser running the vulnerable Chrome version is at risk. The EPSS score is <1% and the vulnerability is not listed in CISA KEV. With a CVSS score of 8.8, the vulnerability is rated high severity, and the potential for out‑of‑bounds memory access further increases risk. Attackers would likely need to entice the victim to visit or load the malicious page, and further exploitation would depend on additional conditions that are not described in the CVE data.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update Google Chrome to version 149.0.7827.53 or later via the official update channel
  • Enforce Chrome updates across the organization using managed configuration or enterprise policy
  • Implement web filtering or security monitoring to block or detect malicious HTML content that could trigger the vulnerability

Generated by OpenCVE AI on June 5, 2026 at 18:55 UTC.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-6325-1 chromium security update
History
Type Values Removed Values Added
First Time appeared Google android
CPEs cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
Vendors & Products Google android
Type Values Removed Values Added
Title chromium-browser: Integer overflow in GPU
References
Metrics threat_severity

None

 threat_severity

Moderate
Type Values Removed Values Added
Title Google Chrome Android GPU Integer Overflow Leading to Out‑of‑Bounds Memory Access via Crafted Web Page
Type Values Removed Values Added
Weaknesses CWE-190
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}
Type Values Removed Values Added
Title Google Chrome Android GPU Integer Overflow Leading to Out‑of‑Bounds Memory Access via Crafted Web Page
Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome
Type Values Removed Values Added
Description Integer overflow in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
Weaknesses CWE-472
References
Earlier changes (2)
Weaknesses
  • CWE-190

    Integer Overflow or Wraparound

  • CWE-472

    External Control of Assumed-Immutable Web Parameter

Sources

Status
PUBLISHED
Assigner
Chrome
Published
Updated
Jun 5, 2026, 4:49 PM
Reserved
Jun 4, 2026, 5:06 PM

View source JSON

Updated
Jun 5, 2026, 2:18 PM

JSON

Status
Analyzed
Published
Jun 4, 2026, 11:17 PM
Modified
Jul 23, 2026, 7:10 AM

View source JSON

Severity
Moderate
Public date
Jun 2, 2026, 12:00 AM

View source Bugzilla JSON

Updated
Jun 5, 2026, 7:00 PM

JSON