Description
Integer overflow in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Low)
Published: 2026-04-08
Score: n/a
EPSS: n/a
KEV: No
Impact: Out‑of‑Bounds Memory Write
Action: Update Browser
AI Analysis

Impact

An integer overflow occurs in the WebRTC component of Google Chrome, allowing a remote attacker to perform an out‑of‑bounds memory write by serving a specially crafted HTML page. The issue is classified as a low‑severity vulnerability and does not explicitly state that it leads to arbitrary code execution.

Affected Systems

Versions of Google Chrome older than 147.0.7727.55 on all desktop platforms are affected, regardless of operating system.

Risk and Exploitability

The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, implying no reported active exploits to date. The likely attack vector is a remote web‑based scenario where a user visits a malicious page in Chrome, and no elevated privileges are required. Given the low severity classification and absence of known exploits, the overall risk is moderate to low, but prompt patching is advised.

Generated by OpenCVE AI on April 8, 2026 at 23:35 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade Google Chrome to version 147.0.7727.55 or later

Generated by OpenCVE AI on April 8, 2026 at 23:35 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 09 Apr 2026 08:30:00 +0000

Type Values Removed Values Added
Title Out‑of‑Bounds Memory Write via WebRTC Integer Overflow
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Wed, 08 Apr 2026 21:30:00 +0000

Type Values Removed Values Added
Description Integer overflow in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Low)
Weaknesses CWE-472
References

cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-04-08T21:21:05.665Z

Reserved: 2026-04-08T19:34:46.388Z

Link: CVE-2026-5912

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-04-08T22:16:31.110

Modified: 2026-04-08T22:16:31.110

Link: CVE-2026-5912

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-09T08:26:06Z

Weaknesses