Description
Out of bounds read in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
Published: 2026-05-28
Score: 9.6 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

An out-of-bounds read in the WebGL subsystem of Google Chrome on Android—affecting all releases prior to 148.0.7778.216—enables a remote attacker to potentially escape the browser sandbox by delivering a crafted HTML page. The flaw is a boundary violation (CWE‑125) and, if successfully exploited, could give the attacker unrestricted code‑execution rights on the device.

Affected Systems

Google Chrome on Android devices, any revision before the 148.0.7778.216 release. Users of the Chrome stable channel who have not yet updated are vulnerable.

Risk and Exploitability

Chromium labels the issue as Critical, but it is not listed in CISA’s KEV catalog and an EPSS score is not available. Exploitation requires a malicious webpage to be opened by a user, so the threat level depends on user exposure to such content. Successful exploitation could lead to remote code execution once the sandbox boundary is breached.

Generated by OpenCVE AI on May 29, 2026 at 14:25 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Install the latest Google Chrome update (148.0.7778.216 or newer) via the Google Play Store or device system updates.
  • If an immediate update is not available, disable WebGL by opening chrome://flags/#enable-webgl and setting it to "Disabled" to remove the vulnerable code paths.
  • Maintain an up‑to‑date Android operating system and all other applications to ensure other security patches are in place.

Generated by OpenCVE AI on May 29, 2026 at 14:25 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 29 May 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Fri, 29 May 2026 12:15:00 +0000

Type Values Removed Values Added
Title Out-of-bounds WebGL read enabling potential sandbox escape chromium-browser: Out of bounds read in WebGL
References
Metrics threat_severity

None

 cvssV3_1

{'score': 9.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H'}

threat_severity

Critical

Fri, 29 May 2026 02:15:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Thu, 28 May 2026 23:45:00 +0000

Type Values Removed Values Added
Title Out-of-bounds WebGL read enabling potential sandbox escape

Thu, 28 May 2026 22:45:00 +0000

Type Values Removed Values Added
Description Out of bounds read in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
Weaknesses CWE-125
References

Subscriptions

Google Chrome
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-05-29T15:18:57.549Z

Reserved: 2026-05-28T17:24:41.074Z

Link: CVE-2026-9875

cve-icon Vulnrichment

Updated: 2026-05-29T15:18:53.159Z

cve-icon NVD

Status : Undergoing Analysis

Published: 2026-05-28T23:16:45.443

Modified: 2026-05-29T16:16:33.820

Link: CVE-2026-9875

cve-icon Redhat

Severity : Critical

Publid Date: 2026-05-27T00:00:00Z

Links: CVE-2026-9875 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-05-29T14:30:37Z

Weaknesses