Executive brief
Google Chrome is a widely used web browser. A vulnerability in its Tint component, which handles graphics shaders, could allow a remote attacker to access sensitive information or interfere with the browser's memory. This occurs when a user visits a specially crafted, malicious website, potentially leading to a compromise of the user's session or data.
Technical details
An out-of-bounds memory access vulnerability exists in the Tint component of Google Chrome. Tint is the compiler for the WebGPU Shading Language (WGSL). The flaw stems from an inappropriate implementation that fails to properly restrict operations within the bounds of a memory buffer (CWE-119). A remote, unauthenticated attacker can exploit this by enticing a user to visit a malicious HTML page. Successful exploitation allows the attacker to perform unauthorized memory reads or writes, which can lead to information disclosure or arbitrary code execution within the browser's sandbox. The issue is resolved in Chrome version 147.0.7727.138.
Affected products
- Google Chrome prior to 147.0.7727.138
Timeline
- 2026-04-13: other: Reported to Chromium by Google researchers
- 2026-04-28: disclosed: Public disclosure and stable channel update release
- 2026-04-28: patched: Fixed in version 147.0.7727.138