Executive brief
Google Chrome's Skia graphics rendering engine contained an out-of-bounds memory reading vulnerability that could allow an attacker with a compromised renderer process to read sensitive memory from within the browser sandbox. An attacker would need to trick a user into viewing a specially crafted webpage to exploit this issue, potentially exposing cached data or sensitive information processed by the browser.
Technical details
The vulnerability is an out-of-bounds read in Google Chrome's Skia graphics library, present in versions prior to 152.0.7977.65. It requires a compromised renderer process (post-sandbox-escape condition) combined with a malicious HTML page to trigger the out-of-bounds memory access. The attacker can read memory within the sandbox boundary, though not beyond it. The vulnerability was patched in Chrome 152.0.7977.65. Attack vector is network-based via crafted HTML content, and no user interaction beyond visiting a malicious page is required.
Affected products
- Google Chrome prior to 152.0.7977.65
Timeline
- 2026-08-25: disclosed
- 2026-08-25: patched: Chrome 152.0.7977.65