CVE-2026-3542

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 145.0.7632.159

Description An improper implementation in WebAssembly in Google Chrome prior to version 145.0.7632.159 allows a remote attacker to perform out-of-bounds memory access via a crafted HTML page. The issue resides within the WebAssembly component, specifically related to the asm.js and asm parser functionalities when handling invalid WebAssembly modules. This can lead to a heap-buffer-overflow in the ShiftExpression function.

Recommendations Update Google Chrome to version 145.0.7632.159 or later.