CVE-2026-11672

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.103

Description A heap buffer overflow exists in the GPU component. This issue allows a remote attacker who has already compromised the renderer process to potentially achieve a sandbox escape by using a specially crafted HTML page. A heap buffer overflow occurs when a program writes more data to a heap-allocated memory block than it can hold, potentially corrupting adjacent memory.

Recommendations Update to version 149.0.7827.103 or later.