CVE-2026-12019

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.115

Description A heap buffer overflow exists in the Codecs component. This issue allows a remote attacker who has already compromised the renderer process to potentially achieve a sandbox escape by using a specially crafted HTML page. A heap buffer overflow occurs when a program writes more data to a heap-allocated memory block than it can hold, potentially corrupting adjacent memory.

Recommendations Update to version 149.0.7827.115 or later.