PT-2026-88743

CVE-2026-87643

Published

2026-09-09

Updated

2026-09-16

Description by

CVSS 3.1

9.6

Critical

MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 153.0.8010.36

Description An integer overflow exists in the GPU component. This flaw allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. An integer overflow occurs when an arithmetic operation attempts to create a numeric value that exceeds the maximum size of the integer type used to store it.

Recommendations Update Google Chrome on Android to version 153.0.8010.36 or later.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-190: Integer Overflow or Wraparound

Related identifiers

CVE-2026-87643

ECHO-BA31-1F4A-0249

OPENSUSE-SU-2026:11750-1