CVE-2026-95349

Summary

This flaw involves a buffer overflow in WebGL in Google Chrome on Android, allowing remote attackers to potentially execute arbitrary code outside the sandbox via a crafted HTML page.

Exploitability

Exploitation is relatively straightforward given the attacker can craft a specific HTML page to trigger the buffer overflow.

Blast radius

If exploited, this could lead to full system compromise, as the code execution is outside the sandbox.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Chrome version 154.0.8037.57 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.