PT-2026-38126 · Google · Google Chrome

Heapracer · Publicado 2026-05-05 · Atualizado 2026-05-14 · CVE-2026-7933

Positive Technologies (AI Summary) · Pt

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Nome do Software Vulnerável e Versões Afetadas Google Chrome versões anteriores a 148.0.7778.96

Descrição Uma leitura fora dos limites (out of bounds read) no WebCodecs permite que um invasor remoto realize uma leitura de memória fora dos limites por meio de um arquivo de vídeo manipulado.

Recomendações Atualize para a versão 148.0.7778.96 ou posterior.

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

BDU:2026-06942

CVE-2026-7933

ECHO-405A-CF37-AEC7

OPENSUSE-SU-2026:10778-1

Produtos afetados

Google Chrome

Referências · 140

• https://suse.com/security/cve/CVE-2026-7905 · Nota
• https://suse.com/security/cve/CVE-2026-7959 · Nota
• https://suse.com/security/cve/CVE-2026-7954 · Nota
• https://suse.com/security/cve/CVE-2026-7987 · Nota
• https://suse.com/security/cve/CVE-2026-7945 · Nota
• https://suse.com/security/cve/CVE-2026-7970 · Nota
• https://suse.com/security/cve/CVE-2026-7912 · Nota
• https://suse.com/security/cve/CVE-2026-7953 · Nota
• https://suse.com/security/cve/CVE-2026-7975 · Nota
• https://twitter.com/infoflowcloud/status/2052114095600525639 · Publicação no Twitter
• https://suse.com/security/cve/CVE-2026-8003 · Nota
• https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-7983 · Nota
• https://suse.com/security/cve/CVE-2026-7922 · Nota
• https://suse.com/security/cve/CVE-2026-7964 · Nota