CVE-2026-5282

HIGH8.1EPSS 0.15%
Published: 4/1/2026Modified: 4/28/2026
Also known as:DEBIAN-CVE-2026-5282

Description

Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1HIGH8.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

References (1)