CVE-2026-65587
Received Received - Intake

WebGPU Memory Corruption in GPU GLES Driver

Publication date: 2026-10-30

Last updated on: 2026-10-30

Assigner: imaginationtech

Description
A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger an OOB write in the GPU user-space driver, leading to memory corruption and possible browser/GPU process crash. The software writes data past the end of an intended memory offset. Writing outside the bounds of allocated memory can corrupt adjacent memory, crash the process, or cause undefined behaviour.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-30
Last Modified
2026-10-30
Generated
2026-10-30
AI Q&A
2026-10-30
EPSS Evaluated
N/A
NVD
CVE-2026-65587
EUVD
EUVD-2026-113479

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves a web page with unusual WebGPU content triggering an out-of-bounds (OOB) write in the GPU user-space driver. This can lead to memory corruption and potentially crash the browser or GPU process.

Detection Guidance

This vulnerability involves a memory corruption issue in GPU drivers triggered by WebGPU content. Detection requires monitoring for crashes in browser or GPU processes and analyzing memory corruption patterns. No specific commands are provided in the context.

Impact Analysis

The vulnerability may cause your browser or GPU process to crash when visiting a malicious or compromised website. It could also lead to undefined behavior or system instability if memory corruption occurs.

Compliance Impact

This vulnerability involves memory corruption due to out-of-bounds writes in GPU drivers, which could lead to crashes or undefined behavior. Such issues may compromise system stability and data integrity but do not directly indicate data exposure or unauthorized access required for GDPR or HIPAA violations.

Mitigation Strategies

Disable WebGPU content in your browser settings or use a browser version that patches this issue. Monitor GPU processes for crashes or memory corruption as potential indicators of exploitation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-65587. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart