Executive Summary

This vulnerability occurs when a web page containing unusual WebGPU content is loaded into the GPU GLES render process. It can trigger an out-of-bound write in the GPU user-space driver.

The root cause is that the software calculates a required memory size based on untrusted input, but due to an integer overflow, the computed size can be smaller than actually needed.

As a result, subsequent write operations may exceed the intended memory boundary, leading to memory corruption.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can cause memory corruption in the GPU user-space driver.

This memory corruption may lead to instability or termination of the browser or GPU process, potentially causing crashes.

Useful 0 Not Useful 0