Heap buffer overflow in Chrome WebGL

Successful exploitation allows a remote attacker to cause out-of-bounds memory access in Chrome via malicious web content. The provided content specifically states out-of-bounds memory read, which can result in information disclosure and browser instability or crash. Supporting context also notes that Chrome memory corruption flaws of this class may contribute to broader exploit chains and, depending on surrounding conditions, may help enable more serious outcomes such as code execution or host compromise, but the specific confirmed impact here is an out-of-bounds read via WebGL.

Apply the vendor patch as soon as possible and ensure browser restart after update so the fix takes effect. Until patching is complete, reduce exposure to untrusted web content, restrict access to arbitrary websites where feasible, and use enterprise patch management to accelerate deployment across managed systems. The content does not provide a component-specific workaround short of updating.

Update Google Chrome to version 146.0.7680.165 or later. The provided content indicates that versions prior to 146.0.7680.165 are vulnerable. Because Chromium-based browsers may inherit the same vulnerable code, corresponding vendor updates should also be applied where relevant.