Main Vulnerability Database Vulnerabilities #VU145528

Heap-based buffer overflow in Google Chromium - CVE-2026-79231

Published: August 26, 2026

Vulnerability identifier: #VU145528

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-79231

CWE-ID: CWE-122

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code.

The vulnerability exists due to a heap-based buffer overflow in Media when processing media content. A remote attacker can cause the victim to process specially crafted media content to execute arbitrary code.

User interaction is required to process the crafted content.

Affected software

Google Chromium
Google Chrome

How to mitigate CVE-2026-79231

Install security update from vendor's website.

Google Chromium - update to 152.0.7977.64
Google Chrome - addressed in versions 151.0.7922.175, 152.0.7977.64

External References

Related Security Bulletins