CVE-2026-41157

Description

A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger an out-of-bound write in the GPU user-space driver, leading to memory corruption and possible browser/GPU process crash. The software computes a required memory size from untrusted input, but integer overflow can produce a value smaller than needed. Subsequent write operations may then occur past the intended memory boundary, corrupting adjacent memory and causing process instability or termination.

PUBLISHED Reserved 2026-04-17 | Published 2026-06-12 | Updated 2026-06-16 | Assigner imaginationtech

Problem types

CWE-787: Out-of-bounds Write

Product status

References

www.imaginationtech.com/gpu-driver-vulnerabilities/

cve.org (CVE-2026-41157)

nvd.nist.gov (CVE-2026-41157)

Download JSON