CVE-2026-41157General

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger an out-of-bound write in the GPU user-space driver, leading to memory corruption and possible browser/GPU process crash. The software computes a required memory size from untrusted input, but integer overflow can produce a value smaller than needed. Subsequent write operations may then occur past the intended memory boundary, corrupting adjacent memory and causing process instability or termination.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • General: 1 classified signal
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-06-13); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-06-13: 1Mentions · 2026-06-14: 1Technical Details · 2026-06-14: 106-1306-14
Signal classification2 categories
General
150.0%
Disclosure
150.0%
Referenced assets2 URLs
By indicator
Classification over time
DateTotalLabels
2026-06-131
General1
2026-06-141
Disclosure1
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-41157 A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger an out-of-bound write in the GPU user-space driver, leading to… https://www.cve.org/CVERecord?id=CVE-2026-41157

    Post summary

    Highlights the disclosure of a CVE-2026-41157 vulnerability involving WebGPU content triggering an out-of-bounds write in the GPU driver, with a link to the official CVE record but lacking exploitation or remediation details.

    00000241
    57.6K followersView on X
  • VulDB 🛡@vuldb
    General

    The severity is increased for this new vulnerability affecting Imagination Graphics DDK (CVE-2026-41157) https://vuldb.com/vuln/370729

    Post summary

    The post notes an increase in severity for CVE‑2026‑41157 affecting Imagination Graphics DDK and provides a link to a VULDB entry, but gives no further technical, exploit, or mitigation details.

    0000040
    2.2K followersView on X

Explore more