{"id":"CVE-2026-113304","kind":"vulnerability","aliases":["CVE-2026-113304"],"related":[],"title":"Chrome on Android: GPU memory corruption lets a crafted page read sandbox memory","description":"Memory corruption in GPU in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","summary":"A memory corruption bug in the GPU component of Google Chrome on Android lets a remote attacker read memory inside the browser sandbox when a victim opens a crafted HTML page. The flaw is fixed in Chrome 156.0.8078.47.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"google chrome","fixed":["156.0.8078.47"],"affected":"< 156.0.8078.47","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["android","chrome","mobile","other"],"not_affected_if":["chrome-updated"],"how_to_check":"- Open Chrome on the Android device, go to Settings > About Chrome, and read the version number\n- Check that the installed version is `156.0.8078.47` or later","fix":"- Update Google Chrome on Android to `156.0.8078.47` or later through Google Play","status":"open","published_at":"2026-10-20T22:19:24+00:00","first_seen_at":"2026-10-23T21:57:24+00:00","triaged_at":"2026-10-25T03:52:54+00:00","updated_at":"2026-10-25T03:52:54+00:00","category":"other","confidence":0.7,"triage":{"at":"2026-10-25T03:52:54Z","model":"claude-haiku-5-5","output":{"fix":"- Update Google Chrome on Android to `156.0.8078.47` or later through Google Play","reach":"internet","title":"Chrome on Android: GPU memory corruption lets a crafted page read sandbox memory","impact":"low","summary":"A memory corruption bug in the GPU component of Google Chrome on Android lets a remote attacker read memory inside the browser sandbox when a victim opens a crafted HTML page. The flaw is fixed in Chrome 156.0.8078.47.","category":"other","nicknames":[],"who_cares":["chrome","android","mobile"],"confidence":0.7,"needs_auth":"no","worst_case":"Attacker reads memory inside the browser sandbox from a crafted page","analyst_note":"","how_to_check":"- Open Chrome on the Android device, go to Settings > About Chrome, and read the version number\n- Check that the installed version is `156.0.8078.47` or later","needs_analyst":false,"not_affected_if":["chrome-updated"],"who_is_affected":"Devices running Google Chrome on Android older than `156.0.8078.47` are affected, and the attack needs a victim to load a crafted page. Managed fleets that pin Chrome versions or block browser updates should check their own version. Users on other browsers or on desktop platforms are not covered by this entry.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"medium"},"cost_usd":0.000578,"input_tokens":3337,"output_tokens":488,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-113304':16A,19A '-2026':15A,18A '156.0.8078.47':62B,75C 'allow':76C 'android':3A,22B,37B,72C 'attack':41B,79C 'browser':46B 'bug':28B 'chrome':1A,21A,23B,35B,61B,69C 'chromium':92C 'compon':32B 'corrupt':6A,27B,64C 'craft':9A,53B,89C 'cve':14A,17A 'fix':59B 'flaw':57B 'googl':34B,68C 'google':20A 'gpu':4A,31B,66C 'html':54B,90C 'insid':44B,84C 'let':7A,38B 'medium':95C 'memori':5A,13A,26B,43B,63C,83C 'mobil':24B 'open':51B 'page':10A,55B,91C 'potenti':81C 'prior':73C 'read':11A,42B,82C 'remot':40B,78C 'sandbox':12A,47B,86C 'secur':93C 'sever':94C 'via':87C 'victim':50B","nicknames":[],"mitigations":[],"who_affected":"Devices running Google Chrome on Android older than `156.0.8078.47` are affected, and the attack needs a victim to load a crafted page. Managed fleets that pin Chrome versions or block browser updates should check their own version. Users on other browsers or on desktop platforms are not covered by this entry.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:19:24+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113304","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113304","severity":null,"published_at":"2026-10-20T22:19:24+00:00","modified_at":"2026-10-22T11:57:23+00:00","first_seen_at":"2026-10-23T21:57:24+00:00","fetched_at":"2026-10-23T22:28:59+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}