{"id":"CVE-2026-65587","kind":"vulnerability","aliases":["CVE-2026-65587"],"related":[],"title":"Chrome GPU process: crafted WebGPU page can corrupt memory and crash","description":"A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger an OOB write in the GPU user-space driver, leading to memory corruption and possible browser/GPU process crash.\n\n\n\nThe software writes data past the end of an intended memory offset. Writing outside the bounds of allocated memory can corrupt adjacent memory, crash the process, or cause undefined behaviour.","summary":"A web page with unusual WebGPU content can make the GPU user-space driver write past the end of a buffer. The result is memory corruption that can crash the browser or GPU process.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browsers","chrome","other","webgpu"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-30T02:17:09+00:00","first_seen_at":"2026-10-30T02:28:06+00:00","triaged_at":"2026-10-30T02:30:10+00:00","updated_at":"2026-10-30T02:30:10+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-10-30T02:30:10Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Chrome GPU process: crafted WebGPU page can corrupt memory and crash","impact":"medium","summary":"A web page with unusual WebGPU content can make the GPU user-space driver write past the end of a buffer. The result is memory corruption that can crash the browser or GPU process.","audience":"everyone","category":"other","nicknames":[],"who_cares":["chrome","webgpu","browsers"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"browser or GPU process crashes; memory corruption in the GPU driver","analyst_note":"Confirm the affected browser products and fixed versions from the NVD entry and the vendor's advisory.","how_to_check":"unknown","plain_action":"Update your browser (such as Chrome) to the latest version once the vendor releases a fix; the sources do not name a fixed version.","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000608,"input_tokens":4149,"output_tokens":386,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-65587':14A,17A 'adjac':114C 'alloc':110C 'behaviour':122C 'bound':108C 'browser':18B,53B 'browser/gpu':90C 'buffer':43B 'caus':120C 'chrome':1A,19B 'contain':61C 'content':28B,64C 'corrupt':8A,48B,87C,113C 'craft':4A 'crash':11A,51B,92C,116C 'cve':12A,15A 'data':96C 'driver':36B,83C 'end':40B,99C 'gles':69C 'gpu':2A,32B,55B,68C,79C 'intend':102C 'lead':84C 'load':65C 'make':30B 'memori':9A,47B,86C,103C,111C,115C 'offset':104C 'oob':75C 'outsid':106C 'page':6A,24B,59C 'past':38B,97C 'possibl':89C 'process':3A,56B,71C,91C,118C 'render':70C 'result':45B 'softwar':94C 'space':35B,82C 'trigger':73C 'undefin':121C 'unusu':26B,62C 'user':34B,81C 'user-spac':33B,80C 'web':23B,58C 'webgpu':5A,21B,27B,63C 'write':37B,76C,95C,105C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":"Update your browser (such as Chrome) to the latest version once the vendor releases a fix; the sources do not name a fixed version.","first_public_at":"2026-10-30T02:17:09+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-65587","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65587","severity":null,"published_at":"2026-10-30T02:17:09+00:00","modified_at":"2026-10-30T02:17:09+00:00","first_seen_at":"2026-10-30T02:28:06+00:00","fetched_at":"2026-10-30T02:28:06+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}