---
id: "CVE-2026-65587"
kind: "vulnerability"
aliases: ["CVE-2026-65587"]
title: "Chrome GPU process: crafted WebGPU page can corrupt memory and crash"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["browsers", "chrome", "other", "webgpu"]
not_affected_if: []
published_at: "2026-10-30T02:17:09+00:00"
first_seen_at: "2026-10-30T02:28:06+00:00"
updated_at: "2026-10-30T02:30:10+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65587", "first_seen_at": "2026-10-30T02:28:06+00:00"}]
---

# Chrome GPU process: crafted WebGPU page can corrupt memory and crash

A web page with unusual WebGPU content can make the GPU user-space driver write past the end of a buffer. The result is memory corruption that can crash the browser or GPU process.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-10-30T02:28:06+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-65587

## From the sources

A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger an OOB write in the GPU user-space driver, leading to memory corruption and possible browser/GPU process crash.



The software writes data past the end of an intended memory offset. Writing outside the bounds of allocated memory can corrupt adjacent memory, crash the process, or cause undefined behaviour.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_