High · published December 17, 2025
🚨 A crafty HTML page can lead to heap corruption in Google Chrome, and the implications are more serious than you’d think! ⚡ Think of WebGPU like a busy restaurant kitchen. If a chef is allowed to use a cooking tool that's been improperly cleaned and still has remnants of previous orders, they might accidentally mix up ingredients, leading to a disastrous meal! An attacker could exploit this vulnerability to manipulate memory, potentially executing arbitrary code or causing crashes. This could lead to unexpected behavior in the browser, jeopardizing user data and privacy, or even allowing full control of the device!
Think of WebGPU like a busy restaurant kitchen. If a chef is allowed to use a cooking tool that's been improperly cleaned and still has remnants of previous orders, they might accidentally mix up ingredients, leading to a disastrous meal! This vulnerability arises due to a "use after free" error in WebGPU, where the software fails to properly manage memory, allowing access to freed memory locations. A maliciously crafted HTML page can trigger this flaw, leading to heap corruption.
An attacker could exploit this vulnerability to manipulate memory, potentially executing arbitrary code or causing crashes. This could lead to unexpected behavior in the browser, jeopardizing user data and privacy, or even allowing full control of the device! Update Google Chrome to version 143.0.7499.147 or later immediately to mitigate this risk. Regularly review and implement security updates to keep your browser and system secure. Don't forget to educate users about the risks of opening unfamiliar links! You've got this! Just follow these steps and you'll keep your browsing safe and sound. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| google/chrome | < 143.0.7499.146 | 143.0.7499.146 |