DEBIAN-CVE-2026-121229: Critical severity debian/chromium vulnerability
Memory corruption in ANGLE in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
An attacker can attempt exploitation remotely by serving a crafted HTML page. The supplied vector indicates that user interaction is required and that the attacker does not need prior privileges.
What is the potential impact of successful exploitation?
Successful exploitation may allow arbitrary code execution outside the browser sandbox. The reported impact includes high confidentiality, integrity, and availability effects.
How can I determine whether an Android Chrome installation is affected?
The issue affects Google Chrome on Android versions earlier than 157.0.8103.38. The provided data does not specify which Debian chromium package versions correspond to that Chrome version.