DEBIAN-CVE-2026-121247: Buffer Overflow
Published Nov 3, 2026
·Updated
Buffer overflow in Dawn in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 3, 2026
CVE Published
via OSV·09:17 PM
Data Sourced
via OSV·09:17 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What conditions are required for exploitation?
An attacker can deliver a crafted HTML page remotely. Exploitation requires user interaction, but does not require attacker privileges.
2
What is the stated impact if exploitation succeeds?
A successful attack may allow arbitrary code execution outside the sandbox, with high confidentiality, integrity, and availability impact.
3
Does the available information confirm which Debian Chromium versions are affected?
No. The record identifies debian/chromium as the software entry, while the vulnerability description specifies Google Chrome on Android before 157.0.8103.38; it does not provide Debian Chromium version ranges.