Threats tagged 'ghsa-33qj-632f-3294'

A critical out-of-bounds write vulnerability exists in the WebGL component of Google Chrome on Android versions prior to 156.0.8078.47. This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox by convincing a user to visit a crafted HTML page. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability.