CVE Vulnerability Catalog

The MathJax: LaTeX for Drupal module does not properly neutralize input during web page generation, enabling cross-site scripting (XSS). This affects versions from 0.0.0 to 4.1.2.

The Entity Reference Manager (Merge entities) module for Drupal contains an incorrect authorization vulnerability enabling forceful browsing. This affects versions from 0.0.0 to 1.0.3.

A vulnerability was found in the ECA Helper module for Drupal, with details not provided in the description. This affects all versions of the module (*.*).

The Block AJAX module for Drupal improperly controls modification of dynamically-determined object attributes, enabling object injection. This affects versions from 0.0.0 to 3.0.2.

A flaw in the ChunkReader component of the Undertow web server mishandles chunk size validation for chunked transfer encoding. The size check occurs before the value is shifted, allowing a crafted 15-digit chunk size to bypass the limit and overflow internal state flags.

Unusual WebGPU content loaded into the GPU GLES render process can trigger an out-of-bounds read and/or write crash in the GPU GLES user-space shared library. On some platforms the graphics process runs with system privileges.

On GPU systems with the fix for CVE-2026-49746 applied, the graphics buffer mapping range is limited, causing errors when mapping outside that range. Integer truncation when mapping GPU buffer pages in the 0GB-4GB range produces errors and limits kernel mode driver functionality.

Unusual WebGPU content loaded into the GPU GLES render process can trigger an out-of-bounds write in the GPU user-space driver, leading to memory corruption and possible browser/GPU process crash.

Software run as a non-privileged user may conduct improper GPU system calls to free memory still in use, replace it with another allocation, and cause arbitrary reads or writes to physical memory pages.

Software run as a non-privileged user may conduct improper GPU system calls causing a stack overflow in the kernel when processing resolved Linux/Android fence synchronization checkpoints. Successful exploitation can cause kernel memory corruption and typically results in denial of service via kernel crash.

Software run as a non-privileged user may conduct improper system calls to allocate physical memory. A 32-bit integer overflow in the KM driver during page-to-byte conversion of an allocation size can result in an undersized kernel buffer allocation.

A vulnerability in the GPU compiler process allows a web page containing unusual GPU shader code to cause a memory allocation failure. If the allocation failure is not properly handled, the compiler may dereference a NULL pointer at a controlled offset, resulting in a crash of the compiler process. On certain platforms, when the compiler process has system privileges, this could lead to crashes or enable further exploits on the device. The weakness results from performing arithmetic operations on values derived from the shader program without properly preventing integer overflow, which can cause incorrect memory size calculations and subsequent invalid program behaviour.

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause a race condition in the destruction path of the hardware performance counters buffer, leading to a read and/or write use-after-free (UAF). The race condition could lead to the reference counter being decremented in a non-atomic way, allowing other code paths using a freed object to read and/or write kernel heap memory.

In Eye of GNOME, parsing a crafted PNG image with malformed color profile metadata fails to validate chunk boundaries while searching for a null terminator. This causes the application to read past the allocated buffer.

Ghostscript has improper bounds validation when processing indexed color values in mesh shading data. A remote attacker can entice a user to process a crafted PDF or PostScript document, triggering an out-of-bounds memory read.

Incorrect authorization in the Input component of Google Chrome prior to 156.0.8078.79. A remote attacker leveraging social engineering could bypass the web origin policy via a crafted HTML page.

An incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page.

An improper input validation in Network in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted network traffic.

An incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page.

A vulnerability in CacheStorage in Google Chrome before version 156.0.8078.79 leads to information loss. A remote attacker can obtain cross-origin data via a crafted HTML page.