CVE-2026-13858

Summary

Out of bounds read in FFmpeg in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted video file. (Chromium security severity: Medium)

Affected Software

VendorProductVersion RangeStatus
GoogleChrome150.0.7871.47 < 150.0.7871.47affected

Weaknesses

  • CWE-125: Out of bounds read

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References