CVE-2026-121176 Details
Description
Uninitialized resource in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
A vulnerability exists in Google Chrome versions prior to 157.0.8103.38, specifically within the Media component. This issue involves an uninitialized resource in the FFmpeg MOV demuxer, which can be exploited by a remote attacker to read memory from the renderer process sandbox. The vulnerability arises when a crafted HTML page is used to play a hybrid MP4 video file. The MP4 file is manipulated so that the total number of time-to-sample entries is less than the sample count, creating a scenario where uninitialized heap memory is promoted into live entries. This stale data can then be accessed through JavaScript via the 'video.buffered' property and the 'requestVideoFrameCallback' method, which exposes the same information through the 'mediaTime' metadata.
Users can update to Google Chrome version 157.0.8103.38 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Nov 4, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html | [email protected] | Release NotesVendor Advisory |
| https://issues.chromium.org/issues/568986882 | [email protected] | ExploitIssue TrackingVendor AdvisoryMitigation |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-908 | Use of Uninitialized Resource | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| google chrome | < 157.0.8103.38 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 5, 2026 | Initial Analysis | [email protected] |
| Nov 4, 2026 | CVE Modified | CISA-ADP |
| Nov 3, 2026 | New CVE Received | [email protected] |