PatchGap
Chrome · Tint

CVE-2026-79239

OOB in Tint
Low CVSS 6.5 chrome OOB

Overview

Low
Severity
6.5
CVSS
No
Exploited ITW
Embargoed
Fix Status
ImpactOut of bounds read in Tint
DescriptionOut of bounds read in Tint
ComponentTint
Bug ClassOOB
Tracker520781436
CWECWE-125 (Out-of-bounds read)
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CISA KEVNot listed
CreditedMichal Andryskowski, Imperial College London
Reported2026-06-07 (per vendor advisory)
Disclosed2026-08-25

Fix not yet public

No public source fix for this bug has been identified on the main branch yet — it is embargoed or not yet disclosed. Root-cause analysis is withheld until the fix commit is available.

Original Bug Report

The reporter's bug is still restricted on the tracker. Chrome de-restricts security bugs ~30–90 days after the fix ships; a later run will backfill it here.
On This Page