CVE-2026-95332

Description

An use of uninitialized variable flaw was found in the Tint component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=546639650

Statement

Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.

Understanding the Weakness (CWE)

Confidentiality

Technical Impact: Read Memory; Read Application Data

When reusing a resource such as memory or a program variable, the original contents of that resource may not be cleared before it is sent to an untrusted party.

Availability

Technical Impact: DoS: Crash, Exit, or Restart

The uninitialized resource may contain values that cause program flow to change in ways that the programmer did not intend.

Frequently Asked Questions

Want to get errata notifications? Sign up here.