CVE Vulnerabilities

CVE-2026-0902

Use of Function with Inconsistent Implementations

Published: Jan 20, 2026 | Modified: Jan 29, 2026
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
6.5 MODERATE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)

Weakness

The code uses a function that has inconsistent implementations across operating systems and versions.

Affected Software

NameVendorStart VersionEnd Version
ChromeGoogle*144.0.7559.59 (excluding)
Chromium-browserUbuntuupstream*

Extended Description

The use of inconsistent implementations can cause changes in behavior when the code is ported or built under a different environment than the programmer expects, which can lead to security problems in some cases. The implementation of many functions varies by platform, and at times, even by different versions of the same platform. Implementation differences can include:

Potential Mitigations

References