CVE 2026-40393

In Mesa versions prior to 25.3.6 and 26 before 26.0.1, an out-of-bounds memory access vulnerability may occur in WebGPU. This is due to the amount of data to be allocated being determined by an untrusted party, which is subsequently used for alloca.

‍