Memory Disclosure and Application Crash in Electron Framework by Vendor
CVE-2026-114122
3.9LOW
What is CVE-2026-114122?
The Electron framework, widely used for developing cross-platform desktop applications, has a vulnerability where frame data received from the GPU process was insufficiently validated. This flaw allows an attacker, with prior code execution in the GPU process, to provide inconsistent frame geometry. This inconsistency can lead to out-of-bounds memory reads during frame image capture, potentially exposing sensitive memory content or causing application crashes. The issue has been addressed in the latest releases of the Electron framework.
Affected Version(s)
electron < 42.11.6 < 42.11.6
electron >= 43.0.0-alpha.1, < 43.7.3 < 43.0.0-alpha.1, 43.7.3
electron >= 44.0.0-alpha.1, < 44.4.3 < 44.0.0-alpha.1, 44.4.3