Out-of-Bounds Memory Read Vulnerability in Electron Framework for macOS
CVE-2026-114124
3.9LOW
What is CVE-2026-114124?
The Electron framework for building cross-platform desktop applications contains a vulnerability that allows improper validation of frame data from the GPU process, specifically in macOS offscreen rendering. This flaw can be exploited by an attacker who has already executed code within the GPU process, leading to incorrect frame geometry being sent, which may result in the main process reading out-of-bounds memory. The exploitation of this vulnerability can lead to unintended memory disclosure or application crashes. The issue has been addressed in subsequent releases.
Affected Version(s)
electron < 42.11.6 < 42.11.6
electron >= 43.0.0-alpha.1, < 43.7.3 < 43.0.0-alpha.1, 43.7.3
electron >= 44.0.0-alpha.1, < 44.4.3 < 44.0.0-alpha.1, 44.4.3