Bug 1259659 (CVE-2026-3909) - VUL-0: CVE-2026-3909: chromium: Out of bounds write in Skia (fixed in 146.0.7680.80)
Summary: VUL-0: CVE-2026-3909: chromium: Out of bounds write in Skia (fixed in 146.0.7...
Status: RESOLVED FIXED
Alias: CVE-2026-3909
Product: openSUSE Distribution
Classification: openSUSE
Component: Security (show other bugs)
Version: Leap 16.0
Hardware: Other Other
: P3 - Medium : Major (vote)
Target Milestone: ---
Assignee: Security Team bot
QA Contact: Security Team bot
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2026-03-14 06:54 UTC by Andreas Stieger
Modified: 2026-03-17 22:49 UTC (History)
1 user (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Andreas Stieger 2026-03-14 06:54:21 UTC 
Fixed in chromium 146.0.7680.80:

CVE-2026-3909: Out of bounds write in Skia
Google is aware that an exploit for CVE-2026-3909 exists in the wild.

https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_13.html
Comment 1 OBSbugzilla Bot 2026-03-14 07:45:04 UTC 
This is an autogenerated message for OBS integration:
This bug (1259659) was mentioned in
https://build.opensuse.org/request/show/1338835 Factory / chromium
https://build.opensuse.org/request/show/1338836 Backports:SLE-15-SP6 / chromium
https://build.opensuse.org/request/show/1338837 Backports:SLE-15-SP7 / chromium
Comment 2 OBSbugzilla Bot 2026-03-14 10:45:05 UTC 
This is an autogenerated message for OBS integration:
This bug (1259659) was mentioned in
https://build.opensuse.org/request/show/1338848 Factory / chromium
Comment 3 Marcus Meissner 2026-03-17 17:05:54 UTC 
openSUSE-SU-2026:0084-1: An update that fixes 31 vulnerabilities is now available.

Category: security (important)
Bug References: 1259530,1259648,1259659
CVE References: CVE-2026-3909,CVE-2026-3910,CVE-2026-3913,CVE-2026-3914,CVE-2026-3915,CVE-2026-3916,CVE-2026-3917,CVE-2026-3918,CVE-2026-3919,CVE-2026-3920,CVE-2026-3921,CVE-2026-3922,CVE-2026-3923,CVE-2026-3924,CVE-2026-3925,CVE-2026-3926,CVE-2026-3927,CVE-2026-3928,CVE-2026-3929,CVE-2026-3930,CVE-2026-3931,CVE-2026-3932,CVE-2026-3934,CVE-2026-3935,CVE-2026-3936,CVE-2026-3937,CVE-2026-3938,CVE-2026-3939,CVE-2026-3940,CVE-2026-3941,CVE-2026-3942
JIRA References: 
Sources used:
openSUSE Backports SLE-15-SP6 (src):    chromium-146.0.7680.80-bp156.2.248.1
Comment 4 Marcus Meissner 2026-03-17 20:04:59 UTC 
openSUSE-SU-2026:0085-1: An update that fixes 31 vulnerabilities is now available.

Category: security (important)
Bug References: 1259530,1259648,1259659
CVE References: CVE-2026-3909,CVE-2026-3910,CVE-2026-3913,CVE-2026-3914,CVE-2026-3915,CVE-2026-3916,CVE-2026-3917,CVE-2026-3918,CVE-2026-3919,CVE-2026-3920,CVE-2026-3921,CVE-2026-3922,CVE-2026-3923,CVE-2026-3924,CVE-2026-3925,CVE-2026-3926,CVE-2026-3927,CVE-2026-3928,CVE-2026-3929,CVE-2026-3930,CVE-2026-3931,CVE-2026-3932,CVE-2026-3934,CVE-2026-3935,CVE-2026-3936,CVE-2026-3937,CVE-2026-3938,CVE-2026-3939,CVE-2026-3940,CVE-2026-3941,CVE-2026-3942
JIRA References: 
Sources used:
openSUSE Backports SLE-15-SP7 (src):    chromium-146.0.7680.80-bp157.2.133.1
Comment 5 Andreas Stieger 2026-03-17 22:49:57 UTC 
done