THREAT OPS › Threat News › [GHSA] GHSA-pfmc-3mgc-p6fp (low) — Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memory size
[GHSA] GHSA-pfmc-3mgc-p6fp (low) — Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memory size
GHSA-pfmc-3mgc-p6fp Severity: low CVE: CVE-2026-70598
Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memory size
### Impact In offscreen rendering mode, frame data received from the GPU process was not fully validated by the main process. A compromised GPU process could cause the main process to read out-of-bounds memory while producing `paint` event images, disclosing m
Indicators of compromise
- CVE-2026-70598cve
- security@electronjs.orgemail
Original source: https://github.com/advisories/GHSA-pfmc-3mgc-p6fp