EIP-2026-103499
PRE-CVEGoogle Chrome < M72 - Use-After-Free in RenderProcessHostImpl Binding for P2PSocketDispatcherHost
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-103499. PoCs published by Google Security Research.
AI-analyzed exploit summary This exploit demonstrates a use-after-free vulnerability in Chrome's P2PSocketDispatcherHost due to improper handling of object lifetime during RenderProcessHostImpl reinitialization. The PoC triggers the issue by forcing a reinitialization while Mojo messages are still being processed, leading to a heap-use-after-free condition.
Description
Google Chrome < M72 - Use-After-Free in RenderProcessHostImpl Binding for P2PSocketDispatcherHost
Exploits (1)
This exploit demonstrates a use-after-free vulnerability in Chrome's P2PSocketDispatcherHost due to improper handling of object lifetime during RenderProcessHostImpl reinitialization. The PoC triggers the issue by forcing a reinitialization while Mojo messages are still being processed, leading to a heap-use-after-free condition.