A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash in the GPU GLES user-space shared librar…

CVE-2026-22166 is a use-after-free vulnerability in GPU GLES user-space shared library triggered by unusual WebGPU content in web pages. The vulnerability can cause write UAF crashes in the GPU GLES render process. On platforms where graphics processes run with system privileges, this could enable privilege escalation and subsequent system exploitation. The vulnerability affects the WebGPU implementation and GPU driver components.