Google Chrome Chromecast use-after-free requiring prior renderer compromise

#!/usr/bin/env python3
# check_chrome_149_cast_uaf.py
# Detects whether locally installed Google Chrome / Chromium is below the fixed version
# for CVE-2026-10884.
# Exit codes: 0=PATCHED, 1=VULNERABLE, 2=UNKNOWN

import os
import platform
import re
import shutil
import subprocess
import sys
from pathlib import Path

FIX_LINUX = (149, 0, 7827, 53)
FIX_MAC = (149, 0, 7827, 54)
FIX_WINDOWS = (149, 0, 7827, 54)


def parse_ver(s):
    m = re.search(r'(\d+)\.(\d+)\.(\d+)\.(\d+)', s)
    if not m:
        return None
    return tuple(int(x) for x in m.groups())


def run_cmd(cmd):
    try:
        p = subprocess.run(cmd, capture_output=True, text=True, timeout=10)
        out = (p.stdout or '') + ' ' + (p.stderr or '')
        return out.strip()
    except Exception:
        return ''


def find_linux():
    candidates = [
        'google-chrome', 'google-chrome-stable', 'chromium', 'chromium-browser'
    ]
    for c in candidates:
        path = shutil.which(c)
        if path:
            out = run_cmd([path, '--version'])
            ver = parse_ver(out)
            if ver:
                return c, path, ver
    return None, None, None


def find_mac():
    apps = [
        '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome',
        '/Applications/Chromium.app/Contents/MacOS/Chromium'
    ]
    for app in apps:
        if Path(app).exists():
            out = run_cmd([app, '--version'])
            ver = parse_ver(out)
            if ver:
                return Path(app).name, app, ver
    return None, None, None


def find_windows():
    local = os.environ.get('LOCALAPPDATA', '')
    pf = os.environ.get('PROGRAMFILES', '')
    pfx86 = os.environ.get('PROGRAMFILES(X86)', '')
    candidates = [
        os.path.join(local, 'Google', 'Chrome', 'Application', 'chrome.exe'),
        os.path.join(pf, 'Google', 'Chrome', 'Application', 'chrome.exe'),
        os.path.join(pfx86, 'Google', 'Chrome', 'Application', 'chrome.exe'),
        os.path.join(local, 'Chromium', 'Application', 'chrome.exe'),
        os.path.join(pf, 'Chromium', 'Application', 'chrome.exe'),
        os.path.join(pfx86, 'Chromium', 'Application', 'chrome.exe'),
    ]
    for exe in candidates:
        if exe and Path(exe).exists():
            out = run_cmd([exe, '--version'])
            ver = parse_ver(out)
            if ver:
                return Path(exe).name, exe, ver
    return None, None, None


def cmp_ver(a, b):
    return (a > b) - (a < b)


def main():
    system = platform.system()
    name = path = None
    ver = None
    fixed = None

    if system == 'Linux':
        name, path, ver = find_linux()
        fixed = FIX_LINUX
    elif system == 'Darwin':
        name, path, ver = find_mac()
        fixed = FIX_MAC
    elif system == 'Windows':
        name, path, ver = find_windows()
        fixed = FIX_WINDOWS
    else:
        print('UNKNOWN - unsupported operating system: {}'.format(system))
        sys.exit(2)

    if not ver:
        print('UNKNOWN - Chrome/Chromium not found in common locations')
        sys.exit(2)

    status = 'PATCHED' if cmp_ver(ver, fixed) >= 0 else 'VULNERABLE'
    print('{} - product={} path="{}" version={} fixed_threshold={}'.format(
        status,
        name,
        path,
        '.'.join(map(str, ver)),
        '.'.join(map(str, fixed))
    ))

    if status == 'PATCHED':
        sys.exit(0)
    else:
        sys.exit(1)


if __name__ == '__main__':
    main()