Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149

#!/usr/bin/env python3
# check_chrome_149.py
# Exit codes:
#   0 = PATCHED
#   1 = VULNERABLE
#   2 = UNKNOWN

import os
import platform
import re
import shutil
import subprocess
import sys

TARGET = (149, 0, 7827, 53)
VERSION_RE = re.compile(r'(\d+)\.(\d+)\.(\d+)\.(\d+)')


def parse_version(text):
    if not text:
        return None
    m = VERSION_RE.search(text)
    if not m:
        return None
    return tuple(int(x) for x in m.groups())


def cmp_version(a, b):
    return (a > b) - (a < b)


def run_cmd(cmd):
    try:
        p = subprocess.run(cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE, text=True, timeout=10)
        out = (p.stdout or '') + '\n' + (p.stderr or '')
        return out.strip()
    except Exception:
        return ''


def windows_registry_versions():
    versions = []
    try:
        import winreg
    except Exception:
        return versions

    paths = [
        r'SOFTWARE\Google\Chrome\BLBeacon',
        r'SOFTWARE\WOW6432Node\Google\Chrome\BLBeacon',
        r'SOFTWARE\Chromium\BLBeacon',
        r'SOFTWARE\WOW6432Node\Chromium\BLBeacon',
    ]
    hives = []
    try:
        import winreg
        hives = [winreg.HKEY_CURRENT_USER, winreg.HKEY_LOCAL_MACHINE]
        for hive in hives:
            for path in paths:
                try:
                    k = winreg.OpenKey(hive, path)
                    val, _ = winreg.QueryValueEx(k, 'version')
                    v = parse_version(str(val))
                    if v:
                        versions.append(('registry:' + path, v))
                except Exception:
                    pass
    except Exception:
        pass
    return versions


def windows_file_versions():
    candidates = [
        os.path.expandvars(r'%ProgramFiles%\Google\Chrome\Application\chrome.exe'),
        os.path.expandvars(r'%ProgramFiles(x86)%\Google\Chrome\Application\chrome.exe'),
        os.path.expandvars(r'%LocalAppData%\Google\Chrome\Application\chrome.exe'),
        os.path.expandvars(r'%ProgramFiles%\Chromium\Application\chrome.exe'),
        os.path.expandvars(r'%ProgramFiles(x86)%\Chromium\Application\chrome.exe'),
    ]
    found = []
    for path in candidates:
        if path and os.path.exists(path):
            out = run_cmd([path, '--version'])
            v = parse_version(out)
            if v:
                found.append((path, v))
    return found


def unix_versions():
    names = [
        'google-chrome', 'google-chrome-stable', 'chromium', 'chromium-browser',
        '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome',
        '/Applications/Chromium.app/Contents/MacOS/Chromium',
        '/usr/bin/google-chrome', '/usr/bin/google-chrome-stable',
        '/usr/bin/chromium', '/usr/bin/chromium-browser'
    ]
    found = []
    for name in names:
        path = shutil.which(name) if not name.startswith('/') else name
        if path and os.path.exists(path):
            out = run_cmd([path, '--version'])
            v = parse_version(out)
            if v:
                found.append((path, v))
    return found


def main():
    system = platform.system().lower()
    detections = []

    if 'windows' in system:
        detections.extend(windows_registry_versions())
        detections.extend(windows_file_versions())
    else:
        detections.extend(unix_versions())

    # Deduplicate by version while preserving evidence paths
    if not detections:
        print('UNKNOWN')
        sys.exit(2)

    # If any detected Chrome/Chromium build is below target, mark vulnerable.
    vulnerable = []
    patched = []
    for src, ver in detections:
        if cmp_version(ver, TARGET) < 0:
            vulnerable.append((src, ver))
        else:
            patched.append((src, ver))

    if vulnerable:
        print('VULNERABLE')
        for src, ver in vulnerable:
            print(f'{src} -> {ver[0]}.{ver[1]}.{ver[2]}.{ver[3]}')
        sys.exit(1)

    if patched:
        print('PATCHED')
        for src, ver in patched:
            print(f'{src} -> {ver[0]}.{ver[1]}.{ver[2]}.{ver[3]}')
        sys.exit(0)

    print('UNKNOWN')
    sys.exit(2)


if __name__ == '__main__':
    main()