Uninitialized Use in ANGLE in Google Chrome prior to 149

#!/usr/bin/env python3
# check_chrome_cve_2026_11110.py
# Detects whether local Google Chrome / Chromium version is below the fixed build for CVE-2026-11110.
# Exit codes: 0=PATCHED, 1=VULNERABLE, 2=UNKNOWN

import os
import platform
import re
import shutil
import subprocess
import sys
from typing import Optional, Tuple

FIX_LINUX = (149, 0, 7827, 53)
FIX_WINDOWS_MAC = (149, 0, 7827, 54)


def parse_version(text: str) -> Optional[Tuple[int, int, int, int]]:
    m = re.search(r'(\d+)\.(\d+)\.(\d+)\.(\d+)', text)
    if not m:
        return None
    return tuple(int(x) for x in m.groups())


def run_cmd(cmd):
    try:
        p = subprocess.run(cmd, capture_output=True, text=True, timeout=10)
        if p.returncode == 0:
            return (p.stdout or p.stderr).strip()
    except Exception:
        pass
    return None


def get_version_linux() -> Optional[Tuple[int, int, int, int]]:
    candidates = [
        'google-chrome', 'google-chrome-stable', 'chromium', 'chromium-browser', 'chrome'
    ]
    for c in candidates:
        path = shutil.which(c)
        if not path:
            continue
        out = run_cmd([path, '--version'])
        if out:
            v = parse_version(out)
            if v:
                return v
    return None


def get_version_macos() -> Optional[Tuple[int, int, int, int]]:
    app_paths = [
        '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome',
        os.path.expanduser('~/Applications/Google Chrome.app/Contents/MacOS/Google Chrome'),
        '/Applications/Chromium.app/Contents/MacOS/Chromium'
    ]
    for path in app_paths:
        if os.path.exists(path):
            out = run_cmd([path, '--version'])
            if out:
                v = parse_version(out)
                if v:
                    return v
    plist_paths = [
        '/Applications/Google Chrome.app/Contents/Info.plist',
        os.path.expanduser('~/Applications/Google Chrome.app/Contents/Info.plist'),
        '/Applications/Chromium.app/Contents/Info.plist'
    ]
    for plist in plist_paths:
        if os.path.exists(plist):
            out = run_cmd(['/usr/bin/defaults', 'read', plist.replace('/Contents/Info.plist', ''), 'CFBundleShortVersionString'])
            if out:
                v = parse_version(out)
                if v:
                    return v
    return None


def get_version_windows() -> Optional[Tuple[int, int, int, int]]:
    candidates = [
        os.path.join(os.environ.get('ProgramFiles', ''), 'Google', 'Chrome', 'Application', 'chrome.exe'),
        os.path.join(os.environ.get('ProgramFiles(x86)', ''), 'Google', 'Chrome', 'Application', 'chrome.exe'),
        os.path.join(os.environ.get('LocalAppData', ''), 'Google', 'Chrome', 'Application', 'chrome.exe'),
        os.path.join(os.environ.get('ProgramFiles', ''), 'Chromium', 'Application', 'chrome.exe'),
        os.path.join(os.environ.get('ProgramFiles(x86)', ''), 'Chromium', 'Application', 'chrome.exe')
    ]
    ps = shutil.which('powershell') or shutil.which('powershell.exe')
    if not ps:
        return None
    for exe in candidates:
        if os.path.exists(exe):
            cmd = [ps, '-NoProfile', '-Command', f"(Get-Item '{exe}').VersionInfo.ProductVersion"]
            out = run_cmd(cmd)
            if out:
                v = parse_version(out)
                if v:
                    return v
    return None


def compare_versions(found: Tuple[int, int, int, int], fixed: Tuple[int, int, int, int]) -> int:
    if found < fixed:
        return -1
    if found == fixed:
        return 0
    return 1


def main():
    system = platform.system().lower()
    version = None
    fixed = None

    if system == 'linux':
        version = get_version_linux()
        fixed = FIX_LINUX
    elif system == 'darwin':
        version = get_version_macos()
        fixed = FIX_WINDOWS_MAC
    elif system == 'windows':
        version = get_version_windows()
        fixed = FIX_WINDOWS_MAC
    else:
        print('UNKNOWN: unsupported operating system')
        sys.exit(2)

    if version is None:
        print('UNKNOWN: could not determine local Chrome/Chromium version')
        sys.exit(2)

    found_s = '.'.join(map(str, version))
    fixed_s = '.'.join(map(str, fixed))

    cmp_result = compare_versions(version, fixed)
    if cmp_result < 0:
        print(f'VULNERABLE: detected version {found_s} < fixed version {fixed_s}')
        sys.exit(1)
    else:
        print(f'PATCHED: detected version {found_s} >= fixed version {fixed_s}')
        sys.exit(0)


if __name__ == '__main__':
    main()