Insufficient validation of untrusted input in Media in Google Chrome prior to 149

#!/usr/bin/env python3
# check_cve_2026_11237.py
# Detects whether installed Google Chrome is vulnerable to CVE-2026-11237
# Exit codes:
#   0 = PATCHED
#   1 = VULNERABLE
#   2 = UNKNOWN

import os
import platform
import re
import shutil
import subprocess
import sys

FIXED = (149, 0, 7827, 53)


def parse_version(s):
    m = re.search(r'(\d+)\.(\d+)\.(\d+)\.(\d+)', s or '')
    if not m:
        return None
    return tuple(int(x) for x in m.groups())


def cmp_ver(a, b):
    return (a > b) - (a < b)


def get_cmd_output(cmd):
    try:
        p = subprocess.run(cmd, capture_output=True, text=True, timeout=10)
        if p.returncode == 0:
            return (p.stdout or p.stderr).strip()
    except Exception:
        pass
    return None


def find_versions_windows():
    versions = []
    reg_paths = [
        r'HKLM\\SOFTWARE\\Google\\Chrome\\BLBeacon',
        r'HKLM\\SOFTWARE\\WOW6432Node\\Google\\Chrome\\BLBeacon',
        r'HKCU\\SOFTWARE\\Google\\Chrome\\BLBeacon',
    ]
    for reg in reg_paths:
        out = get_cmd_output(['reg', 'query', reg, '/v', 'version'])
        if out:
            v = parse_version(out)
            if v:
                versions.append((reg, v))
    exe_candidates = [
        os.path.join(os.environ.get('ProgramFiles', r'C:\\Program Files'), 'Google', 'Chrome', 'Application', 'chrome.exe'),
        os.path.join(os.environ.get('ProgramFiles(x86)', r'C:\\Program Files (x86)'), 'Google', 'Chrome', 'Application', 'chrome.exe'),
        os.path.join(os.environ.get('LocalAppData', ''), 'Google', 'Chrome', 'Application', 'chrome.exe'),
    ]
    for exe in exe_candidates:
        if exe and os.path.exists(exe):
            out = get_cmd_output([exe, '--version'])
            v = parse_version(out)
            if v:
                versions.append((exe, v))
    return versions


def find_versions_macos():
    versions = []
    app = '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome'
    if os.path.exists(app):
        out = get_cmd_output([app, '--version'])
        v = parse_version(out)
        if v:
            versions.append((app, v))
    mdls_target = '/Applications/Google Chrome.app'
    if os.path.exists(mdls_target):
        out = get_cmd_output(['mdls', '-name', 'kMDItemVersion', mdls_target])
        v = parse_version(out)
        if v:
            versions.append((mdls_target, v))
    return versions


def find_versions_linux():
    versions = []
    candidates = ['google-chrome', 'google-chrome-stable', 'chromium', 'chromium-browser']
    for name in candidates:
        path = shutil.which(name)
        if path:
            out = get_cmd_output([path, '--version'])
            v = parse_version(out)
            if v:
                versions.append((path, v))
    return versions


def main():
    system = platform.system().lower()
    if 'windows' in system:
        found = find_versions_windows()
    elif 'darwin' in system:
        found = find_versions_macos()
    else:
        found = find_versions_linux()

    if not found:
        print('UNKNOWN - Google Chrome version not found')
        sys.exit(2)

    unique = []
    seen = set()
    for src, ver in found:
        key = (src, ver)
        if key not in seen:
            seen.add(key)
            unique.append((src, ver))

    vulnerable = []
    patched = []
    for src, ver in unique:
        if cmp_ver(ver, FIXED) < 0:
            vulnerable.append((src, ver))
        else:
            patched.append((src, ver))

    if vulnerable:
        details = '; '.join([f'{src}={".".join(map(str, ver))}' for src, ver in vulnerable])
        print(f'VULNERABLE - Chrome version(s) below 149.0.7827.53 detected: {details}')
        sys.exit(1)

    details = '; '.join([f'{src}={".".join(map(str, ver))}' for src, ver in patched])
    print(f'PATCHED - Chrome version(s) at or above 149.0.7827.53 detected: {details}')
    sys.exit(0)


if __name__ == '__main__':
    main()