Google Chrome Patches Critical ANGLE Vulnerability (CVE-2025-9478) Discovered by AI Agent Big Sleep

Google has released a critical security update for the Stable channel of Chrome to fix a use-after-free vulnerability in ANGLE, the graphics engine behind WebGL and other rendering tasks, tracked as CVE-2025-9478. The flaw, discovered on August 11, 2025, was not by a human researcher but by Big Sleep, Google’s AI-powered vulnerability discovery agent.

First announced in 2024, Big Sleep was developed by Google DeepMind in collaboration with Project Zero, with Google explaining that by November 2024 it had found its first real-world vulnerability. The newly patched ANGLE issue is particularly concerning because ANGLE is central to how Chrome renders graphics across platforms, and the use-after-free could allow remote code execution via malicious web content.

By patching it quickly, Google reduced the risk of widespread exploitation, although details remain restricted until a majority of users are updated with a fix, according to the Chrome team.