Google Chrome Integer Overflow Vulnerability in libyuv Allowing Sandbox Escape

An integer overflow vulnerability has been identified in the libyuv library used by Google Chrome. This issue affects versions of Chrome prior to 149.0.7827.103. The vulnerability allows a remote attacker who has compromised the renderer process to potentially escape the sandbox by exploiting a crafted HTML page.

Impact

Exploitation of this vulnerability could lead to a sandbox escape, allowing a compromised renderer process to execute code outside of the sandboxed environment.

Remediation

Users can update to Google Chrome version 149.0.7827.103 or later to address this vulnerability.