Google Chrome Integer Overflow Vulnerability in Media Component on ChromeOS

An integer overflow vulnerability has been identified in the media component of Google Chrome on ChromeOS, prior to version 149.0.7827.103. This vulnerability allowed a remote attacker, who had compromised the renderer process, to perform an out-of-bounds read. As a result, potentially sensitive information could be extracted from the process memory via a specially crafted HTML page.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information from the process memory.

Remediation

Users can update to Google Chrome version 149.0.7827.103 or later to address this vulnerability.