Google Chrome Skia Out-of-Bounds Read Vulnerability Allowing Cross-Origin Data Leak

A high-severity out-of-bounds read vulnerability has been identified in the Skia graphics library used by Google Chrome. This issue affects Chrome versions prior to 149.0.7827.103. The vulnerability allows a remote attacker, who has compromised the renderer process, to leak cross-origin data by using a specially crafted HTML page.

Impact

Exploitation of this vulnerability could lead to unauthorized access to cross-origin data, potentially allowing for data leakage between different origins.

Remediation

Users can update to Google Chrome version 149.0.7827.103 or later to address this vulnerability.