Google Chrome Integer Overflow Vulnerability in libyuv Allowing Memory Information Disclosure

An integer overflow vulnerability has been identified in the libyuv library used by Google Chrome. This issue affects Chrome versions prior to 149.0.7827.103. The vulnerability allows a remote attacker who has compromised the renderer process to access potentially sensitive information from process memory. Exploitation can be achieved through a crafted HTML page.

Impact

Exploitation of this vulnerability could lead to unauthorized access to process memory, potentially allowing for the extraction of sensitive information.

Remediation

Users can update to Google Chrome version 149.0.7827.103 or later to address this vulnerability.