Google Chrome Media Out-of-Bounds Read and Write Vulnerability Allowing Arbitrary Code Execution

A vulnerability allowing out-of-bounds read and write operations in the Media component of Google Chrome on Mac, prior to version 149.0.7827.103, has been identified. This vulnerability could enable a remote attacker, who has compromised the renderer process, to execute arbitrary code within a sandboxed environment by using a specially crafted HTML page.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution in a sandboxed environment.

Remediation

Users can update to Google Chrome version 149.0.7827.103 or later to address this vulnerability.