Google Chrome Heap Buffer Overflow Vulnerability in Skia Allowing Sandbox Escape

A heap buffer overflow vulnerability has been identified in the Skia graphics library used by Google Chrome. This issue affects Google Chrome versions prior to 147.0.7727.138. The vulnerability allows a remote attacker who has compromised the renderer process to potentially escape the sandbox by exploiting a crafted HTML page.

Impact

Exploitation of this vulnerability could lead to a sandbox escape, allowing a compromised renderer process to execute arbitrary code outside of the browser's security restrictions.

Remediation

Users can update to Google Chrome version 147.0.7727.138 or later to address this vulnerability.