Google Chrome Skia Out-of-Bounds Read Vulnerability Allowing Cross-Origin Data Leakage

A vulnerability in Google Chrome's Skia graphics library, present in versions prior to 148.0.7778.96, allows for an out-of-bounds read. This issue could enable a remote attacker, who has compromised the renderer process, to leak cross-origin data through a specially crafted Chrome Extension.

Impact

Exploitation of this vulnerability could lead to unauthorized cross-origin data leakage.

Remediation

Users can update to Google Chrome version 148.0.7778.96 or later to address this vulnerability.