Google Chrome Media Out-of-Bounds Write Vulnerability on Mac and iOS

A remote code execution vulnerability has been identified in Google Chrome version 148.0.7778.96 on Mac and iOS devices prior to this version. The issue arises from an out-of-bounds write in the Media component, which allowed a remote attacker to execute arbitrary code within a sandboxed environment by using a specially crafted HTML page.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution within a sandboxed environment, potentially allowing a remote attacker to compromise the renderer process.

Remediation

Users can update to Google Chrome version 148.0.7778.96 or later to address this vulnerability.