Google Chrome Skia Integer Overflow Vulnerability Allowing Out-of-Bounds Memory Write on Windows

A critical integer overflow vulnerability has been identified in the Skia graphics library used by Google Chrome on Windows, in versions prior to 148.0.7778.168. This vulnerability allows a remote attacker who has compromised the renderer process to perform an out-of-bounds memory write by exploiting a crafted HTML page.

Impact

Exploitation of this vulnerability could lead to arbitrary memory corruption, potentially allowing for the execution of arbitrary code or causing a crash.

Remediation

Users can update to Google Chrome version 148.0.7778.168 to address this vulnerability.