Google Chrome Type Confusion Vulnerability in GFX Allowing Sandbox Escape

A type confusion vulnerability has been identified in the GFX component of Google Chrome on Linux and ChromeOS, affecting versions prior to 148.0.7778.179. This vulnerability allowed a remote attacker who had compromised the renderer process to potentially escape the sandbox by using a crafted video file.

Impact

Exploitation of this vulnerability could lead to a sandbox escape, allowing a compromised renderer process to perform actions outside of its intended restrictions.

Remediation

Users can update to Google Chrome version 148.0.7778.179 or later to address this vulnerability.