Google Chrome WebRTC Untrusted Input Validation Vulnerability on ChromeOS

A vulnerability exists in Google Chrome's Media component on ChromeOS, prior to version 148.0.7778.216. It allows a remote attacker, who has compromised the renderer process, to access potentially sensitive information from process memory. This exploitation is achieved through a crafted HTML page, taking advantage of insufficient validation of untrusted input.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information from process memory, potentially allowing for further exploitation or data leakage.

Remediation

Users can update to Google Chrome version 148.0.7778.216 or later to address this vulnerability.