This vulnerability involves an out of bounds read in the Media component of Google Chrome before version 149.0.7827.53. An attacker positioned on the same local network segment can exploit this by crafting malicious network traffic that triggers the out of bounds memory read. The issue was publicly disclosed with a medium severity rating by Chromium. No detailed technical exploitation methods or impact beyond the out of bounds read are provided. The vendor advisory references a stable channel update but does not explicitly state if this vulnerability is fixed in that update.

The vulnerability allows an attacker on the local network segment to perform an out of bounds memory read, which could potentially lead to information disclosure or application instability. There is no evidence of known exploits in the wild. The impact is limited to local network attackers and does not indicate remote exploitation without network proximity.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to the latest stable version of Google Chrome when available to ensure any fixes are applied. Until confirmation of a fix, avoid untrusted local network environments or restrict network access to trusted devices.