This vulnerability involves an out of bounds read in the WebGPU implementation of Google Chrome. Specifically, versions prior to 149.0.7827.53 are affected. An attacker can exploit this by crafting a malicious HTML page that triggers the out of bounds memory read, potentially leading to information disclosure or denial of service. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges, requires user interaction, and impacts confidentiality and availability with high severity. The vendor has published an advisory linked to a stable channel update, indicating a fix is available in version 149.0.7827.53.

Successful exploitation allows a remote attacker to read memory out of bounds, which can lead to disclosure of sensitive information and denial of service conditions. The CVSS score of 8.1 reflects high impact on confidentiality and availability. No integrity impact is noted. There are no reports of active exploitation in the wild.

Users should update Google Chrome to version 149.0.7827.53 or later to remediate this vulnerability. The vendor advisory confirms that this version contains the fix. No additional mitigations are specified or required once the update is applied.