An out-of-bounds write vulnerability exists in the codecs of Google Chrome prior to version 149.0.7827.53. This vulnerability could be triggered by a crafted video file, potentially enabling a remote attacker to perform a sandbox escape. The issue is recognized by the Chromium security team with a medium severity rating. No CVSS score or detailed exploit information is currently available. The vulnerability is specific to the desktop Chrome browser and does not affect cloud services.

If exploited, this vulnerability could allow a remote attacker to escape the sandbox environment of Google Chrome, potentially leading to execution of arbitrary code outside the browser's restricted environment. However, no known exploits have been reported in the wild, and the severity is assessed as medium by the vendor.

The vendor advisory does not explicitly confirm the patch or remediation status. Users should update Google Chrome to version 149.0.7827.53 or later once available, as this version is indicated as the fixed release. Check the official Google Chrome stable channel update blog for confirmation and further guidance: https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html. Patch status is not yet confirmed in the provided data, so verifying with the vendor advisory is recommended.