This vulnerability arises from insufficient validation of untrusted input in the codecs component of Google Chrome versions before 149.0.7827.53. An attacker can exploit this by delivering a crafted video file that triggers an out-of-bounds memory write, potentially leading to memory corruption. The issue was publicly disclosed on June 4, 2026, and is classified with medium severity by Chromium security. No detailed CVSS score or explicit remediation level is provided in the input data. The vendor advisory URL points to a stable channel update announcement, suggesting a fix may be included in that release.

Successful exploitation could allow a remote attacker to cause an out-of-bounds memory write in the affected Chrome versions, which may lead to memory corruption. The exact impact beyond this is not detailed in the provided information. No known exploits in the wild have been reported as of the publication date.

The vendor advisory linked corresponds to a stable channel update for Chrome, implying that updating to version 149.0.7827.53 or later addresses this vulnerability. Users should apply the latest stable update of Google Chrome to remediate this issue. Patch status is not explicitly confirmed in the provided data; therefore, users should verify the vendor advisory for current remediation guidance.