This vulnerability involves uninitialized use in the audio subsystem of Google Chrome versions before 149.0.7827.53. An attacker with control over the renderer process can exploit this flaw by delivering a specially crafted HTML page, which may lead to disclosure of sensitive information from process memory. The issue is classified under CWE-457, indicating improper handling of uninitialized variables. The CVSS v3.1 base score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high confidentiality impact without integrity or availability impact.

Successful exploitation could allow an attacker who has compromised the renderer process to read potentially sensitive information from Chrome's process memory. This could lead to information disclosure but does not affect integrity or availability of the system. There are no known exploits in the wild at this time.

A fixed version is available: Chrome 149.0.7827.53 addresses this vulnerability. Users and administrators should update to this version or later to remediate the issue. The vendor advisory linked provides official update information. No additional mitigation steps are specified.