This vulnerability involves an out-of-bounds read in the GWP-ASan memory error detection tool integrated into Google Chrome before version 149.0.7827.53. Exploitation requires local attacker access and involves supplying a malicious file to trigger the memory read, potentially exposing sensitive information from Chrome's process memory. The issue is recognized by Chromium security with a medium severity rating. No known exploits in the wild have been reported. The vendor advisory linked references a stable channel update but does not explicitly confirm the patch status for this specific vulnerability.

A local attacker can exploit this vulnerability to read memory outside intended bounds, potentially accessing sensitive information from the Chrome process memory. This could lead to information disclosure but does not indicate code execution or privilege escalation. No known active exploitation has been reported.

The vendor has released a stable channel update for Google Chrome, which likely includes a fix for this vulnerability. Users should update to version 149.0.7827.53 or later to remediate this issue. Patch status is not explicitly confirmed in the advisory, so users should verify update application. No additional mitigation steps are specified by the vendor.