This vulnerability arises from insufficient validation of untrusted input within the codecs component of Google Chrome versions before 149.0.7827.53. Exploitation could enable a remote attacker to perform a sandbox escape through a crafted video file, potentially compromising the browser's security boundaries. The issue is recognized by Chromium security with a medium severity rating. The vendor advisory references a stable channel update but does not explicitly confirm if the issue is fixed in that update.

If exploited, this vulnerability could allow a remote attacker to escape the Chrome sandbox, which is designed to isolate processes and limit the impact of malicious code. This could lead to increased privileges or unauthorized actions within the user's environment. However, no known exploits in the wild have been reported, and the impact is rated medium by the vendor.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to the latest stable version of Google Chrome as soon as possible once the vendor confirms the fix. Until then, exercise caution when opening untrusted video files.