This vulnerability involves an inappropriate implementation in the LiveCaption component of Google Chrome before version 149.0.7827.53, which permits a remote attacker to potentially trigger out of bounds memory access by sending crafted network traffic. The issue is categorized as a low severity security flaw by the Chromium security team. No CVSS score or detailed technical exploit information is provided. The vendor advisory URL points to a stable channel update announcement but does not explicitly state the fix status for this specific vulnerability.

The impact is limited to potential out of bounds memory reads triggered remotely via network traffic targeting the LiveCaption feature. This could lead to information disclosure or application instability, but no higher impact such as code execution is indicated. The vulnerability is rated low severity by the Chromium project, and no active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to Chrome version 149.0.7827.53 or later once confirmed. Until then, no specific mitigations are provided by the vendor.