This vulnerability involves a use-after-free condition in the PDFium library used by Google Chrome. Exploitation requires a crafted PDF file to trigger arbitrary code execution inside the sandbox environment of the browser. The issue affects Chrome versions before 149.0.7827.53. Google has released an update to Chrome 149.0.7827.53 that fixes this vulnerability. No known exploits are reported in the wild at this time.

Successful exploitation could allow remote code execution within the sandboxed environment of Google Chrome, potentially enabling an attacker to run arbitrary code. However, the Chromium project rates the security severity as low, indicating limited impact or difficulty in exploitation. No evidence of active exploitation has been reported.

Users should update Google Chrome to version 149.0.7827.53 or later, where this vulnerability is fixed. Since this is a client-side application vulnerability, applying the official update is the recommended remediation. Patch status is confirmed by the vendor advisory linked to the stable channel update. No additional mitigations are specified by the vendor.