This vulnerability is an out-of-bounds read in the WebRTC implementation of Google Chrome versions before 149.0.7827.103. Exploitation requires prior compromise of the GPU process and involves a crafted HTML page that could trigger heap corruption. The CVSS vector indicates network attack vector, high attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. The vendor advisory link is provided but does not explicitly confirm if the issue is fixed in the stated version or later.

Successful exploitation could allow a remote attacker, who has compromised the GPU process, to cause heap corruption, potentially leading to arbitrary code execution or browser instability. The impact affects confidentiality, integrity, and availability of the affected system as indicated by the CVSS score and vector.

The vendor advisory link should be consulted for the latest remediation guidance. The vulnerability affects versions prior to 149.0.7827.103, so updating to version 149.0.7827.103 or later is implied as the remediation step. Patch status is not explicitly confirmed in the provided data; therefore, users should verify the update and apply it promptly if available.