This vulnerability arises from uninitialized use in the codec components of Google Chrome on Linux and ChromeOS platforms before version 149.0.7827.103. An attacker can exploit this by delivering a crafted video file that triggers the flaw, resulting in leakage of cross-origin data. The issue is classified with high security severity by Chromium but lacks a CVSS score. The vendor has published a stable channel update announcement around the time of disclosure, implying a fix may be included in or after version 149.0.7827.103. No direct patch link or explicit remediation level is provided in the input data.

The impact is a high-severity data leakage vulnerability that can expose cross-origin data to a remote attacker through crafted video content. This compromises confidentiality by potentially allowing unauthorized access to data from other origins within the browser context. There are no known exploits in the wild, reducing immediate risk, but the vulnerability could be leveraged if exploited.

Patch status is not yet confirmed from the provided data. The referenced vendor advisory is a Chrome stable channel update announcement, which likely includes the fix in version 149.0.7827.103 or later. Users should update Google Chrome on Linux and ChromeOS to version 149.0.7827.103 or newer to remediate this vulnerability. Check the official Google Chrome release blog for the latest updates and confirmation of the fix.