An integer overflow in the Media component of Google Chrome on ChromeOS before version 149.0.7827.103 enables a remote attacker with renderer process access to read out-of-bounds memory. This can lead to disclosure of potentially sensitive information from process memory when processing a crafted HTML page. The vulnerability is acknowledged by Chromium with a high severity rating. No CVSS score or explicit remediation details are included in the provided data. The vulnerability affects Chrome on ChromeOS and is not a cloud service.

The vulnerability allows an attacker who has already compromised the renderer process to read memory outside the intended bounds, potentially exposing sensitive information. This could aid further exploitation or data leakage. There are no reports of active exploitation in the wild. The impact is limited to information disclosure via crafted HTML content in the affected Chrome versions on ChromeOS.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html for current remediation guidance. Since this affects Chrome on ChromeOS, users should update to version 149.0.7827.103 or later once available. No other mitigation or temporary fix is specified in the provided data.