An integer overflow in the libyuv library within Google Chrome before version 149.0.7827.103 enables an attacker with control over the renderer process to read potentially sensitive memory contents. This vulnerability arises from improper handling of integer values leading to overflow conditions. Exploitation requires prior compromise of the renderer process and involves delivering a crafted HTML page to trigger the flaw. The issue is recognized by Chromium as high severity. No CVSS score is assigned, and patch or remediation details are not explicitly stated in the provided data, though a vendor advisory is referenced.

A remote attacker who has already compromised the renderer process in affected Chrome versions can leverage this integer overflow to potentially extract sensitive information from process memory. This could lead to information disclosure within the context of the renderer process. There is no indication of privilege escalation or code execution solely from this vulnerability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html for current remediation guidance. Users should update to Chrome version 149.0.7827.103 or later once available. Until then, no specific mitigations are detailed in the provided data.