This vulnerability arises from improper implementation of input validation in the GetUserMedia feature of Google Chrome before version 151.0.7922.72. An attacker with control over the renderer process could exploit this flaw to leak data across origins, violating the same-origin policy. The issue is tracked as CWE-346 (Origin Validation Error). The CVSS v3.1 base score is 4.3, reflecting a medium severity with network attack vector, low complexity, no privileges required, user interaction required, and impact limited to confidentiality.

Successful exploitation allows an attacker who has already compromised the renderer process to leak cross-origin data, potentially exposing sensitive information from other origins. There is no impact on integrity or availability. The vulnerability does not allow remote code execution or privilege escalation by itself.

Google Chrome version 151.0.7922.72 addresses this vulnerability. Users and administrators should update to this version or later to remediate the issue. The vendor advisory linked confirms the availability of this fix. No additional mitigation steps are indicated.