This vulnerability arises from uninitialized memory usage in the WebCodecs feature of Google Chrome versions before 147.0.7727.55. An attacker can exploit this flaw by crafting a malicious HTML page that, when processed by the vulnerable browser, may leak sensitive information from the browser's process memory. The issue was publicly disclosed with medium severity by Chromium but lacks a detailed CVSS score or explicit remediation status in the provided data. The vendor advisory link references a stable channel update but does not explicitly confirm the patch status for this specific vulnerability.

Successful exploitation could lead to information disclosure of potentially sensitive data from process memory. There is no indication of code execution or privilege escalation. No known active exploits have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to Chrome version 147.0.7727.55 or later once confirmed. Until then, no specific mitigation steps are provided by the vendor.