An integer overflow vulnerability exists in the Media component of Google Chrome before version 147.0.7727.55. This vulnerability could be triggered by a crafted video file leading to heap corruption. The issue is classified with low security severity by the Chromium security team. No CVSS score is provided. The vulnerability was publicly disclosed on April 8, 2026. No known active exploitation has been reported. The vendor advisory link points to a stable channel update, implying a fix may be included in or after version 147.0.7727.55.

Successful exploitation could result in heap corruption, which might lead to application instability or potentially limited code execution. However, the severity is rated low, indicating limited impact or difficulty in exploitation. No known exploits in the wild reduce immediate risk.

The vulnerability is addressed in Google Chrome version 147.0.7727.55. Users should update to this version or later to mitigate the risk. Since this is not a cloud service, remediation requires updating the affected software. Check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html for confirmation and additional details. Patch status is not explicitly confirmed in the provided data but is strongly implied by the version information and advisory.