An integer overflow vulnerability exists in the Media component of Google Chrome before version 147.0.7727.55. This vulnerability can be triggered remotely by processing a crafted video file, potentially leading to heap corruption. The CVSS 3.1 base score is 8.8, reflecting high impact across confidentiality, integrity, and availability. The vulnerability is tracked as CWE-472. Although a vendor advisory URL is provided, it does not explicitly confirm patch availability or remediation level in the given data.

Successful exploitation of this vulnerability could allow a remote attacker to cause heap corruption, potentially leading to arbitrary code execution or denial of service. The high CVSS score indicates severe impact on system confidentiality, integrity, and availability. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html for current remediation guidance. Until confirmation of a fix, users should exercise caution when opening untrusted video files. No explicit vendor statement about no action required or mitigation is provided.