This vulnerability involves an integer overflow in the Media processing code of Google Chrome before version 147.0.7727.55. Exploiting this overflow via a crafted video file could lead to heap corruption, potentially allowing an attacker to execute arbitrary code or cause denial of service. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction. The vulnerability is tracked as CWE-472. Although the severity is high, no official remediation level or patch availability is explicitly stated in the vendor advisory provided.

Successful exploitation could result in heap corruption leading to arbitrary code execution or denial of service, impacting confidentiality, integrity, and availability of the affected system. The attack requires user interaction and can be performed remotely without privileges. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to version 147.0.7727.55 or later once confirmed available. Until then, exercise caution when opening untrusted video files.