An out-of-bounds read vulnerability exists in the codecs of Google Chrome before version 148.0.7778.96. Exploitation involves a remote attacker supplying a malicious file that triggers the out-of-bounds read, potentially exposing sensitive information from the browser's process memory. This vulnerability is recognized by the Chromium security team with a medium severity rating. The vendor has published a stable channel update announcement referencing this version, implying a fix is included, though no direct patch confirmation is stated in the input data.

Successful exploitation could lead to disclosure of sensitive information from Chrome's process memory. There is no indication of code execution or privilege escalation. No known exploits in the wild have been reported at this time.

A stable channel update for Google Chrome version 148.0.7778.96 has been published by Google, which likely includes a fix for this vulnerability. Users should update to this version or later to remediate the issue. Patch status is not explicitly confirmed in the advisory content provided; therefore, users should verify the update details on the official Google Chrome release blog linked in the vendor advisory.