This vulnerability involves an integer overflow in the Skia graphics library used by Google Chrome on Windows. Exploitation requires prior compromise of the renderer process and enables an attacker to write outside the intended memory bounds, potentially leading to further exploitation such as code execution or process corruption. The issue affects Chrome versions before 148.0.7778.168. Google has published a stable channel update that presumably fixes this vulnerability, though the vendor advisory does not explicitly confirm patch status or remediation level.

Successful exploitation allows an attacker with control over the renderer process to perform out-of-bounds memory writes, which can lead to arbitrary code execution or browser instability. The vulnerability is rated critical by Chromium security, indicating a high impact on confidentiality, integrity, and availability of the affected system.

Google has released a stable channel update for Chrome that addresses this vulnerability. Users and administrators should update Chrome to version 148.0.7778.168 or later to remediate this issue. Patch status is not explicitly confirmed in the vendor advisory, so verifying update application is recommended.