This vulnerability is a heap buffer overflow in the WebRTC implementation of Google Chrome before version 148.0.7778.179. It enables remote code execution inside the sandbox via a specially crafted HTML page. The CVSS 3.1 base score is 8.8, reflecting high impact on confidentiality, integrity, and availability with network attack vector and no privileges required but user interaction needed. The vendor advisory linked corresponds to a stable channel update that addresses this issue.

Successful exploitation allows remote attackers to execute arbitrary code within the sandboxed environment of the browser, potentially compromising user data and system integrity. The high CVSS score indicates that confidentiality, integrity, and availability are all highly impacted. However, exploitation requires user interaction (visiting a malicious page). There are no reports of active exploitation in the wild.

A fix is available in Google Chrome version 148.0.7778.179 as indicated by the vendor's stable channel update advisory. Users and administrators should update affected Chrome installations to this version or later to remediate the vulnerability. No additional mitigation steps are specified or required beyond applying the official update.