This vulnerability is an out of bounds read in the GPU subsystem of Google Chrome on Mac systems before version 148.0.7778.179. An attacker can exploit this by crafting a malicious HTML page that, when rendered by the browser, causes the GPU process to read memory outside its intended bounds. This can lead to disclosure of sensitive information from process memory. The CVSS score is 6.5, reflecting a network attack vector with low complexity, no privileges required, user interaction needed, and a high impact on confidentiality only.

Successful exploitation allows a remote attacker to obtain potentially sensitive information from the memory of the GPU process in Chrome on Mac. There is no impact on integrity or availability. No known exploits have been reported in the wild.

Google has published a vendor advisory linked in the data, but it does not explicitly state the patch or remediation status. The affected versions are prior to 148.0.7778.179, implying that updating to version 148.0.7778.179 or later likely addresses the issue. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.