This vulnerability involves a heap buffer overflow in the Chromecast feature of Google Chrome on specified platforms before version 148.0.7778.179. Exploitation requires local attacker access and involves sending malicious network traffic to trigger arbitrary code execution inside a sandbox. The vulnerability is classified with medium severity by Chromium security but lacks a CVSS score and explicit remediation details in the provided information.

Successful exploitation could allow a local attacker to execute arbitrary code within the sandboxed environment of the Chromecast component in affected Chrome versions. This may lead to limited code execution capabilities constrained by sandbox protections. No evidence of active exploitation is reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0841193308.html for current remediation guidance. Users should update Google Chrome to version 148.0.7778.179 or later once available to address this vulnerability. Until then, no specific mitigations are detailed in the advisory.