The vulnerability resides in the WebRTC component of Chromium and can be triggered by crafted media packets. An attacker may force the browser to crash or become unresponsive, disrupting user sessions and potentially leading to workflow interruptions. This flaw falls under a buffer or memory safety weakness that compromises the integrity of the application.

All users of the Chromium browser are potentially impacted, as specific version numbers are not listed in the advisory. The lack of version information suggests that any current release could be vulnerable until an official update is issued. Environments that rely on Chromium for secure communication should verify that their installed version is up to date or plan to upgrade.

The CVSS score of 6.5 indicates a moderate level of risk, while no EPSS data is available, making precise exploitation likelihood hard to assess. The flaw is not listed in the CISA KEV catalog. Likely remote exploitation would involve delivering malicious WebRTC traffic to an affected browser over public or private networks. Because WebRTC exchanges media via UDP, an attacker could target a reachable user without needing privileged access.