Integer overflow in the GPU component of Google Chrome prior to version 157.0.8103.38 can be triggered by a crafted HTML page. A remote attacker who has already compromised the renderer process can exploit the overflow to run code outside of the sandbox, giving them full control over the system. This leads to both confidentiality and integrity loss and is classified as CWE‑190, an integer overflow weakness.

The vulnerability affects Google Chrome on all platforms that use the affected GPU code, specifically versions older than 157.0.8103.38. Any installation using that version is susceptible until a patch is applied.

The Chrome team rates this vulnerability as Medium severity within Chromium. No EPSS score is available and it is not listed in CISA's KEV catalog, but the attack requires a renderer process compromise, which is a significant precondition. After exploitation, the attacker can escape the sandbox and execute arbitrary code. The absence of publicly known exploits suggests low to moderate exploitation probability, yet the potential impact warrants immediate patching.