An integer overflow in the Skia rendering library embedded in Google Chrome enables a remote attacker who has already compromised the renderer process to escape its sandbox. The flaw is identified as an overflow in integer calculations performed during image or canvas rendering, which can corrupt memory and allow the renderer to execute code beyond its limited privileges. Because the surface of exploitation lies within the renderer, the vulnerability presents a high-impact attack where an attacker can potentially access files, leak data, or perform further lateral movement on the host system.

Google Chrome browsers on desktop platforms running any version prior to 150.0.7871.47. The flaw resides in the Skia library that is part of the renderer process, which is responsible for drawing web content. All builds that bundle Skia and run the renderer with sandbox restrictions are affected, and the issue does not apply to newer Chrome releases that include the patch.

The CVSS base score of 8.3 indicates a high severity for this flaw. The EPSS score of less than 1% suggests that, at the time of this analysis, the probability of exploitation is very low, and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires a two‑step scenario: an attacker must first deliver a crafted HTML page or other content that causes the renderer process to become compromised, and then trigger the integer overflow during rendering to escape the sandbox. The likely attack vector is a malicious website or phishing email that includes the vulnerable content. The impact remains confined to an escape from the renderer sandbox, and does not guarantee arbitrary code execution on the host, but the ability to escape can be used to facilitate further attacks.