Chromoting in Google Chrome before version 150.0.7871.47 does not properly validate untrusted input received over the network, creating an input validation weakness (CWE‑20). The description indicates that a successful exploitation could lead to heap corruption, but the report does not explicitly state whether this would result in code execution or service disruption. Based on the wording "potentially exploit", it is inferred that an attacker might aim to achieve arbitrary code execution or cause a denial of service, but these outcomes are not confirmed by the available data.

Google Chrome installations earlier than version 150.0.7871.47 on any supported operating system are affected because the vulnerable Chromoting component is bundled with those releases.

The CVSS score of 8.8 indicates high severity, but the EPSS score of less than 1% suggests low current exploitation likelihood, and the flaw is not listed in the KEV catalog. Attackers would need to send crafted network traffic to the Chromoting service; no publicly documented exploit is known yet, so the risk remains theoretical.