A crafted video file can trigger an integer overflow in Chromium’s Codecs component, which may allow a remote attacker to escape the browser sandbox. The excess value overflows an unsigned integer, leading to a memory corruption that compromises process isolation and can be leveraged to execute arbitrary code. The weakness is a classic integer overflow (CWE-190) and also involves insufficient bounds checking (CWE-20).

The flaw affects all installations of Google Chrome version 151.0.7922.72 and earlier. Users running these builds on any platform that includes the affected Codecs subsystem are vulnerable.

The vulnerability carries a high severity CVSS score of 9.6. However, the EPSS score of less than 1% indicates a very low current exploitation probability, and the issue is not listed in the CISA KEV catalog. A remote attacker must supply a malicious video file; the likely attack vector is via a web page or email attachment, but this inference is not directly stated in the data. The attacker relies on the browser’s media decoder to exploit the overflow. Once successful, the attacker can break out of the sandbox and execute code with the privileges of the browser process.