A heap buffer overflow exists in the WebAudio component of Google Chrome versions older than 147.0.7727.55. The flaw permits a remote attacker, through a crafted webpage, to read data from the browser process memory and exfiltrate potentially sensitive information. The weakness corresponds to unchecked bounds in a heap buffer, classified as CWE‑122, and the Chromium project rates the vulnerability as high severity.

The vulnerability affects all installations of Google Chrome with versions prior to 147.0.7727.55. Users operating these older releases are vulnerable to memory disclosure if they load a malicious page. Newer releases, beginning with 147.0.7727.55, contain the fix that blocks the overflow.

The vulnerability is remote, triggered by opening a malicious HTML document in the browser. While no EPSS score is available and it is not listed in the CISA KEV catalog, the high severity rating and the nature of the flaw suggest that exploitation is feasible with a crafted payload. Administrators should treat it as a significant risk until the preset update is installed, after which the risk is mitigated.