A race condition in Chrome’s media rendering code on Android allows a remote attacker who has already compromised the renderer process to corrupt media stream metadata via a crafted HTML page. The flaw does not grant arbitrary code execution or system compromise; instead it introduces malformed or inconsistent media data that could affect applications relying on accurate metadata. It is classified as a low‑severity issue by Chromium security reviewers.

The vulnerability affects Google Chrome for Android versions earlier than 147.0.7727.55. Users of Chrome on Android should verify their current version and apply updates when available.

The defect is rated low severity and is not listed in the CISA Known Exploited Vulnerabilities catalog. Exploitation requires the attacker to have already obtained control of the renderer process, which limits the attack surface. Without that prerequisite, the race condition cannot be triggered. No EPSS score is available, so the overall risk can be considered modest and primarily mitigated by keeping Chrome up to date.