An integer overflow in the media parser triggers during the processing of a video file. When a maliciously crafted file is parsed, the overflow can corrupt heap memory and potentially disrupt browser operation or compromise user data. The weakness corresponds to integer overrun (CWE‑190) and improper memory boundary handling (CWE‑472).

Google Chrome versions prior to 147.0.7727.55 on Windows, macOS, and Linux are affected, as the flaw exists in all builds before this update.

The vulnerability has a CVSS score of 8.8, indicating high severity. The EPSS score is below 1%, suggesting a low probability of exploitation. It is not cited in the CISA Known Exploited Vulnerabilities list, which reduces the likelihood that it is actively leveraged. The probable attack vector involves delivering a crafted video file that the browser automatically parses; onset of heap corruption would then allow further exploitation if additional weaknesses exist.