The vulnerability is a buffer overflow in the WebRTC component of Google Chrome that can be triggered by a maliciously crafted HTML page. When successfully triggered, it may allow an attacker to overwrite memory and potentially execute arbitrary code inside the sandbox that Chrome uses for rendering web content. The impact is limited to operations that run within the browser sandbox.

Google Chrome versions before 153.0.8010.36 on Windows, macOS, and Linux are susceptible. Users running these earlier stable releases that have not yet updated to a patched version may be affected. The flaw exists in the WebRTC component and remains present until the vendor delivers a fix.

Chromium rates this issue as low severity, yet it grants arbitrary code execution inside the Chrome sandbox. The EPSS score is not available, and the issue is not listed in CISA's KEV catalog. The likely attack vector is a malicious web page that a user visits; no public exploits are reported at this time, but the flaw could become a target for attackers who can persuade users to load the crafted page.