An out‑of‑bounds write occurs in the ANGLE graphics library used by Google Chrome. The flaw permits an attacker to corrupt memory when processing a specially crafted HTML page, creating the possibility of executing arbitrary code outside Chrome’s sandbox. This is a classic boundary error (CWE‑787) that could compromise an entire system if exploited successfully.

The vulnerability affects Google Chrome versions older than 154.0.8037.57. Any installation of Chrome that has not been updated to this version or later is potentially exposed.

The CVSS score of 9.6 indicates a high severity, and while the EPSS score is not available, the lack of listing in the CISA KEV catalog suggests no known widespread exploitation at the time of this analysis. The attack vector is inferred to be a remote attacker delivering a crafted HTML page, possibly over the web or via a local file with a malicious URL. Given the nature of the vulnerability, exploitation would allow code execution with privileges exceeding the sandbox protection, jeopardizing victim confidentiality, integrity, and availability.