The vulnerability is an integer overflow in Google Chrome’s ANGLE graphics library. The flaw permits a remote attacker who hosts a specially crafted HTML page to trigger an out‑of‑bounds memory read in the renderer process. If the read succeeds, an attacker could recover arbitrary memory contents, potentially exposing privileged information such as user credentials, cryptographic keys, or other sensitive data present in the browsing context.

All desktop installations of Google Chrome running a version earlier than 148.0.7778.216 are affected. The issue is independent of the operating system; any user of a pre‑patch Chrome release is at risk until the patched version is installed.

The CVSS score of 6.5 marks the flaw in the medium‑high range, while the EPSS score is below 1%, indicating a very low likelihood of widespread exploitation. The vulnerability is not listed in CISA KEV. An attacker would need only to deliver the crafted page to a victim’s browser; no public exploit is known yet, but the simplicity of the out‑of‑bounds read makes potential impact significant for users who visit untrusted sites.