An out‑of‑bounds write in ANGLE within Google Chrome can result in heap corruption, which may allow a remote attacker to execute arbitrary code. The weakness corresponds to CWE‑787 and is classified with a high severity level by Chromium’s security team.

Google Chrome builds older than 148.0.7778.216 are affected; this includes the stable channel releases prior to that version. Only Google Chrome browsers are impacted.

The EPSS score is low (<1%) and it is not listed in the CISA KEV catalog. Nevertheless, because user interaction with a crafted HTML page is required, the exploit is considered moderate to high in risk. The attack likely proceeds by loading malicious web content that triggers the out‑of‑bounds write, potentially leading to privilege escalation or system compromise. No public exploit is known at the time of this report.