Out of Bounds Read in Google Chrome VideoCapture

Executive Summary

This vulnerability is an out of bounds read in the VideoCapture component of Google Chrome versions prior to 149.0.7827.115. It allows a remote attacker who has already compromised the GPU process to read memory outside the intended boundaries.

By exploiting this flaw via a specially crafted HTML page, the attacker can potentially obtain sensitive information from the process memory.

Useful 0 Not Useful 0

Impact Analysis

If exploited, this vulnerability can lead to unauthorized disclosure of sensitive information from the memory of the GPU process in Google Chrome.

This could compromise user privacy and security by exposing data that should be protected.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows a remote attacker who has compromised the GPU process to obtain potentially sensitive information from process memory via a crafted HTML page.

Such unauthorized access to sensitive information could potentially lead to non-compliance with data protection standards and regulations like GDPR and HIPAA, which require the protection of personal and sensitive data against unauthorized access.

However, specific impacts on compliance depend on the context in which Google Chrome is used and the nature of the sensitive information exposed.

Useful 0 Not Useful 0