Google Chrome out-of-bounds read vulnerability (CNVD-2023-12022)

Google Chrome is a web browser from Google, Inc. An out-of-bounds read vulnerability exists in versions of Google Chrome prior to 110.0.5481.77. The vulnerability stems from a lack of proper validation of user-supplied data in WebRTC, where specially crafted data could trigger a read beyond the end of the allocated buffer. An attacker could exploit this vulnerability to perform out-of-bounds memory reads via a specially crafted HTML page.