CVE-2021-21166

A timing flaw in Chrome's audio processing allows attackers to corrupt memory through a specially crafted webpage. This could let them crash the browser or potentially run malicious code.

A data race condition in the audio subsystem of Chrome versions prior to 89.0.4389.72 enables heap corruption exploitation. An attacker delivers a crafted HTML page that triggers concurrent access to shared memory structures; no user interaction beyond visiting the page is required. Successful exploitation results in memory corruption with potential code execution.