This vulnerability involves uninitialized use in the GPU component of Google Chrome on Android versions before 148.0.7778.216. An attacker can exploit this by crafting a malicious HTML page that, when processed by the browser, may lead to disclosure of sensitive information from the process memory. The vulnerability is recognized as high severity by Chromium security. The vendor advisory references a stable channel update but does not explicitly confirm a fix for this issue. No CVSS score is assigned, and no known exploits in the wild have been reported.

A remote attacker could leverage this vulnerability to obtain potentially sensitive information from the process memory of the affected Chrome browser on Android. This could lead to information disclosure but does not indicate code execution or privilege escalation. No known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The linked Google Chrome stable channel update may include a fix, but this is not explicitly confirmed. Users should update to version 148.0.7778.216 or later once confirmed by the vendor. Until then, no specific mitigation steps are provided by the vendor advisory.