This vulnerability arises from insufficient validation of untrusted input within the Skia graphics library used by Google Chrome on Android. An attacker who has compromised the renderer process could exploit this flaw to perform a sandbox escape, which would elevate their privileges beyond the renderer sandbox. The issue affects Chrome versions prior to 148.0.7778.216. The Chromium security team has assigned a medium severity level to this vulnerability. No CVSS score or detailed remediation information is provided in the available data. The vendor advisory URL is provided but does not include explicit patch or mitigation details in the input.

A successful exploitation could allow an attacker with control over the renderer process to escape the sandbox environment, potentially leading to higher privilege code execution on the affected device. This increases the risk of further compromise beyond the renderer process sandbox. However, exploitation requires prior compromise of the renderer process, limiting the initial attack vector. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Since the affected version is prior to 148.0.7778.216, updating to version 148.0.7778.216 or later is recommended if the vendor advisory confirms a fix. Until confirmation, monitor official Google Chrome release notes for updates addressing this issue.