CVE-2026-102331 is a buffer overflow vulnerability in the ANGLE graphics engine within Google Chrome on Android platforms before version 154.0.8037.92. Exploitation requires user interaction (visiting a malicious HTML page) and could lead to arbitrary code execution outside the browser sandbox. The vulnerability is rated critical with a CVSS 3.1 base score of 9.6, reflecting network attack vector, low attack complexity, no privileges required, user interaction needed, and complete impact on confidentiality, integrity, and availability. The vendor has published an advisory indicating a stable channel update addressing this issue.

Successful exploitation allows remote attackers to execute arbitrary code outside the sandbox on affected Android devices running vulnerable Chrome versions. This can lead to full compromise of the browser process and potentially the underlying device, impacting confidentiality, integrity, and availability of the system.

Google has released an official fix in Chrome version 154.0.8037.92. Users and administrators should update affected Chrome installations on Android to this version or later to remediate the vulnerability. No additional mitigation steps are indicated by the vendor advisory.