This vulnerability in Google Chrome on Android arises from insufficient validation of untrusted input in the Drag and Drop functionality. An attacker who has already compromised the renderer process could exploit this flaw to perform a sandbox escape, potentially gaining higher privileges or executing code outside the intended sandbox environment. The issue affects versions prior to 149.0.7827.53. The CVSS v3.1 score is 8.3, indicating a high severity with network attack vector, high impact on confidentiality, integrity, and availability, and requiring user interaction with high attack complexity.

Successful exploitation could allow an attacker with access to the renderer process to escape the sandbox, potentially leading to elevated privileges and further compromise of the device. This impacts confidentiality, integrity, and availability of the affected system. No known exploits in the wild have been reported at this time.

A fix is available in Google Chrome version 149.0.7827.53. Users and administrators should update affected Chrome installations on Android to this version or later. The vendor advisory linked provides official update information. No additional mitigations are specified.