CVE-2026-11085 is an integer overflow vulnerability in the GPU processing of Google Chrome on Android devices before version 149.0.7827.53. Exploiting this flaw could enable a remote attacker to trigger out of bounds memory access via a specially crafted HTML page. The vulnerability is classified under CWE-190 (Integer Overflow or Wraparound) and has a high impact on confidentiality, integrity, and availability as indicated by its CVSS vector. No official remediation level or patch link is explicitly provided in the input, but a vendor advisory URL is available for further details.

Successful exploitation could lead to arbitrary code execution or memory corruption on affected Android devices running vulnerable versions of Chrome. The CVSS score of 8.8 reflects high impact on confidentiality, integrity, and availability. There are no known exploits in the wild at the time of this report.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to Chrome version 149.0.7827.53 or later once available. Until then, avoid visiting untrusted or suspicious web pages on affected devices.