This vulnerability arises from improper validation of untrusted input within the GPU implementation of Google Chrome on Android before version 149.0.7827.53. An attacker with control over the renderer process could leverage this flaw to escape the sandbox environment, increasing the potential impact of a renderer compromise. The issue is specific to the Android platform and involves crafted HTML content triggering the vulnerability. The Chromium security team has assigned a medium severity rating. No CVSS score or detailed remediation information is available in the input data. The vendor advisory URL is provided but does not explicitly state patch availability or mitigation steps.

If exploited, this vulnerability could allow an attacker who has already compromised the renderer process to escape the sandbox, potentially leading to greater control over the affected device. This elevates the risk associated with renderer process compromises on vulnerable Chrome Android versions. No known exploits in the wild have been reported, which may indicate limited active exploitation at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users should update Google Chrome on Android to version 149.0.7827.53 or later once confirmed by the vendor. Until then, no specific mitigation steps are provided by the vendor advisory. Monitor official Google Chrome release notes for updates.