This vulnerability affects the Payments feature in Google Chrome on Android before version 149.0.7827.53. A local attacker can exploit an implementation flaw to leak data across origins using a specially crafted HTML page. The issue was identified and publicly disclosed with a medium severity rating by Chromium security. The vendor has published a stable channel update announcement but has not explicitly confirmed patch availability or remediation details for this specific issue in the provided advisory link.

The impact is limited to local attackers being able to leak cross-origin data, which could lead to unauthorized access to sensitive information from other origins within the browser context. There are no reports of active exploitation, and the severity is assessed as medium by the vendor.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should update Google Chrome on Android to version 149.0.7827.53 or later once the update is confirmed to address this issue. Until then, limiting exposure to untrusted local content may reduce risk.