This vulnerability involves an out-of-bounds write (heap buffer overflow) in the GPU component of Google Chrome on Android. Exploitation requires prior compromise of the renderer process and can lead to sandbox escape, increasing the attacker's privileges. The issue affects Chrome versions before 149.0.7827.103. The CVSS 3.1 score is 8.3, reflecting high impact on confidentiality, integrity, and availability. No explicit vendor remediation level or patch link is provided in the data, but a vendor advisory URL is available for further details.

Successful exploitation can allow an attacker with control over the renderer process to escape the sandbox, potentially leading to full compromise of the affected device. The vulnerability impacts confidentiality, integrity, and availability with high severity.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html for current remediation guidance. Users should update to version 149.0.7827.103 or later once the fix is confirmed available. Until then, avoid visiting untrusted or suspicious web content that could trigger exploitation.