This vulnerability involves a use-after-free condition in the Omnibox feature of Google Chrome for Android, affecting versions before 150.0.7871.47. Exploitation requires user interaction through specific UI gestures on a maliciously crafted HTML page, which may result in heap corruption. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. The vendor advisory linked does not explicitly state patch availability or remediation details.

Successful exploitation could lead to heap corruption, potentially allowing an attacker to execute arbitrary code or cause a denial of service on the affected device. The impact affects confidentiality, integrity, and availability at a high level according to the CVSS score. No known active exploits have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor the official Google Chrome release notes and update to version 150.0.7871.47 or later once confirmed. Until then, avoid engaging in untrusted UI interactions on suspicious web pages in Chrome on Android.