This vulnerability arises from insufficient validation of untrusted input in the Text handling of Google Chrome on Android versions before 150.0.7871.47. An attacker who has compromised the renderer process could exploit this flaw to perform a sandbox escape via a crafted HTML page. The sandbox escape could increase the attacker's privileges beyond the renderer process sandbox. The issue is classified as low severity by Chromium security. No CVSS score or detailed vendor remediation information is provided in the available data.

A remote attacker with control over the renderer process could potentially escape the sandbox, which may lead to increased privileges on the affected device. However, the severity is considered low, indicating limited impact or difficulty in exploitation. There are no known exploits in the wild reported at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Since the affected version is prior to 150.0.7871.47, updating to version 150.0.7871.47 or later is recommended once confirmed by the vendor. No specific temporary mitigations are provided.