This vulnerability involves a use-after-free condition in the Bluetooth handling code of Google Chrome on Android. An attacker who has compromised the renderer process could exploit this flaw to perform a sandbox escape, increasing their privileges beyond the renderer sandbox. The issue affects Chrome versions before 151.0.7922.72. The CVSS 3.1 vector indicates network attack vector, high attack complexity, no privileges required, user interaction required, unchanged scope, and low impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker with control over the renderer process to escape the sandbox, potentially leading to increased privileges on the affected device. The impact on confidentiality, integrity, and availability is rated low, consistent with the medium severity rating.

A fixed version of Google Chrome for Android, 151.0.7922.72, is available and should be applied to remediate this vulnerability. Users and administrators should update to this version or later. No additional mitigation steps are indicated by the vendor advisory.