This vulnerability involves uninitialized use in the WebGL implementation of Google Chrome on Android, which can lead to cross-origin data leakage. Specifically, versions of Chrome on Android before 151.0.7922.72 are affected. The issue allows a remote attacker to leak data from other origins by delivering a maliciously crafted HTML page. The CVSS v3.1 base score is 4.3, indicating a medium severity with network attack vector, low complexity, no privileges required, user interaction required, and limited confidentiality impact. No official patch or remediation level is explicitly stated in the provided vendor advisory link, though the affected version suggests that 151.0.7922.72 is the fixed version.

The impact is limited to confidentiality as the vulnerability allows leaking cross-origin data. There is no impact on integrity or availability. The attack requires user interaction and can be performed remotely over the network. The medium severity reflects the limited scope of the data leak and the requirement for user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The affected version is prior to 151.0.7922.72, so updating to version 151.0.7922.72 or later is recommended once confirmed by the vendor advisory. No additional mitigation or workarounds are provided in the advisory.