This vulnerability in Google Chrome on Android arises from insufficient validation of untrusted input within the Picture-in-Picture functionality. An attacker who has already compromised the renderer process could exploit this flaw by delivering a crafted HTML page to perform a sandbox escape, potentially gaining elevated privileges or executing arbitrary code outside the sandbox. The issue affects versions prior to 151.0.7922.72. The CVSS 3.1 base score is 9.6, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope change, and high impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker to escape the sandbox environment in Google Chrome on Android, leading to potential full compromise of the affected device's browser process and possibly the underlying system. This could result in unauthorized code execution with elevated privileges, data theft, or further system compromise.

A fix is available in Google Chrome version 151.0.7922.72. Users and administrators should update affected Chrome installations on Android to this version or later to remediate the vulnerability. The vendor advisory linked provides official update information. No additional mitigation steps are indicated.