This vulnerability in Google Chrome on Android arises from insufficient validation of untrusted input within WebAPKs. A local attacker could exploit this flaw by crafting a malicious file that enables sandbox escape, potentially compromising the security boundaries of the application. The issue affects Chrome versions before 151.0.7922.109. The CVSS 3.1 vector indicates the attack requires local access with low complexity, no privileges, and user interaction, but results in high impact on confidentiality, integrity, and availability with scope changed.

Successful exploitation could allow a local attacker to escape the sandbox environment, potentially leading to full compromise of the affected Chrome process on Android. This could result in unauthorized access to sensitive data, modification of data, or denial of service. The high CVSS score reflects the severity of these impacts.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html for current remediation guidance. Users and administrators should monitor official Google Chrome release notes and apply updates promptly once a fix is released.