This vulnerability involves a use-after-free condition in the XR (Extended Reality) functionality of Google Chrome on Android platforms before version 147.0.7727.101. Exploitation requires a remote attacker to deliver a specially crafted HTML page that triggers an out-of-bounds memory read. The issue is recognized as critical by Chromium security but lacks detailed remediation information in the provided data. The vendor advisory link is available but does not specify patch or mitigation details in the input.

Successful exploitation could allow a remote attacker to read memory out of bounds, potentially leading to information disclosure or application instability. The severity is considered critical by Chromium security standards. No evidence of active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html for current remediation guidance. Users of affected Chrome versions on Android should monitor official Google Chrome release notes and update to the latest version once available to mitigate this vulnerability.