This vulnerability involves an integer overflow in the GPU processing of Google Chrome on Android before version 148.0.7778.96. Exploitation requires prior compromise of the renderer process, after which an attacker can leverage a crafted HTML page to achieve arbitrary memory read and write capabilities. The issue is recognized as high severity by Chromium security but lacks a publicly confirmed patch or remediation status in the supplied information.

If exploited, an attacker with control over the renderer process can perform arbitrary memory read and write operations, potentially leading to further compromise of the browser or device. However, exploitation requires an initial renderer compromise, limiting the attack vector to scenarios where the attacker already has some level of code execution or control within the renderer context.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution with untrusted content and consider updating to the latest Chrome version once available.