This vulnerability involves a heap buffer overflow in the GPU processing of Google Chrome on Android devices before version 148.0.7778.168. An attacker can trigger an out-of-bounds memory write by crafting a malicious HTML page, potentially leading to memory corruption. The issue is recognized as high severity by Chromium security. The vulnerability was published on May 14, 2026. No CVSS score or detailed remediation information is currently available in the provided data. The vendor advisory URL is given but does not explicitly state patch availability or mitigation steps in the input.

Successful exploitation could allow a remote attacker to cause memory corruption via out-of-bounds writes, which may lead to denial of service or potentially enable further exploitation depending on the context. However, no known exploits in the wild have been reported. The impact is considered high severity by Chromium security standards.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html for current remediation guidance. Users should update Google Chrome on Android to version 148.0.7778.168 or later once available. Until then, no specific mitigation steps are provided in the vendor advisory or input data.