This vulnerability arises from insufficient validation of untrusted input within the GPU component of Google Chrome on Android versions before 148.0.7778.216. An attacker with control over the renderer process could leverage this flaw to perform a sandbox escape via a crafted HTML page, potentially increasing the attacker's privileges beyond the renderer sandbox. The issue is recognized by Chromium security as high severity. No CVSS score is assigned, and no direct patch or remediation level is indicated in the available data. The vendor advisory link is provided but does not specify patch availability or mitigation instructions.

If exploited, this vulnerability could allow an attacker who has already compromised the renderer process to escape the sandbox, potentially leading to greater control over the affected device. This elevates the risk of further compromise beyond the renderer process sandbox. However, no known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Until official fixes or mitigations are confirmed, users should ensure they update to the latest Chrome version once available.