This vulnerability arises from insufficient validation of untrusted input handled by the GPU in Google Chrome on Android versions prior to 148.0.7778.216. An attacker who has already compromised the renderer process could exploit this flaw by delivering a specially crafted HTML page to perform a sandbox escape, potentially leading to elevated privileges or further compromise of the device. The CVSS vector indicates network attack vector, high attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability.

Successful exploitation could allow a remote attacker to escape the Chrome sandbox on Android devices, potentially leading to full compromise of the affected system. The impact includes high confidentiality, integrity, and availability loss. However, exploitation requires prior compromise of the renderer process and user interaction.

The provided vendor advisory link does not explicitly confirm patch availability or remediation status. Since the affected version is prior to 148.0.7778.216, updating to version 148.0.7778.216 or later is implied as a mitigation step. Patch status is not yet confirmed—check the official Google Chrome release blog for the latest remediation guidance. No additional vendor-recommended mitigations are provided in the advisory.