This vulnerability involves an inappropriate implementation in the GPU component of Google Chrome on Android platforms before version 148.0.7778.216. A remote attacker can exploit this flaw by crafting a malicious HTML page that, when processed by the vulnerable browser, may leak sensitive information from the browser's process memory. The issue is recognized as high severity by Chromium security, but no CVSS score or detailed technical exploitation methods are provided. The vulnerability affects only Android Chrome versions prior to the specified fixed version.

The impact is the potential unauthorized disclosure of sensitive information from process memory to a remote attacker. This could lead to privacy breaches or leakage of confidential data handled by the browser. There are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Users should update Google Chrome on Android to version 148.0.7778.216 or later once available to address this vulnerability. Until then, caution is advised when browsing untrusted content.