This vulnerability involves uninitialized memory use within the WebGL implementation of Google Chrome on Android versions before 148.0.7778.216. Exploitation requires a remote attacker to present a specially crafted HTML page that triggers the flaw, potentially exposing sensitive information from the browser's process memory. The issue was publicly disclosed with a high severity rating by Chromium security, but no CVSS score or detailed remediation information is included in the provided data.

Successful exploitation could lead to unauthorized disclosure of potentially sensitive information from the process memory of the affected Chrome browser on Android. This could compromise user privacy or security depending on the nature of the leaked data. There is no indication of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Since the affected product is not a cloud service, remediation depends on applying an update from Google. Users and administrators should monitor official Google Chrome release channels for updates addressing this vulnerability.