This vulnerability arises from uninitialized use in the GPU component of Google Chrome on Android versions before 148.0.7778.216. An attacker with control over the renderer process can exploit this flaw to leak data across origins by crafting a malicious HTML page. The issue is recognized as high severity by Chromium security. No CVSS score or explicit remediation level is provided in the input data, and no known exploits in the wild are reported. The vendor advisory is referenced but does not confirm patch availability within the provided information.

The impact of this vulnerability is the potential leakage of cross-origin data by a remote attacker who has compromised the renderer process. This could lead to unauthorized disclosure of sensitive information accessible within the browser context. No further impact details or exploitation reports are available.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Until official confirmation, users should update to version 148.0.7778.216 or later when available and follow any vendor instructions.