This vulnerability involves uninitialized memory use within the WebGL implementation of Google Chrome on Android versions before 148.0.7778.216. Exploitation can lead to information disclosure across origins, violating browser security boundaries. The issue was publicly disclosed on May 28, 2026. While the Chromium security team rates this as high severity, no CVSS score or explicit remediation status is included in the provided data. The vendor advisory URL is given but does not contain patch details in the input.

Successful exploitation could allow a remote attacker to leak sensitive cross-origin information from a user's browser session on affected Chrome versions for Android. This compromises the confidentiality of data that should be isolated by the browser's same-origin policy. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Users should update to Chrome version 148.0.7778.216 or later once confirmed. Until then, no specific mitigation steps are provided in the available data.