CVE-2026-19146 describes an uninitialized use vulnerability in the GPU component of Google Chrome on Android platforms before version 151.0.7922.109. This flaw enables a remote attacker, who already has control over the renderer process, to extract potentially sensitive information from process memory by delivering a specially crafted HTML page. The vulnerability is categorized under CWE-457 and has a moderate CVSS score of 5.3, reflecting the need for user interaction and high attack complexity. No known exploits are reported in the wild, and no patch or official remediation details are provided in the available data.

The vulnerability allows an attacker with prior compromise of the renderer process to read potentially sensitive information from process memory, which could lead to information disclosure. However, exploitation requires user interaction and has a high attack complexity, limiting the ease of exploitation. There is no indication of integrity or availability impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor for updates from Google Chrome for Android and apply updates once available. Until then, limiting exposure to untrusted content and avoiding suspicious HTML pages may reduce risk.