CVE-2026-95332 describes a vulnerability in the Tint component of Google Chrome on Android platforms before version 154.0.8037.57. The issue arises from the use of an uninitialized variable, which can lead to unauthorized reading of memory outside the browser sandbox when processing a maliciously crafted HTML page. This could potentially expose sensitive information from the browser's memory space to a remote attacker. The vulnerability is assigned a medium severity level by Chromium security, but no further technical details or exploit code are provided.

The vulnerability allows a remote attacker to read memory outside the sandbox, potentially exposing sensitive information stored in the browser's memory. However, the impact is limited to information disclosure and does not indicate code execution or privilege escalation. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should update Google Chrome on Android to version 154.0.8037.57 or later once the fix is available. Until then, exercise caution when visiting untrusted web pages.