Google Chrome on Android contains a use-after-free flaw in its Autofill component. The vulnerability allows a malicious renderer process, which the attacker has already compromised, to cause a sandbox escape when a specially crafted HTML document is loaded. The flaw falls under CWE‑416 and can enable the attacker to elevate privileges or execute code outside the browser sandbox, thereby threatening confidentiality, integrity, and availability of the device.

The issue affects any Android version of Google Chrome prior to build 149.0.7827.53. Systems running earlier releases lack the protection that the patched code provides.

No EPSS score is available, and the vulnerability is not listed in CISA KEV. The referenced Chromium severity is Medium, suggesting moderate likelihood of exploitation in practice. Exploitation requires an attacker to have already injected malicious code into the renderer process and to serve a page that exploits the dangling pointer. While not trivial, the combination of a prior compromise and crafted content could lead to sandbox escape.