The vulnerability is an integer overflow in the WebView component of Google Chrome on Android, which allows a local attacker to cause a denial of service by loading a crafted malicious file. The flaw is categorized as CWE‑472, an integer overflow weakness. The impact is confined to the device where the attacker can execute the malicious file and cause the WebView to crash, resulting in application unavailability.

Affected vendor: Google. Product: Chrome (Android). The flaw exists in versions prior to 149.0.7827.53, as the Advisory confirms that the issue was resolved in that release. No other product versions or sub‑products are listed.

The risk for an attacker is limited to local privilege. Since the prerequisite is that the attacker can place a malicious file on the device, the exploit likelihood depends on physical or local access. The EPSS score is not available, and the vulnerability is not listed in CISA KEV, indicating that there is no evidence of widespread exploitation. The Chromium security severity is Low, suggesting minimal impact beyond a local denial of service.