A critical integer overflow flaw in WebGL for Google Chrome on Android allows remote attackers to bypass sandbox security and execute arbitrary code.

This vulnerability involves an integer overflow in the WebGL implementation. An unauthenticated remote attacker can leverage this flaw to escape the browser sandbox when a user renders a malicious HTML page.

With a CVSS score of 9.6, this vulnerability is classified as critical. Exploitation allows an attacker to break out of the browser sandbox, which could result in full device control, unauthorized access to local storage, and the execution of malicious payloads with elevated privileges.

Immediate Action: Apply the update to Google Chrome version 151.0.7922.72 across all affected Android devices.

Proactive Monitoring: Review security logs for indicators of WebGL-related errors or memory corruption patterns.

Compensating Controls: Utilize enterprise mobile device management solutions to enforce browser updates and restrict access to high-risk web content.

Public Exploit Available: No

This vulnerability is highly severe and requires immediate attention to prevent potential exploitation. Organizations should ensure all managed devices receive the patch to version 151.0.7922.72 as soon as possible.