REDHAT-BUG-2512231: Use After Free

Q: Who is realistically exposed to this issue?

Users of Google Chrome for Android running versions earlier than 151.0.7922.109 are affected, but exploitation requires an attacker to have already compromised the browser renderer process.

Q: What does an attacker need to exploit the vulnerability?

The attacker needs a compromised renderer process and a crafted HTML page. The issue may then allow a sandbox escape through a use-after-free condition in Skia.

Q: How can I determine whether a device is affected?

Check the installed Google Chrome for Android version. Versions prior to 151.0.7922.109 are affected according to the available information.

Published Aug 6, 2026

Updated

Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

Affected Software

1 affected component

Google Chrome for Android<151.0.7922.109

Event History

Aug 6, 2026

Data Sourced

via Red Hat·10:23 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Who is realistically exposed to this issue?

Users of Google Chrome for Android running versions earlier than 151.0.7922.109 are affected, but exploitation requires an attacker to have already compromised the browser renderer process.

What does an attacker need to exploit the vulnerability?

The attacker needs a compromised renderer process and a crafted HTML page. The issue may then allow a sandbox escape through a use-after-free condition in Skia.

How can I determine whether a device is affected?