Executive brief
Google Chrome for Android contains a security vulnerability in its Autofill feature, which automatically completes forms for users. A remote attacker could exploit this flaw by tricking a user into visiting a specially crafted website. If successful, the attacker could potentially bypass security protections (sandbox escape) to gain broader access to the device.
Technical details
A use-after-free (UAF) vulnerability exists in the Autofill component of Google Chrome on Android (CWE-416). The flaw is triggered when the browser incorrectly manages memory during form-filling operations. A remote attacker can exploit this by hosting a malicious HTML page that, when rendered, triggers the memory corruption. This can lead to a sandbox escape, allowing the attacker to execute code outside of the restricted browser environment. The issue is resolved in version 150.0.7871.115.
Affected products
- Google Chrome prior to 150.0.7871.115
Timeline
- 2026-06-05: disclosed: Reported to Google internally
- 2026-07-08: patched: Fixed in stable channel update 150.0.7871.115
- 2026-07-08: advisory