CVE-2026-110152

Summary

A buffer overflow vulnerability in ANGLE (Almost Native Graphics Layer Engine) library allows remote attackers to execute arbitrary code outside Chrome's sandbox on Android devices. This critical flaw enables attackers to potentially take full control of affected systems through crafted HTML pages.

Exploitability

Exploitation requires a user to visit a malicious webpage, making it moderately difficult but highly possible in phishing scenarios or compromised websites, with no additional preconditions needed.

Blast radius

The vulnerability affects all Android users running Chrome versions prior to 155.0.8059.79, potentially exposing millions of devices to remote code execution attacks through web browsing.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Chrome for Android version 155.0.8059.79 or later immediately.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.