CVE-2026-121229

Summary

ANGLE, a graphics library used by Chrome on Android, contained a memory corruption vulnerability that could be triggered remotely via a malicious HTML page, allowing an attacker to escape the browser sandbox and execute arbitrary code.

Exploitability

Exploitation requires user interaction (e.g., visiting a crafted webpage) and is non-trivial due to modern mitigations like ASLR and sandboxing, but the CVSS score indicates it is feasible for skilled attackers.

Blast radius

Successful exploitation could lead to full system compromise on affected Android devices, including data theft, malware installation, or lateral movement within the user's environment.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Google Chrome on Android to version 157.0.8103.38 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.