Google Chrome Use-After-Free Vulnerability in XR on Android

A use-after-free vulnerability has been identified in the XR component of Google Chrome for Android, affecting versions prior to 147.0.7727.101. This vulnerability allows remote attackers to conduct out-of-bounds memory reads by exploiting a crafted HTML page.

Impact

Exploitation of this vulnerability leads to a use-after-free condition, allowing for out-of-bounds memory reads, which can potentially be exploited to execute arbitrary code or cause a denial-of-service condition.

Remediation

Users can update to Google Chrome version 147.0.7727.101 to address this vulnerability.