important · Mobile
A crafted page can execute code outside Chrome’s sandbox on Android.
Affects
Google Chrome for Android, the mobile web browser using ANGLE for graphics translation.
The user must load attacker-controlled HTML in an affected Chrome for Android build.
Detail and 2 sources
The page reaches ANGLE, triggers a heap buffer overflow and permits execution outside Chrome’s sandbox.