Insufficient validation of trust input in WebOTP in Google Chrome on Android prior to 100.0.4896.60 allowed a remote attacker to send arbitrary intents from any app via a malicious app.
{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "100.0.4896.127-0ubuntu0.18.04.1",
            "binary_name": "chromium-browser"
        },
        {
            "binary_version": "100.0.4896.127-0ubuntu0.18.04.1",
            "binary_name": "chromium-browser-l10n"
        },
        {
            "binary_version": "100.0.4896.127-0ubuntu0.18.04.1",
            "binary_name": "chromium-chromedriver"
        },
        {
            "binary_version": "100.0.4896.127-0ubuntu0.18.04.1",
            "binary_name": "chromium-codecs-ffmpeg"
        },
        {
            "binary_version": "100.0.4896.127-0ubuntu0.18.04.1",
            "binary_name": "chromium-codecs-ffmpeg-extra"
        }
    ]
}