Android DmAgent Component Elevation of Privilege Vulnerability

Vulnerability

A vulnerability allowing local elevation of privilege has been identified in the DmAgent component of Android. This issue arises from an out-of-bounds write caused by a missing bounds check, which could be exploited to gain system execution privileges. The vulnerability does not require user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.

Remediation

Users can update their devices to the June 2018 security patch level to address this vulnerability.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
7.5
exploitability
2.8
remediation
0.0
relevance
0.0
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.