Android Skia Heap Overflow Vulnerability in SkBlurMaskFilterImpl Allowing Remote Code Execution

A heap overflow vulnerability has been identified in the Skia graphics library used by Android. The issue arises in the 'prepare_to_draw_into_mask' function within 'SkBlurMaskFilterImpl.cpp', where improper input validation creates the potential for a heap overflow. This vulnerability could be exploited to execute remote code without requiring additional privileges or user interaction.

Impact

Exploitation of this vulnerability could lead to remote code execution on the affected system.

Remediation

Users are advised to update to the latest version of Android where this vulnerability has been addressed. For specific update instructions, refer to the Android Security Bulletin for December 2024.