Android Skia Out-of-Bounds Write Vulnerability in Deflate Function Allowing Local Privilege Escalation

A vulnerability has been identified in the Skia graphics library, specifically within the allocation function used by zlib for decompression. This issue arises from an integer overflow that can lead to an out-of-bounds write. As a result, the vulnerability could be exploited to escalate privileges locally, without requiring any additional execution rights or user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation, allowing a user to gain elevated rights or access within the system.

Remediation

Users can update their devices to the December 2024 security patch level to address this vulnerability.