Android Framework and System Components Elevation of Privilege Vulnerability

Vulnerability

A vulnerability in the Android framework and system components has been identified, allowing for a local elevation of privilege. This issue arises from a possible out-of-bounds write in the 'writeInplace' function of 'Parcel.cpp'. Exploitation of this vulnerability does not require any additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.

Remediation

Users can update their devices to the January 2025 security patch level to address this vulnerability. Instructions for checking and updating the Android version are available on the Google Support website.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
7.5
exploitability
4.7
remediation
0.0
relevance
0.0
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.