Android Framework and System Components Out-of-Bounds Write Vulnerability Allowing Local Privilege Escalation

A vulnerability has been identified in the Android framework and system components, specifically in the 'growData' function of 'Parcel.cpp'. This vulnerability arises from an incorrect bounds check, leading to a potential out-of-bounds write. Exploitation of this issue could result in local privilege escalation, with no additional execution privileges required. User interaction is not necessary for exploitation. This vulnerability affects several different versions and/or ranges of Android.

Impact

Exploitation of this vulnerability could lead to unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.

Remediation

Users can update their devices to the January 2025 security patch level to address this vulnerability. Instructions for checking and updating the Android version are available on the Google Support website.