Google Android Trusty Out-of-Bounds Read Vulnerability Allowing Information Disclosure

A vulnerability in the Trusty component of Google Android has been identified, where an out-of-bounds read may occur due to an improper bounds check in the 'dev_send' function of 'tipc_dev_ql'. This flaw could lead to local information disclosure without requiring additional execution privileges or user interaction for exploitation.

Impact

Exploitation of this vulnerability could result in unauthorized local information disclosure.

Remediation

Users can update their devices to the March 2025 security patch level to address this vulnerability.