Android Skia Out-of-Bounds Write Vulnerability in BMP Codec Allowing Privilege Escalation

A heap buffer overflow vulnerability has been identified in the Skia library's BMP standard codec, specifically in the 'initializeSwizzler' function. This vulnerability allows for an out-of-bounds write, which could be exploited to escalate privileges remotely, without requiring any additional execution privileges or user interaction. The issue affects Android devices with the April 2025 security patch level.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation on the affected device.

Remediation

Users can update their devices to the April 2025 security patch level or later to address this vulnerability.