Android Framework CursorWindow Out-of-Bounds Read Vulnerability Allowing Local Information Disclosure

A vulnerability has been identified in the Android Framework's CursorWindow component, specifically in the writeToParcel function. This issue arises from a possible out-of-bounds read caused by uninitialized data, which could lead to local information disclosure. The vulnerability does not require any additional execution privileges and can be exploited without user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information.

Remediation

Users can update their devices to the June 2025 security patch level to address this vulnerability.