Android Ndk Media Codec Heap Buffer Overflow Vulnerability Allowing Local Privilege Escalation

A heap buffer overflow vulnerability has been identified in multiple functions of NdkMediaCodec.cpp. This vulnerability allows for an out-of-bounds write, which could lead to local escalation of privilege without requiring additional execution privileges. Exploitation of this vulnerability does not need user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized access to elevated privileges, potentially allowing a user to perform actions or access resources that are normally restricted.

Remediation

Users can update to the June 2025 security patch level to address this vulnerability.