Android Gralloc4 Out-of-Bounds Write Vulnerability Allowing Local Information Disclosure
Vulnerability
A vulnerability in the gralloc4 component of Android 16 has been identified, allowing for a possible out-of-bounds write due to a missing bounds check. This vulnerability could lead to local information disclosure without requiring additional execution privileges or user interaction for exploitation.
Impact
Exploitation of this vulnerability could result in unauthorized local information disclosure.
Remediation
Users can update to Android 16 with a security patch level of 2025-07-01 or later to address this vulnerability.
Added: Sep 5, 2025, 5:30 PM
Updated: Sep 5, 2025, 5:59 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
3.3remediation
0.0relevance
0.4threat
0.0urgency
2.9incentive
0.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.