Android Framework and Native Libraries Elevation of Privilege Vulnerability

Vulnerability

A vulnerability allowing local elevation of privilege has been identified in the Android Framework and native libraries. This issue arises from a possible out-of-bounds read in the Parcel component, due to a missing bounds check. Exploitation of this vulnerability does not require any additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.

Remediation

Users can update their devices to the December 2025 security patch level to address this vulnerability.

Added: Dec 8, 2025, 5:45 PM
Updated: Dec 8, 2025, 7:03 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
7.5
exploitability
5.3
remediation
0.0
relevance
1.4
threat
3.2
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.