Google Android CPM Component Elevation of Privilege Vulnerability

A vulnerability allowing local elevation of privilege has been identified in the Google Android CPM component. This issue arises from improper input validation, which creates a potential for memory overwrite. Exploitation of this vulnerability does not require additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.

Remediation

Users can update their devices to the January 2026 security patch level to address this vulnerability.