Android Bluetooth Privileged Process Heap Corruption Vulnerability Allowing Privilege Escalation

A vulnerability has been identified in the Bluetooth component of Android that allows for controlled heap corruption within a privileged process. This issue arises from an integer overflow, which could be exploited to escalate privileges locally, without requiring any additional execution rights or user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation within the affected Android environment.

Remediation

Users can update their devices to the June 2026 security patch level to address this vulnerability. Instructions for checking and updating the Android version are available on the Google Support website.