Description
In growData of Parcel.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Android | 15, 14, 13, 12L, 12 | — |
Advisories 3
- NCSC-2025-0003 Kwetsbaarheden verholpen in Google Android en Samsung Mobile NCSC-NL (Netherlands) · Jan 7, 2025
- WID-SEC-2025-0014 Samsung Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 6, 2025
- WID-SEC-2025-0013 Google Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 6, 2025