The vulnerability resides in CarrierConfigLoader.overrideConfig, where a permissions bypass allows an application to evade the UID verification. This flaw enables a local attacker to gain higher privileges without requiring separate execution rights or user interaction. The flaw effectively changes the security context of a calling component, allowing it to perform privileged operations.

Android devices that include the vulnerable CarrierConfigLoader component are affected. The specific Android releases are not enumerated in the data, so any device running an unpatched version of CarrierConfigLoader could be at risk.

The EPSS score is below 1%, indicating a low likelihood of exploitation at present, and the vulnerability is not listed in the CISA KEV catalog. However, because the attack does not require user interaction and only needs local execution, the risk to individual devices is significant. An attacker with local access could exploit the flaw to elevate privileges and compromise system integrity. The attack vector is local; no remote exploitation is implied.