The vulnerability resides in several functions within mem_protect.c of the Android kernel. An integer overflow can trigger an out‑of‑bounds write, which grants an attacker local privilege escalation without requiring any additional execution privileges. The flaw exists even when no user interaction is needed, indicating that any user‑mode process on the system could potentially exploit it.

The affected product is the Android operating system as identified by the kernel source repository. Google’s Android includes the vulnerable kernel code. Specific Android version identifiers are not listed in the CVE, so all builds incorporating the unpatched mem_protect.c routines are considered vulnerable.

The CVSS score of 8.4 indicates high severity. The EPSS score of <1% reflects a low probability of exploitation in the wild. The vulnerability is not yet listed in the CISA KEV catalog. Because no user interaction is required, the attack vector is local; an attacker who can execute code in an unprivileged context can leverage the out‑of‑bounds write to elevate privileges.