Impact
In the HostEmulationManager component of Android, a logic error can cause a flaw that allows an attacker to gain higher privileges locally without requiring any additional execution rights or user interaction. The impact is a local escalation of privilege, giving the attacker greater control over the device.
Affected Systems
The vulnerability affects Android systems that include the HostEmulationManager module, as provided by Google. No specific Android version is listed, so the flaw may be present in multiple releases that contain the implicated functions.
Risk and Exploitability
The EPSS score is < 1% and the vulnerability is not listed in the CISA KEV catalog, making it unclear how frequently this flaw has been exploited. The CVSS score of 7.8 indicates a high level of severity, and because the flaw provides local privilege escalation without user interaction, the potential risk is significant, especially in environments where untrusted applications run background tasks.
OpenCVE Enrichment