Impact
In the HostEmulationManager component of Android, a logic error can cause an unintended background activity to launch. This flaw allows an attacker to gain higher privileges locally without requiring any additional execution rights or user interaction. The impact is a local escalation of privilege, giving the attacker greater control over the device.
Affected Systems
The vulnerability affects Android systems that include the HostEmulationManager module, as provided by Google. No specific Android version is listed, so the flaw may be present in multiple releases that contain the implicated functions.
Risk and Exploitability
The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, making it unclear how frequently this flaw has been exploited. However, because the flaw provides local privilege escalation without user interaction, the potential risk is significant, especially in environments where untrusted applications run background tasks.
OpenCVE Enrichment