ns_GetUserData in the Android SMS utility contains an out‑of‑bounds write due to an incorrect bounds check. The flaw can be triggered without user interaction and allows an attacker to overwrite memory, enabling the escalation of privileges on the device. The impact is the ability to gain higher system privileges.

The vulnerability affects Android devices running the Google Android operating system. Specific versions are not enumerated in the advisory, but the issue originates in the ns_SmscbUtilities.c component found in the core Android OS shipped by Google.

The CVSS score of 9.8 rates this flaw as Critical, and the EPSS score of less than 1% indicates a very low probability of widespread exploitation at present. The flaw is not listed in CISA’s Known Exploited Vulnerabilities catalog. The likely attack vector is remotely sending a crafted SMS or triggering the messaging service, as the function can be invoked without user interaction. The absence of additional execution privileges needed makes the flaw particularly dangerous to devices that receive SMS messages.