In the EfwApTransport module of Android, a missing bounds check in the ProcessRxRing function can cause an out‑of‑bounds write. This flaw allows a local attacker to overwrite arbitrary memory without needing additional execution rights, potentially giving the attacker elevated privileges on the device. The issue requires no user interaction and does not grant further execution capabilities beyond privilege escalation.

The vulnerability affects Android devices supplied by Google. Specific Android releases are not enumerated in the current data, so any device running a vulnerable firmware build is potentially impacted.

The CVSS score of 8.4 indicates a high severity of this issue. EPSS scoring shows a probability of exploitation less than 1 percent, and the vulnerability has not been listed in the CISA KEV catalog. Exploitation would likely occur from a local attacker, such as a malicious application or compromised system component, and could lead to unauthorized access to system resources without further user action.