A heap buffer overflow in the p2p_process_prov_disc_bootstrap_req function of p2p_pd.c can cause an out-of-bounds write. The vulnerability allows an attacker to execute code on the target device without needing to gain additional privileges. No user interaction is required, meaning the exploit can be triggered automatically by the attacker when the vulnerable code path is invoked.

All Android devices running versions of the Android operating system that include the p2p_pd.c component may be vulnerable. The CVE does not specify particular release versions; users should assume any Android build that contains the p2p_process_prov_disc_bootstrap_req function is affected until a patch is applied.

The exploit would likely be performed over a proximity-based channel, such as an adjacent device interacting with the target via Bluetooth or similar P2P mechanisms. The CVSS score of 8 indicates a high impact, and the EPSS score of < 1% suggests a low probability of exploitation in the wild. The vulnerability remains absent from CISA’s KEV catalog, and without a privilege escalation barrier, defenders should monitor for potential attacks despite the low exploit probability.