The vulnerability exists in the FilterCapturedPacket function of snoop_logger.cc, where improper input validation (CWE-20) can trigger a memory safety issue. This flaw allows local attackers to gain elevated privileges on an Android device without needing execution rights beyond those already possessed by the user. No user interaction is required for exploitation, meaning a malicious actor can trigger the issue with minimal effort.

Android devices powered by Google may be impacted. The affected versions are not specified in the advisory, so any device running Android OS that includes the snoop_logger component could be vulnerable until a patch is applied.

The CVSS score of 7.8 indicates high severity, and the EPSS score is not available while the vulnerability is not listed in CISA KEV, indicating no publicly confirmed exploitation yet. However, because the flaw leads to local privilege escalation and does not rely on external user interaction, the risk is significant for any device that has not applied a fix. Attackers with local access can exploit the memory safety issue directly through the snoop_logger API to elevate privileges, potentially compromising additional system resources. The lack of an elevated execution prerequisite means standard user‑level attacks can succeed immediately.