The gf_base_update_finger_base function in gf_base.c writes data to a heap buffer without performing bounds checking, which results in an out-of-bounds write. This flaw allows a local attacker to corrupt memory and potentially execute arbitrary code with elevated privileges. Because the overflow is triggered by normal function usage and requires no additional execution privileges or user interaction, exploitation can occur by an attacker who already has local access to the device.

The vulnerability affects Android devices that include the vulnerable gf_base component. No particular product version is specified, so any Android installation carrying the old gf_base implementation could be impacted until the security update is installed.

The CVSS score of 7.8 indicates high severity. The EPSS score of < 1% shows a very low probability of exploitation in the wild, and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires local access; an attacker with physical or local control can trigger the out-of-bounds write to elevate privileges without tricking the user.