The vulnerability is a logic error in the enable_segment function of remap.c that allows a local attacker to bypass permission checks. This bypass can lead to local privilege escalation, as the attacker can gain higher privileges without requiring additional execution permissions or user interaction. The flaw aligns with CWE‑693, insecure design or logic.

Vulnerable devices are those running Google Android operating systems. No specific Android version is listed in the advisory, so any recent releases could be affected until a patch is applied.

The CVSS score of 8.4 highlights a high severity. The EPSS is <1%, indicating a low current exploit probability, and the vulnerability is not in the CISA KEV catalog. However, because no user interaction is required and the exploit works on a local device, the risk to physically compromised devices remains significant. The attack vector is local, requiring physical or out-of-band access to the device.