The vulnerability resides in the ac_set_ns_ipa_tbl function of plat_trusty.c. An attacker can supply crafted input that bypasses validation and corrupts stream table entry configurations in the Android Trusty component. This flaw can be exploited without any user interaction and grants the attacker privilege escalation to system execution level. The weakness stems from improper input validation and leads to unauthorized configuration changes that could ultimately compromise system integrity.

The affected vendor is Google, specifically the Android operating system’s Trusty component. No specific product versions are listed, so any device running Android that includes this implementation and hasn’t applied the latest security patch is potentially vulnerable.

The CVSS score of 6.7 indicates a medium severity risk, while the EPSS score of less than 1% suggests a low probability of exploitation in the wild. The vulnerability is not listed in CISA’s KEV catalog, so it currently has no confirmed exploit usage. Attackers would need local access to the device; however, because no user interaction is required, a malicious app or malware that gains initial foothold could leverage this flaw to elevate to system privileges. Deploying the newest Android security patch would eliminate the exposed code path and remove this escalation vector.