A missing bounds check in the wacom_hid_set_device_mode function of the Wacom HID driver allows an out‑of‑bounds write that can overwrite privileged memory, elevating an attacker’s privileges without needing additional execution rights or user interaction.

Android devices that include the Wacom HID driver are affected. The vendor identification is restricted to Google:Android, and no specific device models are enumerated in the advisory.

The CVSS score of 6.8 indicates medium severity. The absence of an EPSS score and the fact that the vulnerability is not listed in CISA KEV do not diminish its risk: exploiting the flaw requires only physical access to the device and the ability to transmit crafted HID input via a USB port. No remote or user‑initiated action is necessary, making the attack path straightforward for a physically present attacker.