A logic error in multiple functions of fpc_tee_hal.c permits a use‑after‑free that can be exploited locally to gain full root privileges on an affected Android device. The flaw does not require user interaction and does not rely on additional execution privileges; once triggered, an attacker can execute arbitrary code with elevated rights, compromising system confidentiality, integrity, and availability.

Android devices distributed by Google where the fpc_tee_hal.c module is part of the Trusted Execution Environment subsystem. The vulnerability is specific to the Android operating system component and is not confined to any single device line or manufacturer.

No public CVSS score or EPSS value is available, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is strictly local, requiring no remote access or external input. Because the flaw resides in core system code, any compromised or malicious application with sufficient privileges could potentially trigger the use‑after‑free, making the risk significant for unpatched devices.