A missing bounds check in the is_valid_header function of timed_cache_item.c allows an out‑of‑bounds write. The vulnerability can be triggered without user interaction and could let a local user gain system execution privileges. The impact is a full privilege escalation on an affected Android device, giving the attacker the ability to modify system files, install malware, or compromise other users on the device.

The flaw exists in Android operating systems distributed by Google. No specific version or build information is provided, so any installation that contains the vulnerable timed_cache_item.c code is potentially affected.

Based on the description, this flaw is a local privilege escalation vector that does not require user interaction; therefore it could be exploited during normal device operation or by a malicious application. Its CVSS score of 6.7 reflects a moderate severity, and the EPSS score of < 1% indicates a very low exploitation probability. The issue is not listed in the CISA KEV catalog, so a concrete exploitation probability cannot be quantified. However, the severity of the flaw suggests that attackers might target Android devices that have not applied the latest security update, and the exploitation would involve crafting a payload that triggers the out‑of‑bounds write in timed_cache_item.c to gain system execution privileges.