An integer overflow occurs in the function l2c_fcr_process_peer_cfg_req of the Android l2c_fcr.cc module, creating a memory safety flaw that can leak sensitive data to an attacker. The vulnerability does not require elevated privileges or user interaction; the host runs the code in a normal user context, allowing an unauthenticated attacker to craft messages that trigger the overflow and read memory contents.

The flaw is present in Android operating systems where the l2c_fcr.cc component is included. Specific affected versions are not listed, so all current Android releases until the patch are potentially vulnerable.

The exploit can be launched remotely via the network, bypassing local access controls. Although the EPSS score is not available, the lack of user interaction and required privileges heightens the potential impact. The vulnerability is not currently listed in the CISA KEV catalog, but the remote nature of the attack means it could be actively used. The likelihood of exploitation depends on the exposure of the vulnerable Bluetooth stack to external traffic.