Description
In appendFrom of Parcel.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Problem types
Elevation of privilege
Product status
16
15
14
13
References
android.googlesource.com/...bc07051e4faae44abf7121a3f7b5b2aa
source.android.com/security/bulletin/2025-09-01