This vulnerability in Google Android arises from a heap buffer overflow in multiple functions of the sdp_discovery.cc component. Exploitation can lead to remote code execution by an attacker located nearby on the network, without needing user interaction or elevated privileges. The affected Android versions include 14, 15, 16, and 16-qpr2. The CVSS 3.1 base score is 8.0, reflecting high impact on confidentiality, integrity, and availability. As of the published date, no official remediation or patch has been disclosed by Google.

Successful exploitation of this heap buffer overflow vulnerability can result in remote code execution on affected Android devices, compromising confidentiality, integrity, and availability. The attacker does not require user interaction or additional privileges, increasing the risk of automated or stealthy attacks. However, there are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation has been provided by Google, users and administrators should monitor official Google Android security advisories for updates. Until a patch is available, limiting network exposure and avoiding untrusted proximal connections may reduce risk.