This vulnerability involves an integer overflow in the l2c_fcr_clone_buf function of the l2c_fcr.cc Bluetooth component in Android. The flaw allows an attacker with local access to trigger controlled heap corruption within the privileged Bluetooth process, leading to local escalation of privilege without needing further execution privileges or user interaction. Affected Android versions include 14, 15, 16, and 16-qpr2. The CVSS 3.1 base score is 8.0, reflecting high impact on confidentiality, integrity, and availability. No patch or official remediation level has been disclosed by Google as of the publication date.

Successful exploitation could allow a local attacker to escalate privileges on the affected Android device by exploiting heap corruption in the Bluetooth process. This could compromise system confidentiality, integrity, and availability. No user interaction is required, increasing the risk of exploitation in local attack scenarios. However, no known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should minimize local access to devices and consider disabling Bluetooth if feasible to reduce exposure. Monitor official Google Android security advisories for updates.