This vulnerability involves a memory corruption flaw in the modem of Google Android devices triggered by a SIP REFER request. Successful exploitation can lead to remote code execution without needing extra privileges or user interaction. The CVE does not provide a CVSS score or detailed patch information, and no known exploits are reported in the wild as of the publication date.

An attacker can remotely execute arbitrary code on affected Android devices by sending a crafted SIP REFER request to the modem, potentially leading to full compromise of the device's modem functionality. No user interaction is required, increasing the risk of automated or remote exploitation. However, no known exploits have been observed in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users and administrators should monitor Google security advisories for updates and apply patches promptly once available.