This vulnerability involves an incorrect bounds check in multiple Android functions leading to a desynchronization in persistence. The flaw enables a local attacker with limited privileges to escalate their privileges on the affected Android versions 16 and 16-qpr2. Exploitation does not require user interaction or additional execution privileges. The CVSS v3.1 score is 7.8, reflecting high impact on confidentiality, integrity, and availability. No official remediation or patch is currently documented, and no known exploits have been reported.

Successful exploitation results in local privilege escalation, allowing an attacker with limited privileges to gain higher-level access on the affected Android devices. This can compromise the confidentiality, integrity, and availability of the system. No user interaction is required, increasing the risk of silent exploitation. However, there are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation has been published, users and administrators should monitor for updates from Google regarding patches or workarounds. Until a patch is available, restricting local access to trusted users only may reduce risk.