This vulnerability exists due to a heap buffer overflow in the a2dp_vendor_opus_decoder_decode_packet function of the Android Bluetooth audio stack (a2dp_vendor_opus_decoder.cc). The out-of-bounds write can be triggered locally, enabling an attacker to escalate privileges on the device without needing user interaction or elevated execution rights. The affected versions explicitly include Android 14, 15, 16, 16-qpr2, and 17. No CVSS score or vendor remediation information is currently available.

Successful exploitation of this vulnerability could allow a local attacker to escalate privileges on the affected Android device. This could lead to unauthorized access or control over system resources. No user interaction is required, increasing the risk of exploitation in local attack scenarios. However, there is no indication of remote exploitation or active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround has been provided at this time. Users and administrators should monitor Google's security advisories for updates and apply patches once available.