The vulnerability CVE-2026-45531 exists in the read_boot_region function within fsck.c of Google Android. It is caused by a heap buffer overflow leading to a possible out-of-bounds read. Exploitation of this vulnerability enables a local attacker to escalate privileges on the device without needing extra execution privileges or user interaction. The affected versions explicitly include Android 14, 15, 16, 16-qpr2, and 17. No CVSS score or vendor remediation information is currently available.

Successful exploitation of this vulnerability results in local privilege escalation on affected Android devices. This could allow an attacker with local access to gain higher privileges, potentially compromising system integrity. No remote exploitation or user interaction is required. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been published by Google as of now. Users and administrators should monitor Google's security advisories for updates and apply patches once available.