A heap buffer overflow in the Android kernel allows a local attacker to achieve privilege escalation without requiring user interaction.

The vulnerability exists within the ConvertReductionOp function of the darwinn_mlir_converter_aidl.cc source file. It is a heap buffer overflow flaw that permits an attacker with local, low-privileged access to escalate privileges on the device without the need for user interaction.

The ability for a local attacker to escalate privileges represents a significant security risk, as it effectively removes boundaries between standard users and administrative or kernel-level control. Given the CVSS score of 7.8, this vulnerability is classified as High severity. Successful exploitation could lead to full system compromise, the theft of sensitive user data, or the installation of persistent malicious software.

Immediate Action: Consult the September 2025 Android Security Bulletin for Pixel devices to identify and apply the specific security patch provided by Google.

Proactive Monitoring: Security teams should monitor system logs for unusual kernel activity or unexpected process crashes that may indicate an exploitation attempt.

Compensating Controls: Ensure that all security features, such as verified boot and SELinux policies, remain enabled and fully updated to limit the potential impact of local privilege escalation.

Public Exploit Available: Unknown

This vulnerability presents a clear risk to Android device integrity and must be addressed with priority. Administrators and end users should ensure their devices are updated to the latest security patch level provided by the vendor to mitigate the risk of privilege escalation.