A critical vulnerability in the Google Android kernel allows a local attacker to escalate privileges without requiring user interaction or additional execution permissions.

This is an out of bounds write vulnerability occurring within the GetHostAddress function of the gxp_buffer.h component. An attacker with local access can trigger this flaw to achieve escalation of privilege, as the system fails to perform necessary bounds validation before writing data.

The ability for a local user to escalate privileges to a higher level represents a severe security risk that compromises the integrity and confidentiality of the Android operating system. With a CVSS score of 7.8, this flaw is categorized as High severity, as it allows unauthorized control over system resources. Successful exploitation could lead to full system compromise, data theft, or the installation of persistent malicious software on the affected device.

Immediate Action: Apply the latest security patches provided in the Google Android security bulletin for December 2025 to address the kernel vulnerability.

Proactive Monitoring: Monitor system logs for unusual kernel activity, unexpected privilege changes, or signs of unauthorized access attempts originating from local user accounts.

Compensating Controls: Ensure that device security policies are strictly enforced, minimizing the number of applications with local access permissions and maintaining up to date security software to detect malicious processes.

Public Exploit Available: No — exploit_available (unknown).

Given the potential for complete system compromise through privilege escalation, this vulnerability presents a significant risk to Android environments. Security administrators should prioritize the deployment of the December 2025 kernel security updates across all managed devices immediately. Failure to patch allows local users or malicious applications to bypass OS security boundaries, necessitating prompt remediation to maintain the security posture of the mobile fleet.