5.9 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.0%
In km_exp_did_inner of kmv.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
source.android.com/security/bulletin/pixel/2024-04-01