In tmusettable of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
{ "severity": "Critical", "types": [ "EoP" ], "spl": "2024-04-05" }
"https://storage.googleapis.com/android-osv/PUB-A-315316882.json"