Low (2.1) in google android. EPSS 0.09% chance of exploitation in the next 30 days.
In Trusted Execution Environment, there is a possible key leak due to side channel information disclosure. This could lead to physical information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
Severity
CVSS 3.1
2.1 low
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
EPSS
0.09% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-31)