Exploit released for Android local elevation flaw impacting 7 OEMs

A proof-of-concept exploit for CVE-2023-45779 — an Android local privilege escalation caused by insecure APEX module signing with public test keys — was published; the flaw affects devices from multiple OEMs, was discovered by Meta's Red Team X, and is mitigated by Android security updates dated 2023-12-05, while practical exploitation generally requires local access (adb) though the PoC raises risk if chained with other compromises.