Local privilege escalation via missing bounds check

Out-of-bounds memory access in Google Android 13 ACPM allows local users to elevate privileges via the lpm_req_handler function. The handler accesses memory outside its intended bounds because it performs no required bounds check on request data. Local access is required; no additional execution privileges or user interaction is needed, and exploitation elevates privilege on the device.