Local privilege escalation via lwis out-of-bounds write

An out-of-bounds write in the lwis kernel component in Google Android allows local users to escalate privileges without interaction. prepare_response_locked in lwis_transaction.c fails to validate input before writing a response outside the intended buffer. Local access is required, but no additional execution privileges or user interaction is needed to gain elevated privileges.