Local code execution via heap buffer overflow

Heap-based buffer overflow in Microsoft Office for Android and Universal allows local users to execute code after user interaction. Microsoft has not disclosed the affected parser or memory-copy operation, so the precise untrusted input and out-of-bounds heap write remain unspecified. Successful exploitation requires user interaction and executes code in the affected application's security context.