In multiple locations, there is a possible way to escape chrome sandbox attack android system_server due use after free. This could lead local escalation of privilege with no additional execution privileges needed. User interaction not needed for exploitation.