Nearby EHT operation data can drive Android’s channel-width parser into an out-of-bounds read.

The record establishes process-adjacent disclosure but does not describe the extraction channel; the fix was not read.