In multiple functions of AccessibilityManagerService.java, improper input validation allows an application to trigger a persistent denial of service. The flaw does not require elevated privileges and does not need any user interaction; once exploited it can render the accessibility framework unresponsive, potentially causing application crashes or service unavailability.

This weakness affects Android devices running Google’s Android operating system. The specific affected releases are not listed in the data, but the issue is documented in the 2026‑06‑01 Android security bulletin and applies to all services that invoke the vulnerable AccessibilityManagerService API.

The vulnerability is a local denial of service; an attacker must have local access to the device or be able to execute code that can call the malfunctioning API. The CVSS score of 5.5 indicates moderate severity. No exploit probability score is available, and it is not listed in CISA’s KEV catalog. The impact is significant for device stability and user experience, but the attack requires only local execution without a direct user interaction. The risk is therefore moderate to high for users unable to apply the security update promptly.