Technical impact
The vulnerability resides in multiple functions of ubsan_throwing_runtime.cpp and can trigger persistent denial of service through resource exhaustion. An attacker does not need any elevated execution privileges, and no user interaction is required. The impact is a local denial of service that can render the affected Android system unusable until restarted or the resource usage is mitigated.
Affected Systems
The affected vendor is Google for Android. No specific product or version information is available in the provided data, so the scope of affected releases cannot be precisely determined.
Risk and Exploitability
The CVSS score is 5.5. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local; a user with access to the device can trigger the fault by exercising any code path that invokes the vulnerable UBSan functions. No additional privileges or network access are needed. With no EPSS data available, the exploitation likelihood is undetermined, but the denial of service nature means internal availability is at risk.
