A vulnerability in the LocalImageResolver module of Android can cause persistent denial of service through resource exhaustion when processing image headers. This flaw allows an attacker to repeatedly trigger the onHeaderDecoded function, depleting system resources until normal operation is impaired. It is classified as a resource exhaustion weakness and does not require elevated privileges or user interaction.

The flaw resides in Google Android systems. Specific affected releases are not enumerated in the data, so all currently deployed Android versions may be susceptible until a patch is released by Google.

The CVSS score of 6.2 indicates a moderate severity. With no EPSS data and absence from the CISA KEV list, immediate exploitation risk appears low, but a local attacker can loop the exploit to degrade service availability. The impact is strictly local denial of service, and there are no known workarounds or mitigation techniques besides applying the vendor patch.