Technical impact
The vulnerability is located in several functions within ubsan_throwing_runtime.cpp and arises from improper input validation. This weakness is a classic example of CWE‑20, Input Validation. The flaw can cause the entire system to crash, resulting in a denial of service. No additional execution privileges are needed and user interaction is not required for exploitation, indicating the attack can be conducted remotely and anonymously.
Affected Systems
The affected platform is Google Android. No specific versions are listed in the provided data, so any Android release that includes the identified UBSan functions may be susceptible.
Risk and Exploitability
The CVSS score is 6.5, and the EPSS value is unavailable; the vulnerability is not listed in CISA’s KEV catalog. Because the flaw allows a remote denial of service without privilege escalation or user interaction, it is likely to be simple to exploit once malicious input can be supplied. With a CVSS score of 6.5 the severity is moderate; the operational impact of a system crash is significant.
