Technical impact
In several functions of ubsan_throwing_runtime.cpp, an integer overflow can cause a crash, allowing an attacker to remotely disrupt service on the device. The flaw requires no additional privileges and does not depend on user interaction. When triggered, the crash can make the affected application or system component unavailable, resulting in a denial of service.
Affected Systems
The vulnerability applies to Google Android devices. Specific affected Android release versions are not provided in the available data, so any device that includes the affected runtime components may be vulnerable.
Risk and Exploitability
The EPSS score is not available and the issue is not listed in the CISA KEV catalog, so current exploitation statistics are unknown. The CVSS score is 6.5, indicating a moderate risk. Nevertheless, because the flaw can be triggered remotely and does not require user interaction or elevated privileges, the exploitation risk is considered high until a security patch is deployed.
