A flaw in the graphics driver update routine of Android causes a persistent denial of service. The bug resides in the updateState method of GraphicsDriverEnableAngleAsSystemDriverController.java and can force the device into a non‑responsive state. The vulnerability requires no additional privileges or user interaction, allowing any local user to trigger the condition simply by exercising the graphics subsystem, which can render the device unusable until a reboot or data wipe.

The issue affects Google Android operating systems. Affected versions include Android 14.0, Android 15.0, Android 16.0, and the 16.0 qpr2 pre‑release build. No further subversion details are provided, so all devices running these releases with the implicated graphics driver code are potentially impacted.

The CVSS score of 5.5 and an EPSS below 1% indicate that public exploitation data is not yet demonstrated, and the vulnerability is not listed in CISA's KEV catalog. However, because local access is sufficient and no elevated privileges are required, the risk is limited to device availability. Exploitation would involve a local user triggering a graphics operation that activates the vulnerable state, so mitigation focuses on applying the vendor’s fix or rebooting the device when it becomes unresponsive.