Technical impact
A local denial of service arises from uncontrolled resource consumption in multiple areas of the Android operating system. The flaw can persistently drain system resources, causing the device to become unresponsive or restart without any additional execution privileges. Importantly, the vulnerability does not require user interaction; any malicious application or process can trigger the resource exhaustion silently, impacting availability for the affected device.
Affected Systems
The vulnerability affects Google Android systems. No specific version numbers are provided, so all Android releases may be susceptible until a patch is issued. The impact is local; remote exploitation is not supported as user interaction is not needed for exploitation.
Risk and Exploitability
The CVSS score of 10 indicates a critical local denial of service. The EPSS score of <1% shows that exploitation is currently very unlikely, yet the persistent resource exhaustion can still have severe operational impact. Because the flaw does not require user interaction, a malicious application or any locally running process capable of triggering the resource exhaustion can exploit the vulnerability. No remote‑access vector is involved, and the attack is confined to the device.
