The vulnerability exists in the getPreferredSize method of LauncherProcessImageListener.kt and can cause a denial of service by exhausting system resources. An attacker can trigger the failure without any additional privileges or user interaction, leading to local disruption of the device’s launcher functionality. Because the flaw involves uncontrolled resource allocation, the impact is confined to availability and can affect device responsiveness and user experience.

Affected systems include Google Android devices. No specific product or version information is supplied, so the vulnerability could potentially affect any Android installation that includes the vulnerable launcher code.

The CVSS score of 5.5 indicates medium severity. Because the flaw does not require privilege escalation and can be triggered without user interaction, it remains a relatively high risk. The EPSS score is unavailable and the vulnerability is not listed in CISA KEV, indicating no confirmed exploitation reports yet. Nonetheless, the flaw can be exploited by locally executing a crafted image that forces the launcher to allocate excessive resources.