The vulnerability resides in the Ubsan runtime, where an integer overflow can occur in several functions. This overflow can cause a persistent crash of the affected process, resulting in a denial of service. The failure is internal to the operating system and requires no additional privileges, producing only local denial of service.

The affected product is Google Android. No specific OS versions or build identifiers are provided by the CNA data, so any Android builds containing the vulnerable UBSan runtime function may be impacted.

The vulnerability is classified as a local denial of service with no exploitation privileges needed. The CVSS score is 5.5, indicating moderate severity. The event is not listed in the CISA KEV catalog, and EPSS data is not available; therefore the current exploit probability is not defined. The denial of service is persistent, meaning it can affect the system until a reboot or patch is applied. The likely attack vector is local exploitation through normal use of the system, requiring no user interaction.