An integer overflow in multiple functions of ubsan_throwing_runtime.cpp can cause the Android runtime to crash. The flaw does not require elevated privileges or user interaction, making it exploitable from a remote context. When triggered, the crash results in a denial of service, interrupting the affected process or system without providing an attacker with any additional capabilities.

The flaw was identified in the Android operating system within the ubsan module. No specific version numbers are listed, indicating that a range of Android releases that include the vulnerable ubsan implementations may be affected.

The vulnerability is remotely exploitable as it can be triggered without local access or user action. While an EPSS score is not available and the issue is not currently listed in CISA's KEV catalog, the potential for widespread disruption remains high. Existing mitigations rely on applying vendor-provided patches; until an update is deployed, the risk of denial of service to any affected device persists. The CVSS score of 6.5 indicates moderate severity, highlighting the likelihood of impact when the flaw is triggered.