The vulnerability resides in the dhd_tcpdata_info_get function of dhd_ip.c within the Android operating system. A precondition check failure can trigger a remote denial of service. The flaw allows an attacker to interrupt network traffic handling with no privileges or user interaction. The impact is that the affected device can become unresponsive or malfunction in its network stack, compromising availability.

All Android devices running the affected build of the operating system are at risk. No specific version or build details are provided by the CNA, so all deployments of Google:Android should be considered potentially vulnerable.

The CVSS score of 7.5 indicates a high severity vulnerability. The EPSS score of less than 1% suggests the probability of exploitation remains low at present, and the vulnerability is not yet listed in the CISA Known Exploited Vulnerabilities catalog. An attacker can exploit the flaw remotely via the device’s network interface without requiring elevated privileges or user interaction. The high score combined with the low EPSS points to a moderate overall risk that warrants timely mitigation.