The vulnerability is a classic stack buffer overflow caused by a missing bounds check in several functions of ipphelper.c. Exploitation can result in a denial‑of‑service condition without requiring elevated privileges or user interaction. The overflowing data could corrupt the stack, causing the affected process to crash or become unresponsive, thereby disrupting service availability for remote users.

Android operating systems provided by Google are impacted. No specific product or version information is listed, so any Android build that contains the vulnerable ipphelper.c implementation is potentially affected.

The CVSS score is not provided, and the EPSS score is unavailable, indicating limited public data on exploitation frequency. The vulnerability is not listed in the CISA KEV catalog, suggesting no known widespread exploitation at this time. However, because no user interaction is required and the flaw is a stack overflow, remote attackers could potentially trigger a DoS by sending crafted requests to the affected service, especially if the service is exposed to untrusted networks.