CVE-2025-26432
In multiple locations, there is a possible way to persistently DoS the device due to a missing length check. This could lead to local denial of servic...
Original description
The description as published by the source.
In multiple locations, there is a possible way to persistently DoS the device due to a missing length check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected packages
Android
platform/frameworks/base
[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-06-01"}]}]
Android
platform/packages/apps/Settings
[{"type":"ECOSYSTEM","events":[{"introduced":"16-next:0"},{"fixed":"16-next:2025-06-01"}]}]
References
- advisory source.android.com
- patch android.googlesource.com