Android Emergency Callback Mode Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Android framework, specifically in the EmergencyCallbackModeExitDialog component. The issue arises from a missing null check, which can lead to a crash in the emergency callback mode. This vulnerability can be exploited locally without requiring additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability causes a local denial-of-service condition by crashing the emergency callback mode.

Remediation

Users can update their devices to the August 2018 security patch level to address this vulnerability.