Android Framework Intent Component Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Android Framework's Intent component, specifically in the parseUriInternal function of Intent.java. This issue arises from inadequate input validation, which can lead to a potential infinite loop. The vulnerability can be exploited locally, without requiring any additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability causes a local denial-of-service condition, leading to unresponsiveness or resource exhaustion on the affected device.

Remediation

Users can update their devices to the October 2024 security patch level to address this vulnerability.