Android DNG SDK Huffman Decoding Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Android DNG SDK, specifically within the Huffman decoding process of the DNG lossless JPEG component. The issue arises from the use of uninitialized data, which can lead to a crash. This vulnerability can be exploited remotely without requiring any additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability causes a crash, leading to a denial-of-service condition on the affected device.

Remediation

Users can update their devices to the March 2025 security patch level to address this vulnerability.