Android Framework AppOpsService Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the AppOpsService component of the Android framework. This issue arises from improper input validation, which can lead to a local, permanent denial-of-service condition. The vulnerability does not require any additional execution privileges and can be exploited without user interaction.

Impact

Exploitation of this vulnerability causes a local denial-of-service condition, leading to a permanent disruption of service.

Reproduction

The vulnerability can be reproduced using a proof-of-concept application that exploits the improper input validation in the AppOpsService. This application can be installed and run on a device with the affected Android version.

Remediation

Users can update their devices to the May 2025 security patch level to address this vulnerability.