Android Framework Resource Exhaustion Vulnerability Leading to Local Denial-of-Service

A resource exhaustion vulnerability has been identified in the Android Framework, specifically in the Blob Store Manager. This issue arises in the 'allowPackageAccess' function across multiple files, where an attacker can cause resource depletion by repeatedly adding allowed packages. The result is a local, persistent denial-of-service condition that does not require additional execution privileges or user interaction for exploitation.

Impact

Exploitation of this vulnerability can lead to a local, persistent denial-of-service condition, causing the affected device to become unresponsive or unavailable for a period of time.

Remediation

Users can update their devices to the June 2025 security patch level to address this vulnerability.