Android AccountManagerService Resource Exhaustion Vulnerability Leading to Denial-of-Service

A denial-of-service vulnerability has been identified in the AccountManagerService component of the Android framework. This issue arises from resource exhaustion in multiple functions of AccountManagerService.java, which can cause a permanent denial of service. The vulnerability can be exploited locally, without the need for additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability leads to a local denial-of-service condition, causing resource exhaustion that can disrupt normal service operations.

Remediation

Users can update their devices to the September 2025 security patch level to address this vulnerability.