Android AppOps Service Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the AppOpsService component of the Android framework. This issue arises from improper input validation in multiple functions of AppOpsService.java, allowing the addition of a large number of app operations. Exploiting this vulnerability does not require any special execution privileges or user interaction.

Impact

Exploitation of this vulnerability leads to a local denial-of-service condition, causing the affected device to become unresponsive or unavailable for a period of time.

Remediation

Users can update their devices to the September 2025 security patch level to address this vulnerability.