Android Integer Overflow Vulnerability in UBSan Throwing Runtime Component Leading to Remote Denial-of-Service

A denial-of-service vulnerability has been identified in the Android framework, specifically within the UBSan throwing runtime component. This issue arises from an integer overflow in multiple functions, which can be exploited to cause a crash. The vulnerability does not require any additional execution privileges or user interaction for exploitation.

Impact

Exploitation of this vulnerability can lead to a crash, causing a denial-of-service condition on the affected device.

Remediation

Users can update their devices to the June 2026 security patch level to address this vulnerability.