Android Integer Overflow Vulnerability in UBSan Runtime Could Lead to Remote Denial-of-Service

A vulnerability has been identified in multiple functions of 'ubsan_throwing_runtime.cpp', where an integer overflow can cause a Undefined Behavior Sanitizer (UBSan) failure. This vulnerability could be exploited to create a remote denial-of-service condition, requiring no additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability can lead to a remote denial-of-service condition, causing affected devices to become unresponsive or unavailable.

Remediation

Users can update their devices to the June 2026 security patch level to address this vulnerability.