Android Runtime Undefined Behavior Sanitizer Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Android Runtime's Undefined Behavior Sanitizer (UBSan) component. This issue arises from multiple functions in 'ubsan_throwing_runtime.cpp', where improper handling of resources can lead to exhaustion, causing a persistent denial-of-service condition. The vulnerability can be exploited locally without requiring additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability leads to resource exhaustion, causing a local denial-of-service condition.

Remediation

Users can update their devices to the June 2026 security patch level to address this vulnerability.