Android Framework and System Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Android Framework and System components. The issue arises in the 'verifySignature' method of 'ApkChecksums.java', where resource exhaustion can be exploited to cause a crash. This vulnerability can be exploited locally, without requiring additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability leads to a local denial-of-service condition, causing the device to crash or become unresponsive.

Remediation

Users can update their devices to the June 2026 security patch level to address this vulnerability. Instructions for checking and updating the Android version are available on the Google Support website.