Android Framework and System Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Android Framework and System components. The issue arises from improper input validation in the DataRowHandler class, specifically in the applySimpleFieldMaxSize method. This flaw allows the insertion of excessively large contact names, leading to a local denial-of-service condition. The vulnerability does not require any additional execution privileges and can be exploited without user interaction.

Impact

Exploitation of this vulnerability causes a local denial-of-service condition, disrupting the normal functioning of the device or application.

Remediation

Users can update their devices to the June 2026 security patch level to address this vulnerability. Instructions for checking and updating the Android version are available on the Google Support website.