In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
| Vendor | Product | Versions |
|---|---|---|
| android | 16-qpr2, 16, 15, 14 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| android | cert_advisory | 90% |
Updated severity to HIGH, marked exploit as available, noted active exploitation, and updated patch availability to 2026-04-05.
Updated severity to CRITICAL, marked exploit as available, and added new patch date and tags.
Initial creation
