CVE-2025-26432

MEDIUM

Google Android - Denial of Service

Title source: rule

Description

In multiple locations, there is a possible way to persistently DoS the device due to a missing length check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

References (2)

Scores

CVSS v3 5.5
EPSS 0.0001
EPSS Percentile 0.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Classification

CWE
CWE-130
Status published

Affected Products (1)

google/android

Timeline

Published Sep 04, 2025
Tracked Since Feb 18, 2026