VDB
ASB-A-425662627
ASB-A-425662627
PUBLISHED
CVSS 8.600000381469727 HIGH
In multiple functions of NotificationManagerService.java, there is a possible way to bypass the per-package channel limits causing resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Risk Scores
CVSS v4.0
8.600000381469727
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| platform | frameworks/base | 16-qpr2-next:0, 16-qpr2-next, 16 |
Timeline
- Dec 1, 2025 CVE Published
- May 15, 2026 CVE Updated