6.2 Medium
CVE-2026-0049
Google Android vulnerability
GoogleAndroid
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.1%probability of exploitation in the next 30 days
Higher than 1% of scored CVEs
SeverityCVSS
6.2Medium
Description NVD
In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Coverage 1 article · 1 outlet
- Android patches critical DoS flaw and StrongBox keystore vulnerabilitySecurityWeek · first in our coverage