Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2025-26449: Android can crash and stop working from resource overload
CVE-2025-26449 · published 1 year ago
Summary
Android’s core system code may run out of memory or processing capacity, causing the device to become unresponsive. This can happen without any user action or special permissions, effectively locking the user out of the device. Apply the latest Android security updates from your device manufacturer to fix the issue.
What to do
- Update google platform/frameworks/base to version 16-next:2025-06-01.
- Update google platform/frameworks/base to version 15:2025-06-01.
- Update google platform/frameworks/base to version 13:2025-06-01.
- Update google platform/frameworks/base to version 14:2025-06-01.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | android |
13.0 14.0 15.0 cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:* |
|
| Android | platform/frameworks/base |
>= 16-next:0, < 16-next:2025-06-01 >= 15:0, < 15:2025-06-01 >= 13:0, < 13:2025-06-01 >= 14:0, < 14:2025-06-01 Fix: upgrade to 16-next:2025-06-01
|
Original advisory text
In multiple locations, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User in...
In multiple locations, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-400Uncontrolled Resource Consumption
Timeline
Published1 Jun 2025
Updated30 Sep 2026
First seen7 Mar 2026
Track software like this
Free during beta