This vulnerability arises from an integer overflow in multiple functions of the ubsan_throwing_runtime.cpp component in Google Android versions 14 to 16-qpr2. The flaw can be triggered remotely without user interaction or elevated privileges, leading to a persistent denial of service condition. The CVSS 3.1 base score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, and no impact on confidentiality or integrity but high impact on availability. No official fix or patch has been published as of the data provided.

Successful exploitation results in a persistent denial of service on affected Android devices, potentially disrupting normal device operation. There is no impact on confidentiality or integrity, and no additional privileges are required to exploit this vulnerability. The vulnerability can be triggered remotely without user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users and administrators should monitor Google’s security advisories for updates. Until a patch is available, limiting exposure to untrusted network inputs that might trigger this vulnerability may reduce risk.