This vulnerability arises from an integer overflow in several functions of the ubsan_throwing_runtime.cpp component in Google Android versions 14 to 16-qpr2. The overflow can trigger a UBSan (Undefined Behavior Sanitizer) failure, leading to a denial of service condition. Exploitation does not require user interaction and can be performed remotely, but no confidentiality or integrity impacts are indicated. The CVSS 3.1 base score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, and requiring low privileges.

Successful exploitation results in a denial of service, disrupting availability of the affected Android system. There is no impact on confidentiality or integrity. No additional execution privileges or user interaction are needed for exploitation. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented as of the published date. Users and administrators should monitor Google Android security advisories for updates and apply patches once available.