This vulnerability in Google Android's LocalImageResolver.java (onHeaderDecoded method) can lead to resource exhaustion resulting in a persistent denial of service. It affects Android versions 14, 15, 16, and 16-qpr2. The attack vector is local with low complexity and no privileges or user interaction required. The CVSS v3.1 base score is 6.2, reflecting a medium severity denial of service impact without confidentiality or integrity loss. No known exploits are reported in the wild, and no patch or remediation level has been provided by the vendor as of the published date.

Successful exploitation results in a persistent denial of service condition on the affected Android device, impacting availability. There is no impact on confidentiality or integrity. The attack can be performed locally without privileges or user interaction, potentially causing resource exhaustion and system disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should limit exposure to untrusted local applications or inputs that might trigger the vulnerability. Monitor official Google Android security advisories for updates.