This vulnerability arises from a missing permission check in the AndroidManifest.xml file, which allows an attacker to cause a persistent denial of service on affected Android devices. Exploitation does not require any user interaction or elevated privileges, making it easier to trigger. The CVSS 4.0 base score is 10.0, indicating critical severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, availability, scope, and security requirements. The affected versions explicitly include Android 14 and Android 16. No official patch or remediation level has been provided by the vendor as of the published date.

Successful exploitation results in a persistent local denial of service on affected Android devices. The attacker does not need any privileges or user interaction to trigger the issue. The impact affects system availability severely, potentially disrupting normal device operation persistently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users and administrators should monitor for updates from Google and apply patches once available. Until then, limiting exposure to untrusted local applications may reduce risk.