CVE-2026-55265: Denial of service in Google Android

This vulnerability involves multiple functions in the PduParser.java component of Google Android where a missing bounds check leads to possible out of bounds reads. This flaw can be triggered remotely without any user interaction or elevated privileges, resulting in a denial of service condition. The affected versions explicitly include Android versions 14, 15, 16, 16-qpr2, and 17. No CVSS score or vendor patch information is provided in the available data.

A remote attacker can cause a denial of service on affected Android devices by exploiting the missing bounds check in PduParser.java. No additional execution privileges or user interaction are required, which increases the risk of exploitation. There is no information about further impact such as code execution or data leakage.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch information is provided, users and administrators should monitor official Google Android security advisories for updates. Until a fix is available, limiting exposure to untrusted inputs that may trigger the vulnerability is advisable.