Local Denial of Service Vulnerability in Android APK Verification
CVE-2026-0069
Currently unrated
What is CVE-2026-0069?
A local denial of service vulnerability exists in the APK verification process, specifically within the verifySignature method of ApkChecksums.java. This flaw may allow an attacker to cause a crash due to resource exhaustion, which could disrupt the verification of APK files without requiring any user interaction or elevated privileges for exploitation. It highlights the importance of robust resource management to prevent service disruptions in the Android ecosystem.
Affected Version(s)
Android 14