CVE-2026-28633 in Android

摘要

由 MITRE • 2026-09-08

In initForUserNoTracing of VoiceInteractionManagerService.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• 负责: Google Android
• 预定: 2026-03-02
• 披露: 2026-09-08
• 管理: 已接受
• 条目: VDB-400247
• CPE: 准备好
• CWE: CWE-400 (已确认)
• CVSS: 5.5 (VulDB)
• EPSS: 0.00000
• KEV: 否
• 活动: 非常低
• 部门: Homeoffice, Insurance, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-28633
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-28633
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-28633/