A vulnerability in the Android LocalImageResolver component enables remote, unauthenticated attackers to cause a persistent denial of service through resource exhaustion.

The flaw exists within the onHeaderDecoded function of LocalImageResolver.java, where improper handling of image headers allows an attacker to trigger resource exhaustion, resulting in a persistent denial of service without requiring user interaction or elevated privileges.

The ability for a remote attacker to induce a persistent denial of service can lead to significant operational disruption by rendering affected Android devices unresponsive. Given the CVSS score of 7.5, this high severity vulnerability poses a substantial risk to system availability and productivity for both individual users and enterprise deployments, potentially necessitating widespread device reboots or service restoration.

Immediate Action: Organizations and users should monitor the official Google Android Security Bulletin for the release of security patches and apply them as soon as they become available for specific device models.

Proactive Monitoring: Security teams should review system logs for recurring crashes or abnormal resource consumption patterns associated with the LocalImageResolver component.

Compensating Controls: While direct mitigation is limited, maintaining updated security software and avoiding untrusted image content can help reduce the attack surface until a patch is deployed.

Public Exploit Available: No (exploit_available: false)

This vulnerability represents a high risk to Android device availability due to its potential for remote, unauthenticated exploitation. Administrators should prioritize the deployment of the forthcoming security updates provided by Google or respective device manufacturers to eliminate the resource exhaustion vector, as persistent denial of service attacks can severely impact critical mobile operations.