CVE-2026-0042
UBSan Resource Exhaustion Denial of Service
Publication date: 2026-06-01
Last updated on: 2026-06-02
Assigner: Android (associated with Google Inc. or Open Handset Alliance)
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-400 | The product does not properly control the allocation and maintenance of a limited resource. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in multiple functions of the file ubsan_throwing_runtime.cpp. It can cause a persistent denial of service due to resource exhaustion.
Exploitation does not require any additional execution privileges or user interaction.
How can this vulnerability impact me? :
The vulnerability can lead to a local denial of service condition by exhausting system resources.
This means that affected systems could become unresponsive or fail to operate properly without needing an attacker to have special privileges or user involvement.