VYPR

PackageInstaller.Session

by Google

CVEs (1)

  • CVE-2026-28575Jun 17, 2026
    risk 0.00cvss epss

    In PackageInstaller.Session#transfer of frameworks/base/services/core/java/com/android/server/pm/PackageInstallerSession.java, there is a possible memory exhaustion attack due to a logic error in the code. This could lead to local denial of service with no additional execution…