In ShortcutInfo of ShortcutInfo.java, there is a possible way to crash the launcher via unauthorized shortcuts due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
|
No data.
No data.
References
History
Mon, 02 Nov 2026 23:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Android Launcher Crash via Unauthorized Shortcuts (Resource Exhaustion) | |
| Weaknesses | CWE-400 |
Mon, 02 Nov 2026 22:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Google
Google android |
|
| Vendors & Products |
Google
Google android |
Mon, 02 Nov 2026 20:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In ShortcutInfo of ShortcutInfo.java, there is a possible way to crash the launcher via unauthorized shortcuts due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: google_android
Published: 2026-11-02T19:53:14.294Z
Updated: 2026-11-02T19:53:14.294Z
Reserved: 2026-06-02T14:43:25.468Z
Link: CVE-2026-49924
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-11-02T20:17:43.057
Modified: 2026-11-02T20:17:43.057
Link: CVE-2026-49924
Redhat
No data.