CVE-2026-0074: Medium severity Google Android vulnerability

Affected Software

Remediation

Recommended actions to resolve this vulnerability, in priority order.

1. Configuration

   Add input validation and defensive bounds checks in getPreferredSize to prevent allocating excessive resources (e.g., enforce maximum image dimensions and fail or degrade gracefully when inputs exceed safe limits). Ensure the method performs defensive memory and size checks before allocating or processing image data.

   LauncherProcessImageListener.kt getPreferredSize resource allocation/validation = validate and bound allocations
2. Compensating control

   Apply OS-level resource limits and isolation for the process to mitigate resource-exhaustion attacks (for example: ulimit, cgroups, or container resource limits); run the application under a dedicated, unprivileged account and restrict who can execute or interact with the affected component to trusted/local users.

3. Operational

   Implement monitoring and alerting for abnormal memory and CPU usage of the affected process and configure automated remediation (such as alerting, throttling, or restarting the process and collecting diagnostics) to recover from or investigate potential local denial-of-service conditions.

Event History

Frequently Asked Questions