CVE-2026-21547: Android Unknown Package Denial of Service Vulnerability
Summary
CVE-2026-21547: ... Affects :unknown: versions >= SoCVersion:0, < SoCVersion:2026-06-05. Fixed in SoCVersion:2026-06-05. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The affected package is part of the Android ecosystem, which is widely used for mobile applications and devices. Android provides a robust platform for app development, enabling developers to create a variety of applications that leverage device capabilities. However, like any software, it is susceptible to vulnerabilities that can compromise its functionality and security. This specific vulnerability allows for a denial of service (DoS), potentially disrupting the normal operation of applications relying on the affected package.
Vulnerability Detail
The vulnerability identified as CVE-2026-21547 originates from a flaw in the Android package that can be exploited to cause a denial of service (DoS). Attackers can leverage this vulnerability to disrupt services, leading to application crashes or unresponsive behavior. The severity of this vulnerability is classified as high, indicating that it poses a significant risk to users and applications. The issue was introduced in SoCVersion:0 and is slated to be fixed in SoCVersion:2026-06-05.
How To Fix
Minimum fixed version
SoCVersion:2026-06-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workarounds are mentioned for this vulnerability. However, it is advisable to monitor application behavior and limit exposure to untrusted sources until the patch is applied.
Conclusion
In summary, CVE-2026-21547 is a high-severity denial of service vulnerability affecting an unknown Android package. Users are advised to update to the patched version as soon as it becomes available to mitigate risks. Monitoring tools like Vulert can assist in identifying vulnerabilities in your applications.
See every vulnerability recorded for :unknown: →
FAQ
CVE-2026-21547 is a high-severity vulnerability in an unknown Android package that can lead to denial of service (DoS).
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
While no specific workarounds are provided, it is recommended to monitor your application for unusual behavior and limit its exposure to untrusted sources.
The patch for this vulnerability is scheduled to be available in SoCVersion:2026-06-05.
Exploitation of this vulnerability can lead to application crashes and unresponsive behavior, significantly affecting user experience.
References
Related vulnerabilities
Recent vulnerabilities recorded for :unknown:.
