{"id":"CVE-2026-28596","title":"In parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of service due to resource exhaustion","summary":"In parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interacti…","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"vendor":"google","product":"android","affected":["android = 14.0","android = 15.0","android = 16.0"],"published":"2026-09-08","updated":"2026-09-15","sourceUpdated":"2026-09-15T14:25:40.567","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-28596","references":[{"url":"https://source.android.com/docs/security/bulletin/2026/2026-09-01","label":"security@android.com"}],"tags":["nvd","cve.org"],"epss":0.00068,"epssPercentile":0.00036,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-10T17:14:10.563682Z"},"ingestedAt":"2026-09-08T19:08:49.643Z","slug":"CVE-2026-28596","body":"## Overview\n\nIn parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n## Affected\n\n- `android = 14.0`\n- `android = 15.0`\n- `android = 16.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":201505,"id":"CVE-2026-28596","ts":1789399510849,"field":"cvss","old":null,"new":"5.5"},{"seq":201504,"id":"CVE-2026-28596","ts":1789399510849,"field":"severity","old":"none","new":"medium"},{"seq":200239,"id":"CVE-2026-28596","ts":1789397086248,"field":"cvss","old":"5.5","new":null},{"seq":200238,"id":"CVE-2026-28596","ts":1789397086248,"field":"severity","old":"medium","new":"none"},{"seq":198163,"id":"CVE-2026-28596","ts":1789391739491,"field":"cvss","old":null,"new":"5.5"},{"seq":198162,"id":"CVE-2026-28596","ts":1789391739491,"field":"severity","old":"none","new":"medium"},{"seq":195956,"id":"CVE-2026-28596","ts":1789383399339,"field":"cvss","old":"5.5","new":null},{"seq":195955,"id":"CVE-2026-28596","ts":1789383399339,"field":"severity","old":"medium","new":"none"},{"seq":194885,"id":"CVE-2026-28596","ts":1789380300369,"field":"cvss","old":null,"new":"5.5"},{"seq":194884,"id":"CVE-2026-28596","ts":1789380300369,"field":"severity","old":"none","new":"medium"},{"seq":193672,"id":"CVE-2026-28596","ts":1789378268867,"field":"cvss","old":"5.5","new":null},{"seq":193671,"id":"CVE-2026-28596","ts":1789378268867,"field":"severity","old":"medium","new":"none"},{"seq":192459,"id":"CVE-2026-28596","ts":1789376233246,"field":"cvss","old":null,"new":"5.5"},{"seq":192458,"id":"CVE-2026-28596","ts":1789376233246,"field":"severity","old":"none","new":"medium"},{"seq":191246,"id":"CVE-2026-28596","ts":1789373126565,"field":"cvss","old":"5.5","new":null},{"seq":191245,"id":"CVE-2026-28596","ts":1789373126565,"field":"severity","old":"medium","new":"none"},{"seq":190031,"id":"CVE-2026-28596","ts":1789369120986,"field":"cvss","old":null,"new":"5.5"},{"seq":190030,"id":"CVE-2026-28596","ts":1789369120986,"field":"severity","old":"none","new":"medium"},{"seq":188818,"id":"CVE-2026-28596","ts":1789368038307,"field":"cvss","old":"5.5","new":null},{"seq":188817,"id":"CVE-2026-28596","ts":1789368038307,"field":"severity","old":"medium","new":"none"},{"seq":187601,"id":"CVE-2026-28596","ts":1789364996479,"field":"cvss","old":null,"new":"5.5"},{"seq":187600,"id":"CVE-2026-28596","ts":1789364996479,"field":"severity","old":"none","new":"medium"},{"seq":186388,"id":"CVE-2026-28596","ts":1789363002340,"field":"cvss","old":"5.5","new":null},{"seq":186387,"id":"CVE-2026-28596","ts":1789363002340,"field":"severity","old":"medium","new":"none"},{"seq":185174,"id":"CVE-2026-28596","ts":1789360969669,"field":"cvss","old":null,"new":"5.5"},{"seq":185173,"id":"CVE-2026-28596","ts":1789360969669,"field":"severity","old":"none","new":"medium"},{"seq":183961,"id":"CVE-2026-28596","ts":1789357943363,"field":"cvss","old":"5.5","new":null},{"seq":183960,"id":"CVE-2026-28596","ts":1789357943363,"field":"severity","old":"medium","new":"none"},{"seq":182213,"id":"CVE-2026-28596","ts":1789354097858,"field":"cvss","old":null,"new":"5.5"},{"seq":182212,"id":"CVE-2026-28596","ts":1789354097858,"field":"severity","old":"none","new":"medium"},{"seq":181006,"id":"CVE-2026-28596","ts":1789352943322,"field":"cvss","old":"5.5","new":null},{"seq":181005,"id":"CVE-2026-28596","ts":1789352943322,"field":"severity","old":"medium","new":"none"},{"seq":179799,"id":"CVE-2026-28596","ts":1789350001029,"field":"cvss","old":null,"new":"5.5"},{"seq":179798,"id":"CVE-2026-28596","ts":1789350001029,"field":"severity","old":"none","new":"medium"},{"seq":178592,"id":"CVE-2026-28596","ts":1789347814275,"field":"cvss","old":"5.5","new":null},{"seq":178591,"id":"CVE-2026-28596","ts":1789347814275,"field":"severity","old":"medium","new":"none"},{"seq":177385,"id":"CVE-2026-28596","ts":1789346181672,"field":"cvss","old":null,"new":"5.5"},{"seq":177384,"id":"CVE-2026-28596","ts":1789346181672,"field":"severity","old":"none","new":"medium"},{"seq":176178,"id":"CVE-2026-28596","ts":1789342751961,"field":"cvss","old":"5.5","new":null},{"seq":176177,"id":"CVE-2026-28596","ts":1789342751961,"field":"severity","old":"medium","new":"none"},{"seq":175962,"id":"CVE-2026-28596","ts":1789342358466,"field":"cvss","old":null,"new":"5.5"},{"seq":175961,"id":"CVE-2026-28596","ts":1789342358466,"field":"severity","old":"none","new":"medium"},{"seq":175502,"id":"CVE-2026-28596","ts":1789338389967,"field":"cvss","old":"5.5","new":null},{"seq":175501,"id":"CVE-2026-28596","ts":1789338389967,"field":"severity","old":"medium","new":"none"},{"seq":174297,"id":"CVE-2026-28596","ts":1789334604143,"field":"cvss","old":null,"new":"5.5"},{"seq":174296,"id":"CVE-2026-28596","ts":1789334604143,"field":"severity","old":"none","new":"medium"},{"seq":173092,"id":"CVE-2026-28596","ts":1789333197379,"field":"cvss","old":"5.5","new":null},{"seq":173091,"id":"CVE-2026-28596","ts":1789333197379,"field":"severity","old":"medium","new":"none"},{"seq":171906,"id":"CVE-2026-28596","ts":1789330883766,"field":"cvss","old":null,"new":"5.5"},{"seq":171905,"id":"CVE-2026-28596","ts":1789330883766,"field":"severity","old":"none","new":"medium"}]}