{"id":"CVE-2026-28633","title":"In initForUserNoTracing of VoiceInteractionManagerService.java, there is a possible persistent denial of service due to resource exhaustion","summary":"In initForUserNoTracing of VoiceInteractionManagerService.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User …","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"vendor":"google","product":"android","affected":["android = 14.0","android = 15.0","android = 16.0","android = 17.0"],"published":"2026-09-08","updated":"2026-09-15","sourceUpdated":"2026-09-15T14:03:11.307","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-28633","references":[{"url":"https://source.android.com/docs/security/bulletin/2026/2026-09-01","label":"security@android.com"}],"tags":["nvd","cve.org"],"epss":0.00068,"epssPercentile":0.00035,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-10T16:23:32.572044Z"},"ingestedAt":"2026-09-08T19:08:49.642Z","slug":"CVE-2026-28633","body":"## Overview\n\nIn initForUserNoTracing of VoiceInteractionManagerService.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n## Affected\n\n- `android = 14.0`\n- `android = 15.0`\n- `android = 16.0`\n- `android = 17.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":201553,"id":"CVE-2026-28633","ts":1789399510997,"field":"cvss","old":null,"new":"5.5"},{"seq":201552,"id":"CVE-2026-28633","ts":1789399510997,"field":"severity","old":"none","new":"medium"},{"seq":200287,"id":"CVE-2026-28633","ts":1789397086418,"field":"cvss","old":"5.5","new":null},{"seq":200286,"id":"CVE-2026-28633","ts":1789397086418,"field":"severity","old":"medium","new":"none"},{"seq":198211,"id":"CVE-2026-28633","ts":1789391743007,"field":"cvss","old":null,"new":"5.5"},{"seq":198210,"id":"CVE-2026-28633","ts":1789391743007,"field":"severity","old":"none","new":"medium"},{"seq":196004,"id":"CVE-2026-28633","ts":1789383399507,"field":"cvss","old":"5.5","new":null},{"seq":196003,"id":"CVE-2026-28633","ts":1789383399507,"field":"severity","old":"medium","new":"none"},{"seq":194933,"id":"CVE-2026-28633","ts":1789380300523,"field":"cvss","old":null,"new":"5.5"},{"seq":194932,"id":"CVE-2026-28633","ts":1789380300523,"field":"severity","old":"none","new":"medium"},{"seq":193720,"id":"CVE-2026-28633","ts":1789378269045,"field":"cvss","old":"5.5","new":null},{"seq":193719,"id":"CVE-2026-28633","ts":1789378269045,"field":"severity","old":"medium","new":"none"},{"seq":192507,"id":"CVE-2026-28633","ts":1789376233420,"field":"cvss","old":null,"new":"5.5"},{"seq":192506,"id":"CVE-2026-28633","ts":1789376233420,"field":"severity","old":"none","new":"medium"},{"seq":191294,"id":"CVE-2026-28633","ts":1789373126728,"field":"cvss","old":"5.5","new":null},{"seq":191293,"id":"CVE-2026-28633","ts":1789373126728,"field":"severity","old":"medium","new":"none"},{"seq":190079,"id":"CVE-2026-28633","ts":1789369121162,"field":"cvss","old":null,"new":"5.5"},{"seq":190078,"id":"CVE-2026-28633","ts":1789369121162,"field":"severity","old":"none","new":"medium"},{"seq":188866,"id":"CVE-2026-28633","ts":1789368038470,"field":"cvss","old":"5.5","new":null},{"seq":188865,"id":"CVE-2026-28633","ts":1789368038470,"field":"severity","old":"medium","new":"none"},{"seq":187649,"id":"CVE-2026-28633","ts":1789364996623,"field":"cvss","old":null,"new":"5.5"},{"seq":187648,"id":"CVE-2026-28633","ts":1789364996623,"field":"severity","old":"none","new":"medium"},{"seq":186436,"id":"CVE-2026-28633","ts":1789363002518,"field":"cvss","old":"5.5","new":null},{"seq":186435,"id":"CVE-2026-28633","ts":1789363002518,"field":"severity","old":"medium","new":"none"},{"seq":185222,"id":"CVE-2026-28633","ts":1789360969816,"field":"cvss","old":null,"new":"5.5"},{"seq":185221,"id":"CVE-2026-28633","ts":1789360969816,"field":"severity","old":"none","new":"medium"},{"seq":184009,"id":"CVE-2026-28633","ts":1789357943526,"field":"cvss","old":"5.5","new":null},{"seq":184008,"id":"CVE-2026-28633","ts":1789357943526,"field":"severity","old":"medium","new":"none"},{"seq":182261,"id":"CVE-2026-28633","ts":1789354098007,"field":"cvss","old":null,"new":"5.5"},{"seq":182260,"id":"CVE-2026-28633","ts":1789354098007,"field":"severity","old":"none","new":"medium"},{"seq":181054,"id":"CVE-2026-28633","ts":1789352943510,"field":"cvss","old":"5.5","new":null},{"seq":181053,"id":"CVE-2026-28633","ts":1789352943510,"field":"severity","old":"medium","new":"none"},{"seq":179847,"id":"CVE-2026-28633","ts":1789350001204,"field":"cvss","old":null,"new":"5.5"},{"seq":179846,"id":"CVE-2026-28633","ts":1789350001204,"field":"severity","old":"none","new":"medium"},{"seq":178640,"id":"CVE-2026-28633","ts":1789347814441,"field":"cvss","old":"5.5","new":null},{"seq":178639,"id":"CVE-2026-28633","ts":1789347814441,"field":"severity","old":"medium","new":"none"},{"seq":177433,"id":"CVE-2026-28633","ts":1789346181816,"field":"cvss","old":null,"new":"5.5"},{"seq":177432,"id":"CVE-2026-28633","ts":1789346181816,"field":"severity","old":"none","new":"medium"},{"seq":176226,"id":"CVE-2026-28633","ts":1789342752124,"field":"cvss","old":"5.5","new":null},{"seq":176225,"id":"CVE-2026-28633","ts":1789342752124,"field":"severity","old":"medium","new":"none"},{"seq":176010,"id":"CVE-2026-28633","ts":1789342358628,"field":"cvss","old":null,"new":"5.5"},{"seq":176009,"id":"CVE-2026-28633","ts":1789342358628,"field":"severity","old":"none","new":"medium"},{"seq":175550,"id":"CVE-2026-28633","ts":1789338390127,"field":"cvss","old":"5.5","new":null},{"seq":175549,"id":"CVE-2026-28633","ts":1789338390127,"field":"severity","old":"medium","new":"none"},{"seq":174345,"id":"CVE-2026-28633","ts":1789334604869,"field":"cvss","old":null,"new":"5.5"},{"seq":174344,"id":"CVE-2026-28633","ts":1789334604869,"field":"severity","old":"none","new":"medium"},{"seq":173140,"id":"CVE-2026-28633","ts":1789333197547,"field":"cvss","old":"5.5","new":null},{"seq":173139,"id":"CVE-2026-28633","ts":1789333197547,"field":"severity","old":"medium","new":"none"},{"seq":171954,"id":"CVE-2026-28633","ts":1789330884586,"field":"cvss","old":null,"new":"5.5"},{"seq":171953,"id":"CVE-2026-28633","ts":1789330884586,"field":"severity","old":"none","new":"medium"}]}