A vulnerability, which was classified as critical, was found in Google Android 17. Affected by this issue is the function
PackageInstaller of the file frameworks/base/services/core/java/com/android/server/pm/PackageInstallerSession.java. The manipulation results in denial of service.
This vulnerability is identified as CVE-2026-28575. The attack is only possible with local access. There is not any exploit available.
