CVE-2025-48595

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 0/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation.

CISA Known Exploited Vulnerability

Vendor / Product Android — Framework
Date Added 2026-06-02
Remediation Due 2026-06-05
https://source.android.com/docs/security/bulletin/2026/2026-06-01 ; https://nvd.nist.gov/vuln/detail/CVE-2025-48595

Weakness Classification (1)

Affected Software (6)

VendorProductVersion
google android 14.0
google android 15.0
google android 16.0
google android 16.0
google android 16.0
google android 16.0

Bug Bounty Relevance

0 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

1.95%
Raw Score 0.019470
Percentile 80.1%
Date 2026-10-28

Intelligence Sources

kev ref →